Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137312e302f32342d3234203d3e20313938393439.roa
File: 3137302e3233382e3137312e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier: h4Yel2QpdUHgsFOhbsqbT9hYJISybFNlp9cgJZpJLR8=
Subject key identifier: DB:18:BD:4A:1B:9C:04:8C:E0:F6:D7:3B:6D:FD:F2:4F:EA:EB:19:6B
Certificate issuer: /CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Certificate serial: 60DBCC49D7289B01E062710D5D81D648D339899E
Authority key identifier: BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137312e302f32342d3234203d3e20313938393439.roa
Signing time: Tue 04 Feb 2025 18:31:38 +0000
ROA not before: Tue 04 Feb 2025 18:26:38 +0000
ROA not after: Tue 03 Feb 2026 18:31:38 +0000
asID: 198949
IP address blocks: 170.238.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:db:cc:49:d7:28:9b:01:e0:62:71:0d:5d:81:d6:48:d3:39:89:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Validity
Not Before: Feb 4 18:26:38 2025 GMT
Not After : Feb 3 18:31:38 2026 GMT
Subject: CN=DB18BD4A1B9C048CE0F6D73B6DFDF24FEAEB196B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:c2:a9:fe:41:af:c6:c2:ab:f0:20:d6:63:
ad:71:c0:d8:66:62:43:13:c5:cb:d6:86:3b:bc:81:
7b:99:d6:99:99:de:48:33:ae:b1:37:57:56:3b:52:
62:0a:2a:e4:c3:57:88:cd:01:5e:88:79:bf:6a:f9:
4a:e0:a9:96:f0:43:8b:56:8e:37:18:ed:f1:68:64:
8f:13:36:48:98:05:8d:f6:3f:15:09:09:24:da:3a:
93:05:1d:f5:0f:69:4b:bc:94:03:4d:60:00:2b:f7:
33:2d:8a:bf:73:a7:53:60:14:29:91:52:6f:e9:ea:
cc:d0:9d:c6:13:fd:3b:38:ff:de:e3:41:a6:79:2f:
93:19:a1:c9:72:35:c0:68:08:eb:25:b8:0d:e2:a9:
69:a6:f6:9e:55:2f:a3:1a:b7:fc:1c:09:b9:92:bc:
ae:cc:9e:14:2e:9c:84:56:91:09:39:39:57:b5:e1:
59:29:14:68:e7:c2:b7:0b:79:c8:c3:1f:0e:70:30:
cd:5f:bc:e2:fc:bd:f2:a1:94:ce:6d:a2:58:1d:d3:
7a:48:05:68:05:ba:e0:c8:94:af:5c:8a:bf:86:27:
17:36:75:16:42:2f:f2:f8:ae:af:d4:e8:3b:67:3a:
0a:fd:ba:4b:b9:f9:11:c4:8e:36:c0:5e:63:1d:a3:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:18:BD:4A:1B:9C:04:8C:E0:F6:D7:3B:6D:FD:F2:4F:EA:EB:19:6B
X509v3 Authority Key Identifier:
keyid:BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137312e302f32342d3234203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.171.0/24
Signature Algorithm: sha256WithRSAEncryption
42:96:12:51:68:c6:67:d7:72:5b:62:b7:71:de:ff:67:43:07:
ba:b6:49:8a:23:0e:0a:e7:8d:53:5a:40:49:6b:45:bd:26:d2:
d7:7f:f5:3d:9e:cc:f6:80:d7:c2:90:78:ee:6b:f5:18:9d:e5:
4d:c0:40:87:b1:57:3f:83:57:38:0d:16:8e:20:fa:a2:25:92:
99:a5:5f:e9:d4:68:be:72:7d:37:6f:75:bb:48:e8:08:05:dd:
82:fe:d2:1c:24:dc:fe:5e:bb:c2:dc:87:dd:45:f4:4b:ca:28:
15:d0:6d:d8:f7:38:b3:99:19:a3:2a:25:2d:2d:e6:8d:c7:76:
d4:9e:de:f8:fe:14:8d:78:d6:f6:bc:76:1e:4e:ad:6f:37:7d:
fb:95:4f:a6:c6:37:87:74:6a:ea:03:c0:d6:8f:03:0f:be:e0:
a0:0f:90:d5:de:7d:d0:c2:a4:1c:a0:65:a1:7b:5c:66:2b:d9:
97:57:1f:7e:39:1d:d0:54:31:b9:70:3c:80:f5:60:7d:76:3b:
62:40:48:87:52:88:a3:35:fa:b2:88:3f:d4:33:6a:7b:e3:12:
e5:e3:1a:da:02:14:64:1d:b1:3f:43:e8:91:a0:0a:c5:54:04:
9e:96:92:ac:08:36:a3:f7:af:40:1a:f1:62:8f:83:d5:b1:1b:
2c:1e:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:16:32 2025 by rpki-client