Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e31302e302f32332d3234203d3e20323730303838.roa
File: 3137302e302e31302e302f32332d3234203d3e20323730303838.roa (raw, json)
Hash identifier: 4s3gQDqcbPI8adEPc7kwY9EDessEOFtG4oBbM9SOR9M=
Subject key identifier: 03:15:CB:DD:F3:FC:68:7B:7F:9F:58:DC:66:CB:37:91:0C:96:6F:6A
Certificate issuer: /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial: 38553FC91EF925ABF9B9D7E4836A5335D8D59302
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e31302e302f32332d3234203d3e20323730303838.roa
Signing time: Wed 29 Jan 2025 15:30:01 +0000
ROA not before: Wed 29 Jan 2025 15:25:01 +0000
ROA not after: Wed 28 Jan 2026 15:30:01 +0000
asID: 270088
IP address blocks: 170.0.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:55:3f:c9:1e:f9:25:ab:f9:b9:d7:e4:83:6a:53:35:d8:d5:93:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Validity
Not Before: Jan 29 15:25:01 2025 GMT
Not After : Jan 28 15:30:01 2026 GMT
Subject: CN=0315CBDDF3FC687B7F9F58DC66CB37910C966F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:ed:af:a4:a9:5b:43:fb:4d:bd:23:2f:15:
9d:37:e4:ab:05:7f:b4:98:18:e3:1d:14:7e:fc:b7:
d5:d3:a0:17:14:42:c7:9a:fa:94:b4:e6:ca:1e:06:
3f:e3:c9:ae:0f:ef:7a:89:49:70:ba:3a:64:9a:06:
85:36:8d:71:b9:a7:5d:dd:fd:5b:69:71:5f:d8:5f:
04:85:21:f7:fe:4f:b1:98:67:eb:18:94:5b:83:2c:
36:3e:d1:b7:b9:0c:0d:59:18:05:28:02:e8:ea:b7:
82:50:a8:94:40:78:e3:99:d8:bb:60:7c:2c:a7:bb:
31:a6:e3:b3:a6:bf:23:f7:39:eb:c3:c7:cf:f0:98:
5b:97:94:1d:9a:bf:d7:19:0d:ea:c8:b8:11:db:f0:
82:51:45:71:b0:52:42:a2:83:93:33:1a:d9:e8:f3:
7b:66:18:37:63:89:d3:5e:8a:dc:08:cf:56:f0:75:
3e:a0:36:5b:a7:58:ac:f0:39:49:2c:b0:98:3b:3e:
9f:f9:e9:2a:c7:df:3b:82:7b:35:2b:c1:d8:b4:95:
8c:94:e7:66:9c:44:a7:85:9a:d4:25:7d:57:df:60:
49:da:97:a2:11:68:1f:ce:71:f0:d5:a4:62:07:c5:
f0:79:21:a0:7e:ed:1a:69:2c:85:41:fb:d4:bd:3c:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:15:CB:DD:F3:FC:68:7B:7F:9F:58:DC:66:CB:37:91:0C:96:6F:6A
X509v3 Authority Key Identifier:
keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e31302e302f32332d3234203d3e20323730303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.10.0/23
Signature Algorithm: sha256WithRSAEncryption
21:aa:cc:ab:0a:89:04:11:d3:77:b5:80:4f:b3:d7:a9:2a:e9:
7d:bb:d2:8f:16:6b:95:7f:d6:28:89:de:64:44:18:57:5f:0d:
9a:af:09:56:bd:23:de:1a:2b:6c:e0:ad:9e:90:9f:80:3e:7a:
73:51:9d:77:73:53:4f:ca:8e:8a:1e:71:34:cf:27:c5:15:95:
bc:a2:ac:f2:f9:ae:40:1b:08:fb:a4:14:fa:a7:cc:47:29:bf:
42:46:5e:32:48:11:35:c2:66:b2:17:a9:74:f5:51:27:ec:3a:
b0:85:cb:82:ef:96:ac:94:7a:7a:eb:c4:a4:d5:82:7f:9d:b7:
c9:c0:14:e5:ef:af:b3:9d:bf:85:fc:f4:f4:27:13:a4:e3:64:
a7:77:8e:ee:01:5b:35:55:82:f7:ae:2f:43:0e:38:31:f2:17:
49:4b:01:cc:fb:0a:01:65:6b:6a:50:5e:22:cd:52:e6:db:7f:
0e:99:c8:da:c8:ea:07:17:f5:79:62:2a:33:c9:01:f8:13:1d:
02:df:79:fd:95:c1:cb:53:1f:04:53:67:7c:04:c0:f5:5a:cc:
a8:87:23:41:7d:93:e4:09:80:7a:5e:c3:78:fa:6a:10:99:de:
a6:af:b7:47:d9:01:bc:63:b8:79:2e:d4:69:ad:41:b5:80:86:
04:ba:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:46 2025 by rpki-client