Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20323634373330.roa
File: 3137302e3233332e3135332e302f32342d3234203d3e20323634373330.roa (raw, json)
Hash identifier: MLjxMIJtSZPdj0gIdlWOixi+Vdr9MrYJyOElk9HntNc=
Subject key identifier: AD:C6:D7:A3:7A:5D:CB:55:4C:BD:4E:6D:EB:D6:A7:19:18:32:21:87
Certificate issuer: /CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
Certificate serial: 35318543C42E39E2E668D2117EBB65D01CCB0FD2
Authority key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20323634373330.roa
Signing time: Tue 04 Feb 2025 18:08:49 +0000
ROA not before: Tue 04 Feb 2025 18:03:49 +0000
ROA not after: Tue 03 Feb 2026 18:08:49 +0000
asID: 264730
IP address blocks: 170.233.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:31:85:43:c4:2e:39:e2:e6:68:d2:11:7e:bb:65:d0:1c:cb:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
Validity
Not Before: Feb 4 18:03:49 2025 GMT
Not After : Feb 3 18:08:49 2026 GMT
Subject: CN=ADC6D7A37A5DCB554CBD4E6DEBD6A71918322187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:94:47:92:06:8b:03:14:61:be:73:e6:0e:
12:d4:30:19:4d:66:ac:cc:f8:dd:04:ab:88:48:80:
8b:b7:ca:7d:1b:2b:b1:a7:6c:99:3c:29:10:0b:43:
08:ff:64:c7:15:ce:7b:00:30:c6:67:42:07:68:2b:
b2:f5:dc:e3:89:37:31:59:24:87:9f:c7:e1:5f:79:
93:35:7e:dd:f1:79:45:1e:d4:e4:78:d9:20:7f:52:
4b:17:85:9e:27:e6:13:6d:d3:6f:98:2b:cc:bb:8d:
97:1d:a7:cf:db:62:7a:9c:7b:8d:6d:49:a3:8b:06:
de:47:d2:db:8f:90:9a:ab:32:d9:b1:31:24:89:20:
74:d3:3f:bf:d9:e7:24:b6:07:36:d8:79:e0:18:8c:
f1:25:6c:93:1d:d8:b0:e6:e5:e1:e2:f2:bf:0b:58:
99:be:11:9c:c9:a6:a7:fc:98:bd:ff:85:05:48:e5:
5c:8b:aa:27:e3:be:2b:23:09:1f:12:ca:3e:ff:43:
a7:6f:23:0a:d5:42:ae:c2:c4:cf:2e:7a:91:0f:c0:
ee:3c:fd:df:06:c9:51:51:52:19:0c:82:79:a3:05:
7b:ab:42:25:94:e8:cb:30:a3:c6:29:8a:3c:df:91:
79:a7:74:e8:61:ae:52:3f:61:68:9b:0d:ee:25:73:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C6:D7:A3:7A:5D:CB:55:4C:BD:4E:6D:EB:D6:A7:19:18:32:21:87
X509v3 Authority Key Identifier:
keyid:2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20323634373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.153.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1d:40:53:f6:d7:4f:c4:b6:e7:50:92:c0:e4:3d:79:10:ba:
ca:a4:b5:20:c2:56:35:82:ee:b1:e7:28:39:4c:85:e0:03:44:
db:16:59:8a:6f:8d:dc:d3:41:75:98:af:50:67:cb:89:23:de:
94:82:17:92:c5:e4:fc:f3:df:57:78:62:68:aa:fe:95:fe:6d:
4f:d5:e5:61:52:4f:0e:60:1e:e8:84:b6:fd:87:83:37:70:64:
a4:07:13:f1:8f:c8:2a:7d:8e:55:79:5d:6c:a4:bc:38:ff:5a:
31:5d:62:78:67:04:88:1f:0c:73:67:8e:d8:c4:9d:73:67:8a:
72:6b:99:62:13:24:c3:72:f9:a8:09:9b:26:6d:87:95:80:9d:
8c:34:8a:33:da:b1:d7:36:51:20:73:9c:0c:3d:8e:fb:4a:36:
d3:0d:21:b4:12:5e:a5:89:4c:02:f7:30:31:ab:e3:8e:94:a5:
64:ea:66:4c:ce:64:51:08:31:5a:cf:d6:3f:4e:d1:5f:e5:d0:
4b:ae:c5:b8:bb:dc:10:5a:50:7b:c8:be:b1:2e:ee:72:e6:6c:
ce:9a:84:80:e9:87:94:01:ab:a9:df:79:82:92:d9:f4:66:66:
4f:5e:79:38:94:ba:36:d3:f4:6b:bf:3d:a1:43:4a:59:a4:cd:
f6:ba:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:07 2025 by rpki-client