Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/3139322e3134312e342e302f32322d3234203d3e20323633313730.roa
File: 3139322e3134312e342e302f32322d3234203d3e20323633313730.roa (raw, json)
Hash identifier: NfBLl3IM5qjqysly+WVZiJlj7l5/eqReM8/9ZXtHK3Q=
Subject key identifier: FD:87:85:02:78:8B:EC:F7:D7:51:84:A0:7B:C5:70:64:B8:49:61:42
Certificate issuer: /CN=AF2C27ED749D14E69137DB11F778C7F3F40501DD
Certificate serial: 32B87242AA005D1F0B34FE105459E53FCC426417
Authority key identifier: AF:2C:27:ED:74:9D:14:E6:91:37:DB:11:F7:78:C7:F3:F4:05:01:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/3139322e3134312e342e302f32322d3234203d3e20323633313730.roa
Signing time: Tue 04 Feb 2025 18:54:03 +0000
ROA not before: Tue 04 Feb 2025 18:49:03 +0000
ROA not after: Tue 03 Feb 2026 18:54:03 +0000
asID: 263170
IP address blocks: 192.141.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b8:72:42:aa:00:5d:1f:0b:34:fe:10:54:59:e5:3f:cc:42:64:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF2C27ED749D14E69137DB11F778C7F3F40501DD
Validity
Not Before: Feb 4 18:49:03 2025 GMT
Not After : Feb 3 18:54:03 2026 GMT
Subject: CN=FD878502788BECF7D75184A07BC57064B8496142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:0f:03:78:3b:4b:c1:88:14:ce:6e:a0:e9:
fa:fc:49:ce:e3:8d:93:f7:92:ea:bb:d5:93:65:4e:
f5:82:08:0e:d6:b3:ee:2b:33:19:b2:9a:99:19:8f:
f3:84:a7:2a:20:2f:43:0a:c7:3d:5a:46:7c:6f:99:
b0:63:14:5b:75:a6:89:9f:12:e1:77:0f:31:25:da:
b4:eb:66:91:9e:2f:3c:0f:46:6c:8b:f8:a0:3f:01:
14:43:1f:f4:48:58:2c:f2:8f:cd:3a:aa:9d:79:16:
98:4f:5c:4e:50:dd:1a:f5:1c:93:18:13:b3:72:54:
98:31:06:86:92:e4:32:9e:52:34:e4:bb:a4:96:16:
43:28:b8:fe:45:d9:67:e4:7a:0b:77:57:9a:cf:cf:
ae:ef:bd:4d:ca:fa:88:e3:f8:11:77:1a:49:5b:c1:
67:74:d3:0e:41:ba:e4:a6:9a:51:87:65:68:78:6e:
41:39:6e:33:01:96:bf:6e:25:71:7f:16:47:22:6e:
84:30:d0:7c:67:8d:71:36:16:a5:8f:5d:8f:09:0d:
c4:9f:1d:c7:dc:f6:29:74:de:35:fc:d3:90:39:b5:
ed:a7:2d:df:b1:f0:d6:9b:10:d4:01:90:fd:62:55:
ec:23:16:6f:7d:2b:59:8d:3d:1b:1c:bb:fc:10:7c:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:87:85:02:78:8B:EC:F7:D7:51:84:A0:7B:C5:70:64:B8:49:61:42
X509v3 Authority Key Identifier:
keyid:AF:2C:27:ED:74:9D:14:E6:91:37:DB:11:F7:78:C7:F3:F4:05:01:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF2C27ED749D14E69137DB11F778C7F3F40501DD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D09B24AEFC6CECE842C5D7B4426A5BC63316534880F9B7B0ED381EB9E1B3019/0/3139322e3134312e342e302f32322d3234203d3e20323633313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.4.0/22
Signature Algorithm: sha256WithRSAEncryption
24:bf:e9:d4:fa:41:fa:59:bc:4e:6b:56:66:55:6d:b8:72:a0:
74:63:31:f4:50:36:53:4a:bd:8f:d7:21:9d:e5:24:2a:0f:6d:
aa:92:b4:98:1a:61:83:17:76:5f:ad:a6:37:43:75:98:35:ce:
03:97:4a:2f:4a:3d:d6:a8:b0:dd:4a:aa:d2:8f:12:a2:43:c6:
52:13:56:52:d0:49:80:e6:a9:27:ff:b3:c0:76:8c:42:71:6b:
51:79:fd:c9:26:4f:62:37:60:dd:48:1d:e3:a5:6d:47:df:ed:
3f:f9:89:4c:f3:e0:9c:aa:0e:20:3f:5b:a0:71:dc:d8:82:4c:
06:87:bc:0c:63:28:d5:74:e1:be:59:ad:3b:d9:46:04:46:36:
28:29:7b:3d:58:64:0b:82:54:67:30:92:75:3d:22:20:90:3b:
81:d9:1d:57:44:f0:a6:c2:12:e2:30:39:11:5f:30:49:1a:46:
94:e3:df:42:71:71:5c:87:47:bf:95:c4:f8:a0:56:e3:62:79:
86:c1:fa:0e:87:ae:55:a5:cd:39:7a:e8:f2:b7:3f:16:d7:79:
17:30:b4:76:e5:54:c8:50:f3:96:62:43:08:39:f8:e6:0e:37:
5c:d0:a8:bf:31:b5:29:ef:54:76:8e:61:0d:4f:19:18:fe:08:
02:15:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:49 2025 by rpki-client