Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3136372e3234392e34302e302f32322d3234203d3e203237383137.roa
File: 3136372e3234392e34302e302f32322d3234203d3e203237383137.roa (raw, json)
Hash identifier: vYjvn4plAs8sr8VbZeELIvvMgUETsrvf6KUwZiF/YLA=
Subject key identifier: B8:F6:6D:8D:8B:01:7A:64:34:E7:29:A3:6A:27:E2:89:46:C8:91:0E
Certificate issuer: /CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
Certificate serial: 7FFB78EDBA71498FC2B3B281F1541EEFEF898B8C
Authority key identifier: F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3136372e3234392e34302e302f32322d3234203d3e203237383137.roa
Signing time: Tue 04 Feb 2025 18:18:32 +0000
ROA not before: Tue 04 Feb 2025 18:13:32 +0000
ROA not after: Tue 03 Feb 2026 18:18:32 +0000
asID: 27817
IP address blocks: 167.249.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:fb:78:ed:ba:71:49:8f:c2:b3:b2:81:f1:54:1e:ef:ef:89:8b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8097A80F65CAD011E316F610FD2A7189B6F9D80
Validity
Not Before: Feb 4 18:13:32 2025 GMT
Not After : Feb 3 18:18:32 2026 GMT
Subject: CN=B8F66D8D8B017A6434E729A36A27E28946C8910E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:a1:40:23:ec:46:8d:08:dd:7f:36:a4:45:
c2:01:64:63:12:80:e7:57:3b:42:24:37:bb:40:dc:
e2:cb:f8:88:c6:78:05:53:12:31:38:72:c1:f4:b1:
33:57:22:3a:d4:52:59:6b:9e:92:1e:03:c1:6b:d7:
55:25:5a:cd:fb:37:49:14:c7:13:66:15:8a:8a:35:
fc:61:85:74:be:09:1c:ef:1b:91:bf:b5:8d:9f:97:
e5:ac:ff:cd:fc:b2:38:55:22:76:8a:4f:53:70:83:
b0:36:96:07:10:f1:71:09:23:2e:1e:d4:f3:ce:3d:
a6:06:71:c2:8b:ea:15:b7:f9:1f:af:e4:79:ac:dc:
f0:da:9d:9f:3a:92:b2:4f:50:2e:cc:8a:64:1d:ba:
dd:04:7e:da:13:4b:3c:8d:8d:74:64:c8:5f:64:ab:
f7:7b:cc:43:10:5d:92:70:77:a9:80:61:5b:69:37:
0b:43:38:92:30:2d:bd:6a:4c:81:54:8d:17:dd:64:
4e:56:f1:3e:4c:ae:7d:75:69:5c:08:ef:95:a1:dd:
95:38:8d:43:d6:2a:1e:b0:15:71:a2:f8:6b:ae:fc:
87:d2:c3:e6:55:99:c5:d8:6f:36:2d:ac:1d:8e:1b:
3d:87:4a:06:d3:ed:e6:93:62:63:bf:78:42:d6:77:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F6:6D:8D:8B:01:7A:64:34:E7:29:A3:6A:27:E2:89:46:C8:91:0E
X509v3 Authority Key Identifier:
keyid:F8:09:7A:80:F6:5C:AD:01:1E:31:6F:61:0F:D2:A7:18:9B:6F:9D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8097A80F65CAD011E316F610FD2A7189B6F9D80.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79AB99C105ED1087E2A1BD21EAE402A69718A9BAE4D9F2EF391C083368F38147/0/3136372e3234392e34302e302f32322d3234203d3e203237383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.40.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:9c:b4:7b:86:42:a0:71:90:90:d3:b0:0d:6a:4c:34:c5:c9:
0a:64:1b:8a:d0:f4:ea:ae:b3:54:6a:0a:20:77:c1:5d:94:95:
2e:ad:c1:0f:9e:da:a6:e6:3d:96:6d:6d:4d:a5:6e:39:ea:ab:
32:d8:ee:21:82:3e:f7:e8:34:04:32:63:ea:5a:c5:61:72:9c:
43:11:6a:e1:3b:ae:09:be:b1:0b:35:84:8b:ed:68:14:4d:42:
39:a1:d4:55:d6:42:b6:58:c4:4f:d6:2c:a5:d2:d5:2e:ac:cf:
f1:7c:32:ae:ae:91:c9:07:dd:f7:a5:70:bf:ef:c4:e0:3c:7c:
e9:22:d7:c0:87:74:9b:a2:4d:d0:40:03:96:34:e1:71:c4:7d:
0a:d0:68:51:22:9b:63:12:de:bb:15:b5:da:0c:76:56:54:3b:
0a:e8:11:e1:6a:a4:6b:73:b3:6d:3d:50:e9:04:5c:7c:58:72:
48:8f:4f:04:7f:51:46:c1:30:e6:d7:62:9a:17:1f:28:51:7a:
f6:6c:69:bc:ec:55:d4:37:43:71:b3:77:4a:c4:da:31:5d:e6:
1a:b2:47:b2:ea:a1:35:9e:aa:f4:16:8b:27:ed:c9:0e:cb:3c:
3c:c7:46:0f:66:84:e9:0c:2b:2d:7b:fa:75:ad:40:42:68:e5:
b5:4e:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:16:33 2025 by rpki-client