Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3233392e302e302f31362d3234203d3e203232303437.roa
File: 3230312e3233392e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier: vCNImPXRuQ6P/lm9k/pVmG9hjz7ZcS69HQrbxDffjKE=
Subject key identifier: B8:C3:9B:A6:51:46:60:A8:C9:E3:E9:6D:C3:C3:DA:45:1D:06:37:ED
Certificate issuer: /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial: 12AAA22D6ACDFCD983D2DD7CCC8D8CF89A389D58
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3233392e302e302f31362d3234203d3e203232303437.roa
Signing time: Tue 04 Feb 2025 18:19:18 +0000
ROA not before: Tue 04 Feb 2025 18:14:18 +0000
ROA not after: Tue 03 Feb 2026 18:19:18 +0000
asID: 22047
IP address blocks: 201.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:aa:a2:2d:6a:cd:fc:d9:83:d2:dd:7c:cc:8d:8c:f8:9a:38:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Validity
Not Before: Feb 4 18:14:18 2025 GMT
Not After : Feb 3 18:19:18 2026 GMT
Subject: CN=B8C39BA6514660A8C9E3E96DC3C3DA451D0637ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:d4:21:29:46:05:b8:fe:61:20:6e:9c:a3:
5f:4a:11:4c:f2:d6:2f:b7:93:39:da:b4:93:94:d8:
92:04:de:b7:08:c1:6c:5b:d6:7f:6e:3a:a1:c3:22:
7b:fb:9d:cc:15:6d:f7:07:33:f1:ad:9e:22:4b:25:
90:db:62:31:24:a6:3a:88:9a:d5:cd:08:f7:4d:24:
bd:10:f6:a5:a3:a1:98:71:34:a6:eb:29:29:68:3f:
9e:2c:43:ef:97:94:61:9f:59:e3:43:c5:78:0a:8f:
70:a6:a7:f8:9c:11:5d:ad:0e:d4:ea:33:2b:c1:19:
5f:70:ae:74:0a:cf:16:48:07:6d:01:20:b7:7e:5b:
57:71:9f:9c:6a:a1:c5:ea:82:38:f8:5f:2b:00:41:
81:58:75:8f:ef:60:f3:78:34:1b:1f:1c:41:b9:34:
33:ad:30:61:dd:4e:d1:5b:bb:36:1d:a2:79:8b:f6:
17:89:0e:40:fb:8b:d9:dc:be:02:46:05:21:4c:5e:
6f:40:bc:5b:9e:64:87:18:1e:45:ef:5a:26:5a:74:
81:4e:85:aa:51:b6:48:a0:eb:dc:4a:8e:d1:6b:13:
03:16:ae:3b:e1:4c:61:24:57:d5:11:2c:4a:31:aa:
31:64:8a:3f:1b:8c:c5:73:fe:e6:a8:d7:1c:1a:53:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C3:9B:A6:51:46:60:A8:C9:E3:E9:6D:C3:C3:DA:45:1D:06:37:ED
X509v3 Authority Key Identifier:
keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3233392e302e302f31362d3234203d3e203232303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:f1:a5:d8:e2:28:a1:84:b7:f9:0f:e1:9c:33:13:5a:ce:f6:
7e:95:ac:7d:47:db:a5:1d:d1:d3:dc:64:3f:fa:ec:4c:09:4e:
92:91:1b:c1:f8:4b:7d:b0:cf:c2:55:a1:c1:b0:0c:bc:b6:d3:
49:ab:35:67:21:36:c7:54:8a:df:30:55:52:12:24:5c:8a:8c:
6b:75:bd:e3:3a:48:a9:20:6e:86:29:cf:28:55:3e:32:db:33:
cd:cd:7e:0e:a6:be:96:ba:cd:e9:57:bf:88:b9:f2:d4:53:fc:
52:4a:a6:dd:bd:28:ff:23:60:f7:91:dd:51:97:e9:de:d6:d3:
55:b6:84:bc:08:02:2a:67:76:49:24:15:9a:91:70:f1:5b:d9:
5d:b3:c4:1c:67:00:6e:40:1b:4b:ef:9e:2b:1c:a0:a8:57:b9:
f9:51:4f:78:4b:ed:d0:49:4e:39:38:ce:84:80:6e:fc:50:25:
70:14:bd:41:7c:ea:4b:19:cf:64:9a:58:83:4e:74:e1:d4:ce:
e3:d8:57:e6:45:d4:42:7d:55:cf:d5:0b:09:c0:e4:51:06:9c:
f0:f6:80:f3:3d:03:13:0d:04:16:de:a0:73:14:7f:29:19:75:
8d:36:95:fe:60:4e:ed:43:db:8e:e6:43:dd:7d:a7:9c:eb:d8:
0c:63:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:42 2025 by rpki-client