Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e302e302f32342d3234203d3e203634313339.roa
File: 3230372e3234382e302e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier: y//tccx4QiNNQA/Ra8We8tJStYehNQ1ldkdMRc0S0W4=
Subject key identifier: E5:E0:E0:D7:DD:D2:95:C3:2A:E8:B9:BD:36:CB:15:6D:4A:DE:8B:7E
Certificate issuer: /CN=367EAE467C8B549D5E6615661A70C865954F55EE
Certificate serial: 75B8F406A573DC31923E57534D753060B3F7057A
Authority key identifier: 36:7E:AE:46:7C:8B:54:9D:5E:66:15:66:1A:70:C8:65:95:4F:55:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e302e302f32342d3234203d3e203634313339.roa
Signing time: Tue 04 Feb 2025 20:01:52 +0000
ROA not before: Tue 04 Feb 2025 19:56:52 +0000
ROA not after: Tue 03 Feb 2026 20:01:52 +0000
asID: 64139
IP address blocks: 207.248.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b8:f4:06:a5:73:dc:31:92:3e:57:53:4d:75:30:60:b3:f7:05:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367EAE467C8B549D5E6615661A70C865954F55EE
Validity
Not Before: Feb 4 19:56:52 2025 GMT
Not After : Feb 3 20:01:52 2026 GMT
Subject: CN=E5E0E0D7DDD295C32AE8B9BD36CB156D4ADE8B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:3d:9f:1c:ac:68:65:a8:58:93:fc:9b:fe:
4d:ff:9f:83:f2:16:6a:5d:a7:76:07:94:3a:7b:75:
ff:94:89:2b:fc:15:bb:07:46:63:36:7b:ec:57:e2:
24:63:dc:c2:05:a8:b4:9b:67:3a:25:09:cb:9b:ad:
93:dd:10:9d:b7:2c:2f:fc:08:fd:84:bd:f8:e1:c2:
bc:8f:99:7e:cf:25:1c:ca:37:02:e1:8e:46:2d:57:
fb:f4:e8:b3:59:05:2e:96:52:d6:5f:e4:8a:61:de:
22:22:66:2c:a6:ba:4b:a5:87:e5:5d:9c:bf:9b:85:
12:9b:61:0c:20:0f:fb:79:17:35:24:fd:54:7d:48:
70:e5:bc:0c:5a:e8:23:c9:ac:f5:18:9e:00:e2:49:
2f:24:c1:2a:03:29:59:59:e9:b3:55:c1:7a:13:99:
44:5d:85:79:b6:9e:c6:a9:fc:41:bb:8c:c2:5b:5c:
db:d8:2c:b5:a5:80:34:34:02:e8:7f:bf:dd:d6:e7:
1a:ec:44:ce:03:e4:cf:d7:64:32:e8:15:7d:e4:cb:
6a:d7:70:73:51:94:5d:a4:df:01:0e:65:26:4d:17:
43:6c:c4:41:91:07:ab:a5:b3:92:fe:2b:01:ba:ff:
b5:e1:ae:e1:34:84:44:26:f1:80:80:48:16:b2:12:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:E0:D7:DD:D2:95:C3:2A:E8:B9:BD:36:CB:15:6D:4A:DE:8B:7E
X509v3 Authority Key Identifier:
keyid:36:7E:AE:46:7C:8B:54:9D:5E:66:15:66:1A:70:C8:65:95:4F:55:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/367EAE467C8B549D5E6615661A70C865954F55EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/367EAE467C8B549D5E6615661A70C865954F55EE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/870C83D25E7FA67388832052309332085572C074B86F60E54C9F48F630BD5AA6/0/3230372e3234382e302e302f32342d3234203d3e203634313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.0.0/24
Signature Algorithm: sha256WithRSAEncryption
88:97:61:99:22:f6:88:aa:42:93:2a:e1:7b:b5:5c:5f:38:26:
11:7e:cf:29:13:c2:ec:2c:b5:61:94:9c:6b:92:53:a8:7f:82:
3e:9f:d4:f1:2e:2c:88:87:87:4f:f3:57:fb:38:fc:86:de:5b:
42:63:d0:2a:7d:17:14:30:17:3a:68:c8:97:1c:8f:a8:ac:5f:
56:a4:ba:21:77:21:71:69:91:af:d0:da:91:7f:b5:2f:01:b3:
3b:e8:d6:ed:9f:77:2f:35:a2:c5:de:32:cd:7f:95:b9:e5:40:
8b:44:ec:79:d1:01:9a:8c:ef:fe:bf:c8:8e:75:3a:05:8c:dc:
6a:8a:5d:e0:a9:7b:f1:bf:e4:1c:c4:fd:24:8b:eb:48:50:1c:
68:d7:7e:0b:74:77:d7:e1:e8:2e:40:cb:d1:48:af:d2:f6:5c:
e0:8e:5a:d1:28:6a:82:a9:48:fb:6a:dd:db:39:46:df:9f:8d:
31:c7:56:84:76:bf:15:84:09:33:e3:18:9e:14:60:35:67:cd:
45:39:64:22:40:11:69:ac:a3:f8:29:e2:29:d8:83:8e:51:d1:
56:62:9d:f1:32:60:7d:d9:06:c5:5e:f7:4f:91:fb:bd:d6:39:
18:e9:ef:2a:84:12:51:2b:03:7b:39:9f:c9:df:6c:72:fd:24:
6c:55:d9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:18 2025 by rpki-client