Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3136382e3132312e3230382e302f32322d3234203d3e20323632313936.roa
File: 3136382e3132312e3230382e302f32322d3234203d3e20323632313936.roa (raw, json)
Hash identifier: rh1gLMx5FpOziDUN+ErmjsL6u38016pGqnhj9Y/5K2o=
Subject key identifier: 64:F4:59:5A:96:DD:F4:83:6C:9C:B9:1B:50:9B:AE:D1:93:08:56:67
Certificate issuer: /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial: 5CD2C67E58B2DB5336A658F13368502F33F40D21
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3136382e3132312e3230382e302f32322d3234203d3e20323632313936.roa
Signing time: Wed 04 Dec 2024 19:25:01 +0000
ROA not before: Wed 04 Dec 2024 19:20:01 +0000
ROA not after: Wed 03 Dec 2025 19:25:01 +0000
asID: 262196
IP address blocks: 168.121.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d2:c6:7e:58:b2:db:53:36:a6:58:f1:33:68:50:2f:33:f4:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
Validity
Not Before: Dec 4 19:20:01 2024 GMT
Not After : Dec 3 19:25:01 2025 GMT
Subject: CN=64F4595A96DDF4836C9CB91B509BAED193085667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:20:75:dc:5a:a7:b8:c3:31:f3:6d:54:46:
b9:7f:3b:b9:d9:c3:8c:9e:5b:5e:3f:85:1b:8a:87:
4b:45:dc:a7:2a:c1:1b:00:3e:9f:91:01:e8:ab:f2:
79:a1:8e:80:b0:41:49:3e:f8:3f:40:a0:32:06:35:
7c:79:ca:b6:09:33:9c:89:d3:63:61:03:fa:09:51:
3c:47:db:06:7f:11:66:68:d1:d4:16:dd:96:ba:a6:
b2:b9:94:1c:88:aa:98:87:8e:0d:e9:ee:49:75:10:
6c:70:70:d7:57:b6:3f:db:be:24:da:23:1b:55:10:
51:91:a3:a6:aa:27:87:68:bc:7a:2e:6a:70:e8:92:
b6:5a:f6:ca:93:49:f8:95:3e:4d:ec:c0:75:f7:a6:
ed:2e:45:a6:54:13:fe:82:7f:d2:86:87:2b:1e:55:
f1:6d:7e:78:3d:8b:f0:02:23:30:28:86:81:79:2f:
23:fe:0e:20:ae:ec:67:86:47:da:a9:65:49:6d:c0:
13:7e:ca:a3:dd:62:2c:fc:c1:3a:c7:29:2e:be:26:
6f:21:80:37:48:b6:fb:4e:3f:0c:26:41:69:16:56:
62:c8:f3:20:07:c5:b5:2a:02:63:6b:7c:a4:6d:f8:
11:20:aa:93:7b:6b:e6:aa:06:db:a2:0e:48:ce:32:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F4:59:5A:96:DD:F4:83:6C:9C:B9:1B:50:9B:AE:D1:93:08:56:67
X509v3 Authority Key Identifier:
keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3136382e3132312e3230382e302f32322d3234203d3e20323632313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:b1:2f:5d:ff:85:28:b3:65:b4:58:cc:05:1b:ba:37:a6:ec:
e7:2b:b6:9c:69:6a:01:6b:14:f4:7e:67:71:52:a8:d3:f0:f8:
c5:e7:c4:31:8d:cf:37:7b:9d:0f:f7:52:c2:84:58:bc:89:c5:
cf:30:ef:20:e9:0c:de:ae:80:1f:b1:e7:d3:07:b9:f6:0d:92:
c3:0c:65:71:10:35:e8:dd:ee:f8:eb:6b:0e:67:8a:63:2e:66:
90:e1:3c:c5:69:d3:e5:1e:23:b8:2e:d6:69:5a:1d:63:49:60:
57:7d:76:d6:be:19:2e:a4:8f:d7:32:c6:b9:1e:ec:aa:83:09:
ea:f7:27:72:c8:92:b0:b4:aa:6c:af:45:ca:3b:0d:45:da:dd:
02:0d:33:6d:35:ee:42:47:43:dc:e6:10:d1:db:b8:e5:d6:a9:
0b:7a:54:9f:82:ea:cc:67:ec:a1:42:5f:47:5b:aa:69:6f:f2:
1a:56:f4:ed:5a:b8:0f:93:72:84:cf:ea:2d:98:dc:64:24:17:
0e:a3:d2:22:da:1b:f9:39:c5:3e:64:2c:ce:c6:a5:b4:55:b7:
30:4f:25:87:5e:c9:01:e3:62:7b:52:13:f9:3c:b1:49:57:02:
4f:60:ab:dc:79:56:b2:89:f8:2e:1c:1a:d1:fa:4c:57:5b:6a:
9f:6b:bb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:09 2025 by rpki-client