Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa
File: 3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier: WCIoB7Fx5v9RmWNJMfdAm5y5f/Da+RM4hAgbaRBt2tA=
Subject key identifier: D1:A2:25:F5:DB:29:72:67:AC:7A:36:06:AB:5E:80:90:61:B8:4A:B2
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 095D4200C2FF32C7D4D83D6825CF6952E3DAD59B
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa
Signing time: Tue 04 Feb 2025 18:18:12 +0000
ROA not before: Tue 04 Feb 2025 18:13:12 +0000
ROA not after: Tue 03 Feb 2026 18:18:12 +0000
asID: 19905
IP address blocks: 207.248.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5d:42:00:c2:ff:32:c7:d4:d8:3d:68:25:cf:69:52:e3:da:d5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Feb 4 18:13:12 2025 GMT
Not After : Feb 3 18:18:12 2026 GMT
Subject: CN=D1A225F5DB297267AC7A3606AB5E809061B84AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:4f:16:a1:a7:9d:fb:bf:9f:c5:45:ed:e6:
45:ad:c2:6a:90:e9:11:a8:03:26:0a:6b:aa:26:6a:
58:46:b2:c8:94:dc:3d:05:ad:ba:07:ee:51:79:c5:
83:6d:86:fe:3b:4d:5c:8d:56:b8:b5:9c:70:12:f2:
db:c0:d8:1e:f7:4f:05:00:aa:a9:d4:24:94:ee:92:
ca:c3:82:e7:63:10:43:af:00:82:24:6e:80:d8:2f:
6c:25:9a:02:63:ad:15:6c:c7:aa:69:23:5e:b9:e5:
ff:29:2f:7e:67:f4:af:7d:2d:a9:6c:40:5b:73:a4:
76:1f:9c:4d:2e:0a:54:a0:ef:ba:52:cc:80:3c:41:
b9:e8:28:b0:f7:1f:42:da:40:90:1b:90:d7:c1:98:
ee:6f:cb:40:55:1a:7b:4a:c6:95:f2:2b:c9:21:e3:
50:7f:2c:21:a4:43:c8:56:92:e9:7d:3c:15:19:0d:
3b:70:15:44:fc:23:c5:e8:c4:18:c3:6c:58:bf:5b:
84:c0:21:fd:a1:37:42:e9:ee:4a:ad:ec:c2:b7:1d:
d8:28:7f:f5:f7:10:f5:a0:51:e8:47:cf:dd:42:62:
fe:b9:80:42:58:a0:94:1c:ec:72:f7:f4:eb:ae:04:
86:86:1a:27:cb:44:ac:7c:04:71:46:33:83:e8:95:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:25:F5:DB:29:72:67:AC:7A:36:06:AB:5E:80:90:61:B8:4A:B2
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132312e302f32342d3234203d3e203139393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.121.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9d:5d:c5:56:00:68:7c:43:6b:c9:e9:de:10:c4:7c:cc:56:
b6:6b:c4:96:34:9f:58:23:bd:aa:0f:b7:0a:d4:e7:a2:d3:68:
18:d6:84:b1:70:73:1c:ef:87:a2:d9:74:bd:bf:89:fd:16:15:
b8:9f:96:4b:d6:d9:d2:9e:96:98:12:62:f2:26:05:f2:ef:e3:
b2:db:7c:32:a0:56:01:3a:c0:0b:80:11:94:46:06:ff:38:b2:
5a:77:fd:33:3b:87:29:04:92:e0:93:9c:b8:60:da:17:a3:f9:
61:ea:fe:81:f0:7a:ac:fd:68:ef:ba:99:d1:eb:91:63:cf:8f:
75:ba:6f:bf:e4:d3:12:4d:8a:80:b1:a2:e0:d0:18:d8:5e:a6:
b7:8a:31:c4:57:88:c7:e0:b1:ad:0e:b1:a4:d2:8a:96:0a:d3:
29:96:80:30:20:ad:c1:97:8d:44:ed:11:f9:d2:b4:34:d0:2b:
e1:80:86:00:d1:48:63:e4:01:be:62:cc:86:ca:64:b0:1c:3b:
44:f6:c1:24:ca:3b:1f:90:e4:93:3c:ca:9c:83:a5:20:47:5a:
c3:42:57:6b:1e:01:6f:53:69:d7:b8:4e:83:72:0e:64:56:de:
c7:d6:34:9d:bc:63:e3:b8:55:4c:f9:02:05:b7:27:35:85:b6:
36:5b:86:ef
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCV1CAML/MsfU2D1oJc9pUuPa1ZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNTAyMDQxODEzMTJaFw0yNjAyMDMxODE4MTJaMDMxMTAvBgNV
BAMTKEQxQTIyNUY1REIyOTcyNjdBQzdBMzYwNkFCNUU4MDkwNjFCODRBQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RU8Woaed+7+fxUXt5kWtwmqQ
6RGoAyYKa6omalhGssiU3D0FrboH7lF5xYNthv47TVyNVri1nHAS8tvA2B73TwUA
qqnUJJTuksrDgudjEEOvAIIkboDYL2wlmgJjrRVsx6ppI1655f8pL35n9K99Lals
QFtzpHYfnE0uClSg77pSzIA8QbnoKLD3H0LaQJAbkNfBmO5vy0BVGntKxpXyK8kh
41B/LCGkQ8hWkul9PBUZDTtwFUT8I8XoxBjDbFi/W4TAIf2hN0Lp7kqt7MK3Hdgo
f/X3EPWgUehHz91CYv65gEJYoJQc7HL39OuuBIaGGifLRKx8BHFGM4PolTt9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0aIl9dspcmesejYGq16AkGG4SrIwHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMyMzAzNzJlMzIzNDM4MmUzMTMyMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzkzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/h5
MA0GCSqGSIb3DQEBCwUAA4IBAQArnV3FVgBofENryeneEMR8zFa2a8SWNJ9YI72q
D7cK1Oei02gY1oSxcHMc74ei2XS9v4n9FhW4n5ZL1tnSnpaYEmLyJgXy7+Oy23wy
oFYBOsALgBGURgb/OLJad/0zO4cpBJLgk5y4YNoXo/lh6v6B8Hqs/WjvupnR65Fj
z491um+/5NMSTYqAsaLg0BjYXqa3ijHEV4jH4LGtDrGk0oqWCtMploAwIK3Bl41E
7RH50rQ00CvhgIYA0Uhj5AG+YsyGymSwHDtE9sEkyjsfkOSTPMqcg6UgR1rDQldr
HgFvU2nXuE6Dcg5kVt7H1jSdvGPjuFVM+QIFtyc1hbY2W4bv
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:18:06 2025 by rpki-client