Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e32342e302f32312d3234203d3e203532343234.roa
File: 3137302e3231302e32342e302f32312d3234203d3e203532343234.roa (raw, json)
Hash identifier: 4HyLKSut4Yxt7oFrWcGAt4ffCy6n6Sf/98UIGOz71+0=
Subject key identifier: 80:77:C1:D4:E6:11:CA:E5:31:4B:07:A0:39:AF:D3:3C:0E:55:D2:13
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 2AA3D10E0D6E1EA970A0417155194907807B21B8
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e32342e302f32312d3234203d3e203532343234.roa
Signing time: Tue 04 Feb 2025 18:27:07 +0000
ROA not before: Tue 04 Feb 2025 18:22:07 +0000
ROA not after: Tue 03 Feb 2026 18:27:07 +0000
asID: 52424
IP address blocks: 170.210.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a3:d1:0e:0d:6e:1e:a9:70:a0:41:71:55:19:49:07:80:7b:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Feb 4 18:22:07 2025 GMT
Not After : Feb 3 18:27:07 2026 GMT
Subject: CN=8077C1D4E611CAE5314B07A039AFD33C0E55D213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:6d:c9:6e:33:4f:1b:80:d1:b2:4d:48:c9:
56:12:48:0b:62:bf:26:53:c9:92:ca:c1:43:91:c2:
62:e5:06:58:83:4a:45:94:5e:a3:7a:3e:ab:7d:0a:
28:05:1f:c7:9b:49:f9:d7:30:8f:ba:91:2f:bb:b6:
4c:d7:2b:ea:f2:d8:32:6c:f0:cb:67:c2:59:09:13:
c2:14:53:db:fc:80:c4:03:71:cf:24:64:29:96:f3:
78:8c:a6:2b:03:cb:5e:32:ed:f0:b2:7d:6e:f0:fb:
19:58:b5:cf:9e:38:2f:d4:53:93:3f:c5:53:4d:72:
1b:a3:f6:b0:c4:18:db:cf:44:69:39:88:91:06:20:
0c:b5:14:ad:14:94:4b:44:7a:3e:36:4a:29:c4:a2:
6e:dc:16:91:20:37:93:53:96:42:df:83:df:a1:1f:
36:ba:8e:68:73:6c:f3:96:c4:0b:d1:0c:15:ef:8a:
35:5f:e8:f1:7d:b0:22:16:5f:8d:84:67:15:15:b8:
5d:a5:c0:6c:18:46:b6:bb:37:14:9d:c3:cb:09:25:
2b:47:89:68:9b:a4:28:6a:eb:06:1c:ee:bb:5b:0d:
21:a8:35:ed:76:ad:fa:f8:86:3e:1b:51:76:e5:84:
b8:b4:1e:5f:92:f8:7e:6d:c1:2a:f6:03:53:4f:fe:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:77:C1:D4:E6:11:CA:E5:31:4B:07:A0:39:AF:D3:3C:0E:55:D2:13
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e32342e302f32312d3234203d3e203532343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.24.0/21
Signature Algorithm: sha256WithRSAEncryption
91:a6:a3:2e:96:17:08:25:c7:03:f1:1e:16:34:66:36:52:c6:
f7:ea:b9:8d:f8:fe:70:7e:b6:c2:37:ff:35:80:88:ca:67:01:
48:b3:f6:d8:b8:d5:59:92:1f:52:a5:4c:66:8d:26:23:9c:1f:
ac:0a:ac:4d:87:dd:41:ac:69:fd:95:20:7a:66:03:de:72:6f:
1d:fe:87:2b:f1:08:5a:04:d9:04:93:83:de:eb:21:0f:94:07:
27:d5:56:c9:07:8e:c3:44:a5:68:c9:92:9e:da:be:70:c9:79:
61:b6:06:11:fa:ae:62:36:6c:a3:43:cd:24:b7:21:1f:63:a3:
b9:d3:a7:f5:1f:1e:38:bd:c6:b0:97:2e:33:21:48:dd:c4:b1:
7c:4b:2f:03:e8:68:6d:c8:25:f4:c9:9a:be:1f:21:c0:1e:57:
95:d6:3b:46:cd:e1:02:99:12:1c:f1:a2:26:5a:c7:21:5a:1d:
0d:fd:d0:d1:13:aa:79:d9:30:94:01:17:da:3f:c7:4e:55:d1:
aa:9f:b7:b9:65:c5:80:61:f0:df:ea:48:f4:2a:ae:a9:4f:83:
30:fe:f1:52:0e:0c:62:87:1e:4a:b2:74:7b:ec:08:a1:dd:cb:
29:92:5f:f8:0a:f1:80:c1:b5:d9:88:64:56:ec:8c:73:02:b3:
d2:26:09:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:27 2025 by rpki-client