Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3137392e36312e36342e302f32302d3234203d3e203136393231.roa
File: 3137392e36312e36342e302f32302d3234203d3e203136393231.roa (raw, json)
Hash identifier: snyDcNypTv7ppOWZme9gqrtdRkaa1yQtKAuY3AMkBQY=
Subject key identifier: B8:B8:72:E1:96:C2:25:6D:B4:28:89:9E:E4:A2:28:65:68:0F:A5:54
Certificate issuer: /CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
Certificate serial: 3A1BD6ACC798070A5A99C1B42019B66E3E29B3A5
Authority key identifier: 30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3137392e36312e36342e302f32302d3234203d3e203136393231.roa
Signing time: Tue 04 Feb 2025 18:02:32 +0000
ROA not before: Tue 04 Feb 2025 17:57:32 +0000
ROA not after: Tue 03 Feb 2026 18:02:32 +0000
asID: 16921
IP address blocks: 179.61.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1b:d6:ac:c7:98:07:0a:5a:99:c1:b4:20:19:b6:6e:3e:29:b3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
Validity
Not Before: Feb 4 17:57:32 2025 GMT
Not After : Feb 3 18:02:32 2026 GMT
Subject: CN=B8B872E196C2256DB428899EE4A22865680FA554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:6a:e5:7b:57:8c:cb:cd:5e:bf:03:9b:49:
5c:87:71:b5:73:f4:88:eb:1c:6b:b4:21:67:55:6b:
a2:89:54:fa:59:4a:8f:65:4a:95:34:73:0f:01:f5:
8b:7c:b4:ad:92:08:65:21:33:9f:a4:a4:6c:b4:af:
32:86:99:e6:f8:1c:fe:d0:7a:cd:25:e7:28:36:3b:
c1:e4:76:19:81:09:b8:b3:15:70:fb:16:6b:6e:8d:
2b:d9:14:b3:23:a2:bb:1f:00:76:48:8e:39:59:7f:
bf:a4:58:e8:b9:2b:8b:47:07:df:03:8d:02:0c:37:
97:1e:65:0c:20:ab:62:1e:d9:43:ea:36:8f:a5:26:
a7:cc:60:cd:0a:b9:33:7e:78:5c:ac:61:20:39:6d:
57:39:36:72:c4:e8:a6:ec:ee:3c:f6:65:ea:d8:79:
1f:3a:36:80:e1:d3:f0:42:6f:2d:b2:92:37:4f:69:
be:e2:0b:17:37:42:c3:cf:46:7b:77:20:a9:ae:b2:
38:97:ab:bb:51:2a:93:97:74:f4:0d:95:b0:4a:2d:
11:b0:80:e2:2a:ce:a2:74:43:2e:80:86:ad:19:06:
32:3f:cf:31:95:d2:0a:74:b3:80:f3:31:f5:4c:64:
64:58:09:6f:96:97:47:37:d5:fb:c3:42:84:20:b4:
9d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:72:E1:96:C2:25:6D:B4:28:89:9E:E4:A2:28:65:68:0F:A5:54
X509v3 Authority Key Identifier:
keyid:30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3137392e36312e36342e302f32302d3234203d3e203136393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:6f:6f:d1:57:2a:b6:56:aa:40:d7:98:6d:b3:9e:8f:39:25:
68:09:ea:13:5b:9c:e6:ef:2a:06:f5:4e:6e:54:0d:7b:57:1b:
5c:2f:39:6d:34:d1:36:6f:d3:ad:5f:29:b3:fd:77:95:f6:2f:
8a:35:5f:6c:62:21:ed:a5:de:e7:18:f3:b9:ce:03:75:68:91:
8e:a5:6b:27:8e:85:84:ae:07:aa:1a:82:3e:27:64:e3:48:21:
87:bf:cb:c9:ee:8f:09:4a:50:12:a9:55:2e:df:e7:17:80:47:
ef:70:54:57:99:4b:e4:19:31:47:f1:4c:36:23:bd:af:00:52:
0f:c0:6c:6f:8e:36:74:36:c8:bd:46:d7:66:2a:d9:22:8c:34:
48:29:35:77:48:07:7a:4e:c9:f5:d1:c2:63:90:6e:51:a3:83:
5d:55:33:a5:32:44:24:de:a5:41:98:cd:09:31:94:d5:6c:37:
98:9b:6f:d5:b6:a0:f0:27:6f:74:36:5b:70:c1:26:ef:09:e2:
d4:80:0e:ee:b7:af:2d:22:04:49:20:b9:91:d2:4c:2b:d4:24:
79:71:59:77:5b:4c:9f:7a:dd:70:bb:69:41:a6:c9:f2:07:28:
42:35:1c:43:00:74:15:22:15:a9:35:0a:e4:17:ca:ca:91:2a:
da:45:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:26 2025 by rpki-client