Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e20323637373435.roa
File: 3136302e31392e3230312e302f32342d3234203d3e20323637373435.roa (raw, json)
Hash identifier: 9oR3knPIzICHRCtYHzAsrWfuxxWZsuIN4dpVMcuKySA=
Subject key identifier: 30:1E:4F:3B:0C:CD:C1:78:32:01:B5:8F:B6:55:B5:71:6A:FF:EA:67
Certificate issuer: /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial: 25E44DA9FC49B0AFB0AD2C149A9DB4A6198A00C7
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e20323637373435.roa
Signing time: Tue 11 Mar 2025 18:35:00 +0000
ROA not before: Tue 11 Mar 2025 18:30:00 +0000
ROA not after: Tue 10 Mar 2026 18:35:00 +0000
asID: 267745
IP address blocks: 160.19.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e4:4d:a9:fc:49:b0:af:b0:ad:2c:14:9a:9d:b4:a6:19:8a:00:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Validity
Not Before: Mar 11 18:30:00 2025 GMT
Not After : Mar 10 18:35:00 2026 GMT
Subject: CN=301E4F3B0CCDC1783201B58FB655B5716AFFEA67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:b7:65:ce:b0:48:df:40:ad:ec:bc:eb:47:
62:e7:e3:d2:7c:cb:bb:9e:e1:7e:15:19:96:1a:b3:
cf:8d:9a:3d:34:60:17:1c:8a:53:27:59:be:2f:9d:
d3:d2:06:c0:33:73:15:1f:ff:19:41:05:ee:e8:32:
98:e2:62:b1:a5:38:38:5f:f7:1d:3d:12:ef:b4:ab:
ba:08:34:96:68:67:ea:7b:f3:eb:ea:8b:b8:d9:87:
03:14:aa:0f:af:ce:33:fd:57:f9:a8:99:06:04:73:
75:38:ef:8e:58:f1:ff:4a:96:d7:c9:26:c6:6e:f3:
5c:e1:33:a9:60:23:45:1a:45:c6:9f:5f:86:dd:87:
91:ae:b0:83:80:59:82:fa:bb:29:2c:71:de:9b:5e:
12:49:9f:e0:e4:6f:ec:dd:fa:11:3c:d9:32:b4:2c:
bf:08:a1:9b:d5:d9:7f:99:f3:8b:7e:24:bd:99:40:
6a:a5:db:06:84:c0:12:53:4f:6f:5b:b4:05:31:f6:
bc:a8:aa:70:e8:94:47:9d:e1:aa:5b:49:14:e5:32:
a6:6d:5f:05:bf:57:d5:af:de:00:8d:bd:7d:80:75:
95:6a:6e:0d:21:d6:4f:c0:df:e0:85:b5:ad:66:bb:
3e:b2:bb:66:51:3e:a9:0b:b2:eb:26:5b:cc:b8:8e:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:4F:3B:0C:CD:C1:78:32:01:B5:8F:B6:55:B5:71:6A:FF:EA:67
X509v3 Authority Key Identifier:
keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230312e302f32342d3234203d3e20323637373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.201.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d4:96:1c:0b:39:f4:87:4d:99:3a:3c:66:35:63:60:e0:55:
28:23:30:c3:d4:69:df:ec:6a:30:15:3a:6a:ad:37:a8:38:c8:
89:64:a1:ce:91:c9:b4:b9:e5:96:eb:21:31:fa:2f:d2:4e:4a:
8c:cb:4f:0a:35:8a:77:bc:4a:72:b8:f2:e2:a2:7c:01:fb:ae:
b3:2d:f5:6d:03:16:3d:b2:05:2a:c9:c1:a3:32:f7:09:0b:13:
36:96:1f:de:42:fb:bd:04:79:3b:75:53:ff:a1:14:de:bd:87:
ae:62:95:25:97:13:eb:ff:60:52:41:22:a5:a2:ba:d9:cc:b6:
bb:33:ad:a3:53:61:ef:1e:37:da:f8:0d:e1:c8:14:c7:54:e6:
30:6d:97:21:4a:91:9b:b0:c5:7e:76:35:d1:d9:a3:7c:11:24:
50:92:8f:b8:4f:eb:8b:28:c6:2e:f2:f2:a7:b0:3c:b8:25:9b:
e3:a0:30:59:49:7d:32:c5:f3:76:b4:02:b0:39:1b:04:a3:c8:
4c:ca:17:45:39:0e:94:0c:61:79:26:e8:ba:39:55:a7:b5:7b:
82:2f:42:07:b3:25:8c:fd:f7:46:fa:82:3b:c7:12:f7:56:7b:
99:b0:67:aa:5a:de:9d:46:a4:1c:12:2d:4c:b4:70:b4:94:09:
3a:ef:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:12:14 2025 by rpki-client