Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34332e302f32342d3234203d3e203137313437.roa
File: 3136332e3234372e34332e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier: +w5ZzNphbnISYAEVFbwX+VsF+Q4+cLNjhXCtKc7dcWY=
Subject key identifier: D6:30:5F:41:37:70:80:D5:97:F5:DD:90:91:F1:62:CD:8D:40:4D:01
Certificate issuer: /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial: 334498386DB88730CB6F036DBD09F35F76323B68
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34332e302f32342d3234203d3e203137313437.roa
Signing time: Tue 04 Feb 2025 18:26:06 +0000
ROA not before: Tue 04 Feb 2025 18:21:06 +0000
ROA not after: Tue 03 Feb 2026 18:26:06 +0000
asID: 17147
IP address blocks: 163.247.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:44:98:38:6d:b8:87:30:cb:6f:03:6d:bd:09:f3:5f:76:32:3b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Validity
Not Before: Feb 4 18:21:06 2025 GMT
Not After : Feb 3 18:26:06 2026 GMT
Subject: CN=D6305F41377080D597F5DD9091F162CD8D404D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:ea:19:9b:2f:b0:c3:10:fb:ce:60:9e:90:
c0:3f:57:35:ad:c3:f9:fc:65:ea:02:29:85:84:79:
06:6d:3b:17:37:d2:c6:b8:7c:f0:3b:72:79:80:52:
61:8e:81:da:72:50:ba:0d:dc:a5:59:4c:a3:20:e9:
03:61:42:aa:54:be:e7:62:a8:7b:a2:0a:09:0f:8d:
b5:f4:89:e8:d3:88:5f:b2:aa:03:da:3f:1f:3e:cb:
3d:f7:d5:e8:75:89:70:ef:ce:db:3a:7e:87:01:3c:
53:c7:7d:12:ff:65:62:9b:74:fa:1f:64:8e:22:74:
b0:ee:72:3c:2e:c6:39:da:0e:50:ae:d3:ea:11:92:
50:15:8b:ae:17:39:49:f5:51:21:f8:5b:fd:52:14:
24:cf:5d:40:ba:e8:ce:f1:dd:cd:ff:2d:94:1e:8b:
4a:f7:18:87:92:2e:05:39:39:10:88:a6:40:2f:f9:
5d:6e:5a:84:5f:6a:c9:2a:9a:37:d7:4c:be:bc:e2:
c7:a0:1a:d4:97:62:13:65:f4:98:92:07:96:05:f8:
ec:1d:c6:3b:dc:4e:de:0b:aa:06:92:e7:46:54:34:
48:e7:36:ac:98:88:88:ab:ae:2f:e6:90:7c:02:6e:
cd:6d:35:76:a3:38:0e:02:13:50:4e:a4:cf:7a:dc:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:30:5F:41:37:70:80:D5:97:F5:DD:90:91:F1:62:CD:8D:40:4D:01
X509v3 Authority Key Identifier:
keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34332e302f32342d3234203d3e203137313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.247.43.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4b:7e:67:6a:b4:e7:36:35:98:d9:7b:13:54:38:35:59:80:
37:19:12:09:2b:00:1b:5f:92:ad:90:21:c4:22:c9:86:f0:8e:
a0:01:0a:46:65:50:00:bd:37:21:41:2d:3d:61:e9:9f:e0:20:
5f:e6:ed:18:22:be:58:b4:78:8e:40:38:97:50:3e:ea:ea:23:
cd:01:33:e7:19:21:3c:fc:72:d7:77:80:de:b6:43:94:92:93:
91:b6:ae:57:9a:a8:7e:4f:7a:c4:d8:4b:ad:b7:0a:5f:c5:c8:
4f:6f:6a:36:1e:f2:12:cf:1a:67:94:16:59:74:81:4b:31:43:
e9:70:57:76:c8:52:c1:72:bc:83:7f:dc:88:7c:be:d0:e4:5a:
27:62:00:24:a6:91:e0:99:45:bd:23:1c:63:56:4b:b7:75:a2:
10:43:89:45:1b:c2:1e:d2:29:9f:da:de:91:e1:85:4f:57:73:
84:40:1a:3d:aa:a2:00:16:ad:b8:dc:ef:59:a2:ff:3d:a0:9b:
40:5d:45:70:cc:cd:9a:1c:e6:95:60:95:bd:d1:5c:4f:56:2f:
54:90:1e:28:f1:68:18:f9:88:3a:50:34:00:1a:67:a0:04:c8:
f7:a0:72:f8:bd:69:48:87:55:ff:64:0c:92:5c:6b:ad:40:7f:
ed:15:7a:ab
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUM0SYOG24hzDLbwNtvQnzX3YyO2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNTAyMDQxODIxMDZaFw0yNjAyMDMxODI2MDZaMDMxMTAvBgNV
BAMTKEQ2MzA1RjQxMzc3MDgwRDU5N0Y1REQ5MDkxRjE2MkNEOEQ0MDREMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtOoZmy+wwxD7zmCekMA/VzWt
w/n8ZeoCKYWEeQZtOxc30sa4fPA7cnmAUmGOgdpyULoN3KVZTKMg6QNhQqpUvudi
qHuiCgkPjbX0iejTiF+yqgPaPx8+yz331eh1iXDvzts6focBPFPHfRL/ZWKbdPof
ZI4idLDucjwuxjnaDlCu0+oRklAVi64XOUn1USH4W/1SFCTPXUC66M7x3c3/LZQe
i0r3GIeSLgU5ORCIpkAv+V1uWoRfaskqmjfXTL684segGtSXYhNl9JiSB5YF+Owd
xjvcTt4LqgaS50ZUNEjnNqyYiIirri/mkHwCbs1tNXajOA4CE1BOpM963Ei5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1jBfQTdwgNWX9d2QkfFizY1ATQEwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKP3KzAN
BgkqhkiG9w0BAQsFAAOCAQEAVkt+Z2q05zY1mNl7E1Q4NVmANxkSCSsAG1+SrZAh
xCLJhvCOoAEKRmVQAL03IUEtPWHpn+AgX+btGCK+WLR4jkA4l1A+6uojzQEz5xkh
PPxy13eA3rZDlJKTkbauV5qofk96xNhLrbcKX8XIT29qNh7yEs8aZ5QWWXSBSzFD
6XBXdshSwXK8g3/ciHy+0ORaJ2IAJKaR4JlFvSMcY1ZLt3WiEEOJRRvCHtIpn9re
keGFT1dzhEAaPaqiABatuNzvWaL/PaCbQF1FcMzNmhzmlWCVvdFcT1YvVJAeKPFo
GPmIOlA0ABpnoATI96By+L1pSIdV/2QMklxrrUB/7RV6qw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:01 2025 by rpki-client