Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e20323634363638.roa
File: 3137392e36332e32302e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier: UwAk1fq0U2Fex+lyjeA/nB/k8HpIHE+Lyzq19IybiNI=
Subject key identifier: BC:8D:25:26:EC:8B:4F:8C:D5:37:A8:A7:2B:7F:E7:D8:E9:6D:BE:84
Certificate issuer: /CN=13F664EFE791C2FAE7E4B151E394302E508408AF
Certificate serial: 72F8B48A7875784B1FDDE20E9BB378681855F498
Authority key identifier: 13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e20323634363638.roa
Signing time: Tue 04 Feb 2025 18:41:06 +0000
ROA not before: Tue 04 Feb 2025 18:36:06 +0000
ROA not after: Tue 03 Feb 2026 18:41:06 +0000
asID: 264668
IP address blocks: 179.63.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f8:b4:8a:78:75:78:4b:1f:dd:e2:0e:9b:b3:78:68:18:55:f4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13F664EFE791C2FAE7E4B151E394302E508408AF
Validity
Not Before: Feb 4 18:36:06 2025 GMT
Not After : Feb 3 18:41:06 2026 GMT
Subject: CN=BC8D2526EC8B4F8CD537A8A72B7FE7D8E96DBE84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:0e:9d:f5:96:77:f9:14:55:71:81:27:77:
56:18:40:2f:06:74:f6:35:9a:b7:e3:91:9d:5b:c1:
32:89:b9:dc:bd:34:eb:9b:37:66:0d:7e:0f:6a:22:
57:3a:3f:70:3e:cd:9e:58:77:6f:c5:16:4e:e1:d1:
8b:7f:b8:6d:7e:b8:29:73:62:24:00:36:37:52:4e:
21:9b:a8:5c:d7:b1:7d:70:74:61:bd:95:a0:32:56:
36:ce:ff:5f:79:76:11:84:b8:3c:99:bc:65:fd:13:
d1:5b:df:0c:1b:ea:0f:0e:90:ef:26:89:40:c5:c4:
11:5a:70:0f:8f:3c:51:6f:da:05:ad:be:a1:d5:80:
8c:08:56:1e:46:29:6f:c3:bd:06:51:39:e8:16:b9:
b4:d1:bb:6d:62:36:15:c9:6b:fd:51:01:1a:0e:dc:
53:b6:c3:d1:f6:a8:e0:a5:a2:fb:27:15:0b:b9:6a:
bf:a7:25:c2:8b:55:a9:e8:ca:68:00:1f:39:1d:29:
d8:71:ff:36:86:38:d9:2e:ac:1c:ff:5d:de:cc:85:
04:99:45:c0:e6:24:b5:ff:88:61:48:90:0e:7e:66:
e4:ea:1e:14:26:0a:c2:88:16:ea:f5:93:b6:69:a5:
da:aa:ee:97:25:da:23:e9:3b:62:35:d9:fe:0a:0d:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:25:26:EC:8B:4F:8C:D5:37:A8:A7:2B:7F:E7:D8:E9:6D:BE:84
X509v3 Authority Key Identifier:
keyid:13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e20323634363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.63.20.0/22
Signature Algorithm: sha256WithRSAEncryption
80:69:95:7b:28:74:04:57:b5:d4:c6:d9:d3:45:cb:58:34:0b:
c8:00:9d:27:5d:38:9d:80:14:ef:8b:96:97:db:70:26:c0:84:
fe:d8:9f:24:91:b1:7e:4d:b0:9c:b9:23:57:62:58:81:60:55:
1d:1d:33:9f:c8:7e:48:81:e4:3a:65:e1:b9:65:68:15:57:2a:
22:a9:2f:99:ef:8f:94:1f:37:de:be:37:4e:48:eb:0d:c6:41:
00:f8:99:0d:9d:21:28:ff:ed:70:1c:5e:df:27:05:f0:11:2b:
09:e8:5d:a7:cf:be:27:db:f6:03:5a:a0:f1:96:91:da:d8:6e:
02:e1:7f:09:48:26:68:30:a7:76:77:1e:ce:ba:01:cb:2c:c1:
75:e2:22:36:65:34:a0:a8:1f:be:2a:70:82:f0:c2:86:e9:f0:
cb:91:21:fc:70:4c:0b:2c:19:46:f3:c9:de:73:5f:f6:19:79:
76:2b:cd:77:90:d0:f0:ed:2c:aa:cc:33:ed:ab:b5:d9:ed:27:
7b:b4:46:45:4d:14:3c:49:b8:8f:b4:f0:29:70:b9:d1:80:90:
f9:69:67:2b:67:6f:c2:7e:0d:fc:50:ac:6f:4c:1e:82:65:4d:
72:b4:43:d8:db:e5:af:4b:a7:74:e2:1e:8f:87:0d:3c:dc:ce:
b6:e0:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:52 2025 by rpki-client