Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31312e302f32342d3234203d3e203137313437.roa
File: 3136332e3234372e31312e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier: U+5F+doKcHihVJDAYm6Z4BZ61hAazQbdWBLf0z8EokI=
Subject key identifier: D6:E4:8B:51:96:48:BE:9E:D7:49:C0:25:C3:2A:DA:94:05:62:18:FC
Certificate issuer: /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial: 0A6557AF891A0D30D5DA732D044253AF71BE765F
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31312e302f32342d3234203d3e203137313437.roa
Signing time: Tue 04 Feb 2025 18:26:03 +0000
ROA not before: Tue 04 Feb 2025 18:21:03 +0000
ROA not after: Tue 03 Feb 2026 18:26:03 +0000
asID: 17147
IP address blocks: 163.247.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:65:57:af:89:1a:0d:30:d5:da:73:2d:04:42:53:af:71:be:76:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Validity
Not Before: Feb 4 18:21:03 2025 GMT
Not After : Feb 3 18:26:03 2026 GMT
Subject: CN=D6E48B519648BE9ED749C025C32ADA94056218FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:89:73:60:6f:0c:b1:e7:05:ed:b7:27:f2:
d6:96:bb:a1:e2:78:df:84:c0:84:b7:45:28:02:7c:
e2:fe:df:bf:d3:3b:e9:c3:b4:32:b2:7a:03:78:79:
c4:5d:f3:0c:c8:69:fb:02:23:ac:a9:62:69:f7:51:
ba:33:35:0d:b5:38:3a:fc:e1:56:96:b8:29:d4:98:
1d:bb:ce:9d:93:5b:56:73:83:5b:96:95:1d:6a:51:
30:16:05:ad:c5:f9:ad:3f:e2:52:c1:31:bc:94:be:
3c:10:a4:b2:65:95:3c:19:2c:91:6c:d0:46:a8:3e:
cd:52:4c:ce:40:86:5a:95:c2:49:5f:a5:50:c7:c9:
6c:50:df:7d:b5:dc:3e:4e:aa:e7:59:8a:da:f3:3e:
66:35:c6:53:cb:67:6b:72:6a:7e:e2:d6:e0:66:88:
82:67:79:67:db:80:33:55:1c:3d:57:0f:01:aa:5f:
5f:f1:ff:af:a1:8c:3e:7a:fb:f6:e9:c7:44:f9:c9:
f9:3f:93:43:95:6b:ee:7f:8d:48:e1:78:6f:d4:95:
cf:f4:3a:70:a3:b0:03:76:f5:b2:55:6b:32:6b:9e:
0d:c0:ca:1b:01:46:c5:e8:9d:8b:d7:d0:d9:19:67:
4e:a2:1c:3e:10:57:f2:db:3f:fb:b2:65:6b:d6:34:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E4:8B:51:96:48:BE:9E:D7:49:C0:25:C3:2A:DA:94:05:62:18:FC
X509v3 Authority Key Identifier:
keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31312e302f32342d3234203d3e203137313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.247.11.0/24
Signature Algorithm: sha256WithRSAEncryption
70:79:26:f3:8c:c5:f8:d9:9b:ba:27:47:a2:cf:d3:ea:41:ba:
7a:64:1f:58:45:d6:01:9d:4e:76:99:5d:31:18:15:6e:d3:53:
ce:5b:3e:2d:4b:05:9d:50:b8:41:53:a4:7d:21:9a:2a:e5:33:
8b:cb:22:2f:ab:c6:b4:d1:3f:36:74:6a:61:af:cb:01:34:26:
08:38:a2:80:a8:69:5b:e2:1e:3c:db:a6:ad:41:1e:62:c9:bc:
ac:6f:8a:15:e4:eb:38:af:8a:15:cd:01:7e:32:68:6c:e4:7a:
70:86:92:8e:5a:aa:fa:02:12:9b:78:4d:19:7e:a3:7f:91:ce:
3f:c3:69:1d:5b:cf:98:eb:e6:19:44:39:72:ac:74:e0:65:96:
f6:61:43:24:35:53:55:7e:12:e6:62:28:7e:81:b3:e0:8d:44:
ce:7d:05:c4:dd:b9:7e:bd:d1:27:25:42:7d:ed:c1:de:82:97:
4e:96:f8:79:6b:cc:46:99:e4:5a:a5:77:af:a6:3d:2a:de:e3:
56:e9:e5:30:79:25:64:2b:5a:ea:c3:06:5b:0f:48:c8:94:0e:
73:4d:e9:76:d2:0c:0d:a7:37:6b:e6:1f:84:5c:df:df:6e:7b:
eb:27:a0:3b:fb:3b:0b:37:af:1b:9e:ff:0f:3d:b1:ea:f6:ee:
96:b7:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:23 2025 by rpki-client