Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3234312e302e302f31362d3234203d3e203232303437.roa
File: 3230312e3234312e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier: 6DaJpFxrIZLL8uOgcC668w0y8LBJypYCO3gfN/9CJ10=
Subject key identifier: 36:C1:61:B5:A3:0B:47:39:88:D6:3C:4F:6A:05:E6:09:07:32:D9:84
Certificate issuer: /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial: 7CD19847C16DD4064CF5D37C4D86C4C94B3D897D
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3234312e302e302f31362d3234203d3e203232303437.roa
Signing time: Tue 04 Feb 2025 18:19:16 +0000
ROA not before: Tue 04 Feb 2025 18:14:16 +0000
ROA not after: Tue 03 Feb 2026 18:19:16 +0000
asID: 22047
IP address blocks: 201.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d1:98:47:c1:6d:d4:06:4c:f5:d3:7c:4d:86:c4:c9:4b:3d:89:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Validity
Not Before: Feb 4 18:14:16 2025 GMT
Not After : Feb 3 18:19:16 2026 GMT
Subject: CN=36C161B5A30B473988D63C4F6A05E6090732D984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:6c:0c:63:93:88:fa:6c:6d:58:73:dd:63:
3b:2c:c0:1e:01:17:98:4a:a6:6e:3a:19:5d:71:19:
04:9c:71:db:27:40:5c:43:c5:b8:a5:55:bc:76:c9:
60:b0:c7:15:8f:37:6f:ac:65:69:19:e8:43:e1:78:
c5:db:b8:06:dc:86:64:f8:a7:38:53:20:16:8e:7f:
39:4c:c9:9c:c6:ae:47:ac:a7:ae:a2:e3:f9:4b:69:
9a:1f:1d:3e:76:27:38:50:3b:94:dd:c3:35:0f:c2:
b9:8d:cf:46:68:74:3e:74:c7:1b:cf:80:54:ab:11:
4c:72:12:f6:e3:f1:a4:43:a0:38:1d:e8:81:61:bf:
9e:c3:67:18:2a:04:e8:fe:67:4e:c1:25:6b:57:10:
cd:9e:0f:78:7f:ae:c7:42:ac:f6:4b:cf:36:20:a9:
4f:1a:93:b3:23:8e:b7:99:eb:c6:4a:0d:3f:e3:81:
8a:41:ee:e7:96:b8:2b:65:38:03:9b:8f:1f:da:64:
22:48:50:a4:b0:f0:2b:fd:d4:97:48:82:5a:c9:6d:
29:2d:2e:23:af:ed:40:3c:52:24:ed:5f:aa:2d:be:
f5:73:89:33:30:8e:c0:cb:fa:c5:f6:2a:0d:5e:35:
fc:a6:3e:bb:20:bf:f5:d3:e1:74:a6:b4:3b:2c:c8:
a0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C1:61:B5:A3:0B:47:39:88:D6:3C:4F:6A:05:E6:09:07:32:D9:84
X509v3 Authority Key Identifier:
keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3234312e302e302f31362d3234203d3e203232303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.241.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:66:b3:88:6f:e7:45:99:53:49:e1:a0:55:a5:9f:36:15:81:
32:76:b0:79:3a:2c:db:46:86:d0:35:de:ba:53:3d:98:f2:12:
c5:ac:d5:a9:75:75:82:ea:b5:5f:c7:21:db:8a:6c:c9:ce:03:
be:c0:58:8e:cf:9f:ac:0b:b7:0c:4b:84:91:3c:dc:98:ac:45:
07:0d:c3:10:d3:3b:2d:dd:85:8e:31:be:06:89:5c:90:ed:3f:
fc:8c:e2:22:fd:c0:57:de:ed:0a:9b:42:e2:12:02:c3:b9:0e:
7f:30:12:6e:d5:2a:51:57:c0:41:94:b5:d2:91:17:f7:cb:0d:
38:b2:5c:27:03:d2:94:9e:ff:d6:eb:bc:2e:e6:3b:a4:36:1b:
48:91:93:62:8c:b6:3b:9d:f6:48:55:b8:d0:42:a1:76:b0:68:
00:2f:7d:25:f0:2a:c1:d2:12:2c:23:f5:b8:83:00:68:3f:14:
2d:38:24:dd:28:38:c0:a5:b9:6a:be:35:5e:f0:96:56:1d:60:
34:30:1e:48:54:31:1e:99:4f:ed:e1:29:e5:f6:4c:ca:cd:f0:
58:ac:8b:dd:db:34:eb:d0:a5:a0:85:70:cf:f5:14:b5:db:30:
0a:e9:d4:8b:5e:f9:4c:a7:38:d4:2c:1a:33:8e:c0:87:3c:24:
bd:01:ef:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:47 2025 by rpki-client