Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32342d3234203d3e20323633383135.roa
File: 3136372e3234392e3139322e302f32342d3234203d3e20323633383135.roa (raw, json)
Hash identifier: s7+6PZmbStLVAJ8hGJPVakLuC+oaAQ7LAFICHOnM5cU=
Subject key identifier: A5:7D:A1:D9:DE:CC:EB:18:E7:92:05:94:AE:A3:DD:61:07:17:08:AE
Certificate issuer: /CN=8511BF5F476710251836E1F3F5006C888AE1B68A
Certificate serial: 10273D685A2EAB13D4B963727C8F8042A158CDDD
Authority key identifier: 85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32342d3234203d3e20323633383135.roa
Signing time: Tue 04 Feb 2025 20:04:01 +0000
ROA not before: Tue 04 Feb 2025 19:59:01 +0000
ROA not after: Tue 03 Feb 2026 20:04:01 +0000
asID: 263815
IP address blocks: 167.249.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:27:3d:68:5a:2e:ab:13:d4:b9:63:72:7c:8f:80:42:a1:58:cd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511BF5F476710251836E1F3F5006C888AE1B68A
Validity
Not Before: Feb 4 19:59:01 2025 GMT
Not After : Feb 3 20:04:01 2026 GMT
Subject: CN=A57DA1D9DECCEB18E7920594AEA3DD61071708AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:ed:ac:5e:4a:21:2b:09:5f:40:29:36:94:
37:de:25:e2:b8:2b:e5:3e:db:45:cb:e8:4e:5f:0f:
b8:ba:9b:59:5a:c9:f2:ec:50:b4:8c:4e:9a:b6:52:
ce:e9:9f:bb:cb:a7:4a:ae:f4:2a:5d:cf:5b:a9:da:
d9:97:0e:e2:29:61:79:d8:95:d2:87:36:79:83:de:
96:6a:ac:3d:30:55:a4:85:e9:92:15:99:00:e1:3b:
14:42:9e:e7:53:46:71:7c:10:29:0a:c6:9d:1c:ac:
7d:8e:26:68:1e:57:31:0d:03:4b:51:28:6f:98:35:
24:0c:3b:a3:67:82:0e:be:cf:94:3d:88:95:06:6c:
1d:07:4c:6a:61:25:b7:59:f3:d8:dc:cd:24:75:ac:
02:e5:2f:ea:54:8a:ab:27:22:e1:46:ea:d8:fc:10:
c1:6a:13:a4:94:fb:ae:e7:e7:fa:9f:b3:e4:0d:f5:
80:60:58:c4:9c:45:e8:00:a2:18:a4:59:58:1b:59:
b5:18:4e:36:de:7e:7e:93:f2:ec:97:aa:45:6b:99:
10:70:c5:c4:4b:57:e9:bb:05:3f:5d:08:da:1b:e3:
f1:e7:0a:80:9e:46:16:52:21:e7:49:c2:07:7c:67:
16:aa:15:20:99:6b:48:37:c8:b2:de:f4:19:b0:fb:
51:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:A1:D9:DE:CC:EB:18:E7:92:05:94:AE:A3:DD:61:07:17:08:AE
X509v3 Authority Key Identifier:
keyid:85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32342d3234203d3e20323633383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.192.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3e:9b:f1:85:43:75:92:cc:3e:47:16:a0:f5:09:78:6a:b3:
aa:31:bc:3e:8f:72:bf:04:7b:ba:13:41:9f:c0:7a:bf:c6:ad:
54:c2:71:85:93:dd:43:60:f7:30:65:7e:f7:e2:e9:ff:67:04:
8c:97:13:77:7f:e9:25:e1:cb:a1:9a:0b:11:ff:9d:5d:0e:c4:
32:c6:19:c2:97:c8:3c:26:a9:be:d9:45:1f:4f:c1:e6:f6:d8:
d4:ac:6d:00:96:31:13:8e:38:b3:bb:44:1d:74:78:e1:ec:46:
f1:14:97:7b:9d:3d:ef:68:48:a4:a5:1b:5f:47:d4:f1:80:ce:
29:f2:e0:c1:34:a1:f9:9b:75:45:fb:74:f4:a4:02:16:14:7b:
b2:73:c5:f7:ab:ff:5d:97:df:c7:34:8e:9d:42:6c:bf:15:29:
0b:90:d5:d9:6f:be:f2:22:1e:73:62:48:f4:60:58:31:f9:b4:
a3:fa:8c:81:30:94:8b:bc:f4:24:59:91:5c:2d:ea:c3:f4:61:
7d:93:b2:ee:8c:35:0a:dc:07:c5:b0:16:af:42:d5:65:e1:7e:
95:2c:c0:c7:21:85:79:a0:c5:62:b3:74:4d:76:c9:d8:08:7f:
36:19:43:45:11:89:45:fe:b6:63:06:00:59:54:7c:79:24:fe:
90:e6:28:95
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUECc9aFouqxPUuWNyfI+AQqFYzd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxMUJGNUY0NzY3MTAyNTE4MzZFMUYzRjUwMDZDODg4
QUUxQjY4QTAeFw0yNTAyMDQxOTU5MDFaFw0yNjAyMDMyMDA0MDFaMDMxMTAvBgNV
BAMTKEE1N0RBMUQ5REVDQ0VCMThFNzkyMDU5NEFFQTNERDYxMDcxNzA4QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAme2sXkohKwlfQCk2lDfeJeK4
K+U+20XL6E5fD7i6m1layfLsULSMTpq2Us7pn7vLp0qu9Cpdz1up2tmXDuIpYXnY
ldKHNnmD3pZqrD0wVaSF6ZIVmQDhOxRCnudTRnF8ECkKxp0crH2OJmgeVzENA0tR
KG+YNSQMO6Nngg6+z5Q9iJUGbB0HTGphJbdZ89jczSR1rALlL+pUiqsnIuFG6tj8
EMFqE6SU+67n5/qfs+QN9YBgWMScRegAohikWVgbWbUYTjbefn6T8uyXqkVrmRBw
xcRLV+m7BT9dCNob4/HnCoCeRhZSIedJwgd8ZxaqFSCZa0g3yLLe9Bmw+1FvAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUpX2h2d7M6xjnkgWUrqPdYQcXCK4wHwYDVR0j
BBgwFoAUhRG/X0dnECUYNuHz9QBsiIrhtoowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OTlEQjEyRDczMDYyQjJENDgyMjdCRUEzQzUzQUM0MDYw
QjBFRjlBMzJFMThCQUE3QkM4MDcxQjI3OTg4RjQwLzAvODUxMUJGNUY0NzY3MTAy
NTE4MzZFMUYzRjUwMDZDODg4QUUxQjY4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTExQkY1RjQ3NjcxMDI1MTgz
NkUxRjNGNTAwNkM4ODhBRTFCNjhBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzk5REIxMkQ3MzA2MkIyRDQ4MjI3QkVBM0M1M0FDNDA2MEIwRUY5QTMy
RTE4QkFBN0JDODA3MUIyNzk4OEY0MC8wLzMxMzYzNzJlMzIzNDM5MmUzMTM5MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzODMxMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACn
+cAwDQYJKoZIhvcNAQELBQADggEBAHM+m/GFQ3WSzD5HFqD1CXhqs6oxvD6Pcr8E
e7oTQZ/Aer/GrVTCcYWT3UNg9zBlfvfi6f9nBIyXE3d/6SXhy6GaCxH/nV0OxDLG
GcKXyDwmqb7ZRR9Pweb22NSsbQCWMROOOLO7RB10eOHsRvEUl3udPe9oSKSlG19H
1PGAziny4ME0ofmbdUX7dPSkAhYUe7Jzxfer/12X38c0jp1CbL8VKQuQ1dlvvvIi
HnNiSPRgWDH5tKP6jIEwlIu89CRZkVwt6sP0YX2Tsu6MNQrcB8WwFq9C1WXhfpUs
wMchhXmgxWKzdE12ydgIfzYZQ0URiUX+tmMGAFlUfHkk/pDmKJU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:59 2025 by rpki-client