Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/3133312e3139362e3234342e302f32322d3234203d3e20323635353631.roa
File: 3133312e3139362e3234342e302f32322d3234203d3e20323635353631.roa (raw, json)
Hash identifier: uGCi9XhNMPtx6TDjFDtuXCGB2iM6yaPEl9Kz9l2L2UM=
Subject key identifier: D2:0F:93:B4:F0:00:F6:A4:79:89:0C:66:BB:43:40:11:E2:49:9F:3C
Certificate issuer: /CN=F3DA76435F27BF1767EBDE8272C18338BE1596E1
Certificate serial: 0C713AEC5DCE24F40ED8757DA9B409D47F944E64
Authority key identifier: F3:DA:76:43:5F:27:BF:17:67:EB:DE:82:72:C1:83:38:BE:15:96:E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/3133312e3139362e3234342e302f32322d3234203d3e20323635353631.roa
Signing time: Tue 04 Feb 2025 18:12:45 +0000
ROA not before: Tue 04 Feb 2025 18:07:45 +0000
ROA not after: Tue 03 Feb 2026 18:12:45 +0000
asID: 265561
IP address blocks: 131.196.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:71:3a:ec:5d:ce:24:f4:0e:d8:75:7d:a9:b4:09:d4:7f:94:4e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3DA76435F27BF1767EBDE8272C18338BE1596E1
Validity
Not Before: Feb 4 18:07:45 2025 GMT
Not After : Feb 3 18:12:45 2026 GMT
Subject: CN=D20F93B4F000F6A479890C66BB434011E2499F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:eb:e7:ad:ef:1e:e4:86:9e:f3:2a:13:11:
d1:d4:bf:66:d9:5d:2a:a2:57:00:fa:8c:e3:98:21:
f1:f4:b2:84:c6:e5:5d:78:6c:86:31:f6:7f:f3:bb:
93:15:6f:b7:58:84:65:52:e7:d8:58:a6:47:55:78:
64:bc:ea:3a:e3:57:a5:08:db:19:ed:27:56:47:e3:
f6:8b:7f:56:66:1f:91:c4:e5:20:78:43:2c:50:0f:
82:2a:15:d6:04:fc:3d:8d:03:6a:1b:b3:16:d0:64:
b0:49:27:d1:0b:57:78:e8:3b:54:85:95:cc:50:f6:
ad:5d:74:c1:d2:a6:d6:a8:84:e8:14:6b:32:4b:04:
eb:b7:e8:de:1d:22:c6:62:b6:0a:30:e5:03:d7:a8:
f5:cf:81:6b:86:eb:fa:ca:24:58:21:2c:18:9a:73:
f2:72:91:0a:b4:2f:37:98:c1:46:fc:97:c1:71:77:
4d:89:ca:5e:6f:e7:20:1d:0e:07:04:66:51:49:1d:
ad:fa:e0:c4:af:a7:da:a1:6f:a3:ed:82:fa:94:2e:
57:9a:6e:e0:a2:41:26:d7:0f:97:3a:22:4a:15:db:
e1:91:52:ef:f5:6f:0f:91:1a:4c:51:f8:05:f5:9b:
d0:c5:4e:e1:ae:27:af:78:00:a2:6b:00:1f:33:cb:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0F:93:B4:F0:00:F6:A4:79:89:0C:66:BB:43:40:11:E2:49:9F:3C
X509v3 Authority Key Identifier:
keyid:F3:DA:76:43:5F:27:BF:17:67:EB:DE:82:72:C1:83:38:BE:15:96:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/3133312e3139362e3234342e302f32322d3234203d3e20323635353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.244.0/22
Signature Algorithm: sha256WithRSAEncryption
87:11:7d:07:b4:3a:1a:67:4d:0e:50:ad:71:6a:03:6a:da:71:
50:74:51:74:ad:63:0d:bf:e1:91:00:c4:9c:8b:fe:77:29:b7:
c0:ce:26:90:86:24:28:cc:c8:af:0f:24:b8:f1:73:f9:fc:ff:
9d:df:6b:de:db:8a:c7:0d:9b:2c:73:70:3b:2a:0b:b0:5a:bd:
85:3c:9c:a2:5c:cc:5b:61:2f:fc:cb:f4:84:79:5a:c3:6e:1a:
ef:2e:af:a1:d7:5e:60:0d:3b:ea:c2:0a:0e:19:ef:63:05:88:
3e:69:36:7c:3a:78:8a:3a:53:a2:c3:8b:89:ee:2f:d9:56:cd:
3d:7a:73:40:c1:f6:54:f6:0c:b1:25:f2:5f:9c:da:72:04:b6:
3f:f6:cc:f9:3a:7a:11:e1:c2:cb:64:90:b9:79:cb:ad:3d:d4:
ad:9c:97:9d:f5:2e:b7:d1:71:48:f8:ac:5b:35:e6:2c:5e:60:
97:c5:20:3b:9c:ea:2f:be:2b:c8:e3:03:27:cd:bc:95:b8:43:
27:6e:dc:5d:7c:e6:52:45:1c:95:05:8c:07:55:13:17:66:56:
f2:df:b8:a6:34:7d:6d:88:ce:9b:90:01:d6:dc:8f:d3:76:98:
90:54:ac:de:21:68:ff:d8:36:b1:f3:b5:9a:20:a1:5e:73:a3:
5b:2d:b4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:07 2025 by rpki-client