Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3138342e302e302f31362d3234203d3e203231353735.roa
File: 3133322e3138342e302e302f31362d3234203d3e203231353735.roa (raw, json)
Hash identifier: hm5w/hXb2qjFDtFM3cTYXst4Nlwhzubn2rFCw1EBSPE=
Subject key identifier: B4:2D:A9:EB:12:80:FA:72:4F:68:6C:38:4D:15:D7:3B:99:B8:2A:77
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 69F09CF5E316098C79A2F4F1C32C678D4BC98608
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3138342e302e302f31362d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:18:12 +0000
ROA not before: Tue 04 Feb 2025 18:13:12 +0000
ROA not after: Tue 03 Feb 2026 18:18:12 +0000
asID: 21575
IP address blocks: 132.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f0:9c:f5:e3:16:09:8c:79:a2:f4:f1:c3:2c:67:8d:4b:c9:86:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Feb 4 18:13:12 2025 GMT
Not After : Feb 3 18:18:12 2026 GMT
Subject: CN=B42DA9EB1280FA724F686C384D15D73B99B82A77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f6:11:72:69:63:9f:c4:e1:f7:a4:8e:d7:aa:
2f:ed:20:15:02:57:cc:3e:2d:29:9d:40:a8:c9:9a:
89:4d:65:c0:9b:73:d4:3e:66:c0:8a:cb:87:49:cc:
82:af:bb:6e:5c:05:16:6d:be:57:e7:90:29:03:5c:
a8:31:2e:68:db:2f:22:c8:18:f1:28:0e:b1:e9:17:
36:15:b2:5c:e7:d9:3e:2e:83:6c:22:29:60:4b:06:
01:ed:2a:d9:21:69:4b:02:c3:3c:61:34:92:94:c7:
8b:69:4f:87:85:a2:ab:13:e9:0f:70:49:d5:cb:94:
6f:1e:d1:fa:a8:1c:71:85:98:08:e0:90:de:41:2d:
43:17:0b:a7:9a:6d:1a:17:fb:e8:8a:ac:d0:a8:8b:
7d:35:bc:1f:fe:46:3b:be:22:7c:a6:4f:0b:de:55:
dd:d8:ce:d6:43:e3:64:78:fa:ad:d6:ea:ef:fd:02:
56:3f:26:83:68:a7:cb:ab:ee:51:76:02:5d:25:06:
9f:2d:74:80:75:63:a8:db:9c:2d:d1:d8:60:0b:b8:
28:af:51:fa:4e:05:d0:60:48:80:0e:4f:07:80:d4:
03:99:a4:69:25:6c:ed:45:01:08:bf:c1:7b:92:1d:
12:b5:23:b8:22:5e:14:29:cb:d7:27:85:7e:39:4b:
e4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:A9:EB:12:80:FA:72:4F:68:6C:38:4D:15:D7:3B:99:B8:2A:77
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3138342e302e302f31362d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:3f:e2:99:d9:ea:72:14:c9:7c:dd:e2:71:1a:bc:c0:21:d4:
44:53:0b:72:c8:b3:dd:ca:95:a1:82:f4:3f:9f:f1:fe:50:c2:
2e:02:99:30:27:70:14:f1:a7:d9:2c:ca:6f:a8:42:37:e6:61:
9a:17:66:32:dd:94:d7:0a:6e:0c:09:a3:79:ef:1c:9c:a4:16:
cb:5a:c6:2b:87:d6:bd:79:a1:72:95:fb:ea:44:2a:9e:9f:ad:
e5:4f:b3:ad:de:a9:63:71:c6:a3:e6:10:3d:4f:48:33:4d:1f:
3a:55:a7:39:b4:4b:10:43:de:54:4e:84:cc:99:75:10:1a:e6:
7c:e8:87:5d:cc:2d:b7:45:76:ff:a3:a4:74:45:68:39:e2:a2:
fa:d0:1d:fd:7e:65:22:85:a5:4b:82:da:ae:34:38:f7:7b:00:
02:a6:13:e4:17:87:69:4d:c1:0c:fe:77:46:92:36:b0:7f:45:
51:31:f7:90:dc:4e:68:27:3d:41:1f:e0:5b:13:0e:9a:f7:f5:
5a:9c:8f:9c:64:d7:43:5d:e7:8e:21:49:a8:2f:ae:d3:e9:88:
1d:b3:23:30:2c:a7:cd:3a:73:a9:91:3f:64:b9:6d:31:93:05:
37:c9:77:ae:ca:da:e4:4f:53:7e:47:57:ff:11:07:bd:15:99:
bb:c5:5f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:43 2025 by rpki-client