Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e35362e302f32322d3234203d3e20323632313536.roa
File: 3137302e3231302e35362e302f32322d3234203d3e20323632313536.roa (raw, json)
Hash identifier: GJfJQrAk20DNybraCpyl/voKvtzP/QSR6PXssKwaT10=
Subject key identifier: 0B:48:BE:97:AC:ED:97:5D:CD:60:00:8F:90:17:7A:06:35:5E:F7:B5
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 0F9C856ED7EC021A6EB82B2B98078743C8E035B6
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e35362e302f32322d3234203d3e20323632313536.roa
Signing time: Tue 04 Feb 2025 18:27:06 +0000
ROA not before: Tue 04 Feb 2025 18:22:06 +0000
ROA not after: Tue 03 Feb 2026 18:27:06 +0000
asID: 262156
IP address blocks: 170.210.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9c:85:6e:d7:ec:02:1a:6e:b8:2b:2b:98:07:87:43:c8:e0:35:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Feb 4 18:22:06 2025 GMT
Not After : Feb 3 18:27:06 2026 GMT
Subject: CN=0B48BE97ACED975DCD60008F90177A06355EF7B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:ff:69:f9:19:d3:95:84:da:de:79:5c:be:
ef:22:75:cf:f5:af:69:56:4d:dd:4e:23:51:0a:b4:
6d:ba:e4:1a:8d:98:68:c8:6f:9d:bf:a7:25:c8:00:
c7:f9:a6:27:17:77:22:f2:4a:29:2e:13:95:01:43:
83:90:0d:1a:ed:4d:e0:4f:65:1f:9b:22:86:c4:8d:
a2:b7:9b:3c:c7:e5:e5:3b:7c:a3:a0:85:f2:c0:7e:
64:5c:1f:0c:2d:c9:73:44:c0:b7:3f:a3:54:a8:2c:
1b:91:45:d6:17:26:19:f8:6c:58:30:9a:64:40:88:
60:13:c9:6e:37:e7:03:d9:44:67:01:37:68:38:e9:
f7:51:56:ee:26:3a:56:2d:7b:6d:6a:be:34:b2:ca:
c7:93:95:ab:0c:2f:42:63:17:84:4c:f4:aa:6f:14:
f5:31:33:27:6d:ba:34:84:93:96:35:c5:49:7c:58:
46:43:19:02:ab:cb:d1:3f:31:94:d4:4d:e8:b0:57:
5b:32:2e:e7:a9:3e:86:ed:fc:e0:38:ad:75:af:3b:
8b:79:7b:99:00:c5:25:df:8a:bc:68:f0:f9:2a:cb:
48:99:f8:5b:ac:5b:5f:b7:57:ba:af:46:3d:83:fd:
09:db:ab:4f:ba:93:56:b3:01:e6:56:d6:ef:78:34:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:BE:97:AC:ED:97:5D:CD:60:00:8F:90:17:7A:06:35:5E:F7:B5
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e35362e302f32322d3234203d3e20323632313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:46:48:fc:85:53:84:4f:dd:94:46:de:f2:64:75:ba:37:13:
f6:b3:17:a1:cf:9f:86:aa:e0:15:aa:2e:fc:09:bb:40:ba:e6:
6f:07:1b:bb:32:97:1d:41:b1:e2:2f:c2:3c:e0:f5:fb:89:9e:
2a:a1:57:67:b3:81:84:68:ce:41:c7:0a:56:62:5b:39:de:94:
96:ea:b6:30:82:63:f0:e1:30:67:7f:64:8a:07:5a:42:be:d5:
c1:1a:38:ab:ab:b2:52:5b:62:27:68:fc:13:c3:23:ad:d6:0c:
19:d6:ce:a3:0d:c9:63:10:25:ef:4f:55:50:8e:9e:b5:25:57:
54:9b:d4:14:fb:d2:dc:38:9b:c1:0c:10:f4:a3:88:17:df:5e:
80:e8:f0:e0:55:c4:84:fb:28:ca:8d:99:70:0c:90:91:c5:fe:
93:a4:63:12:b7:91:8f:30:f9:e8:b4:0c:27:0a:ef:9d:41:1e:
b8:63:a8:79:93:f9:c7:47:47:10:07:76:57:49:41:82:2d:80:
bf:12:4c:76:0e:79:c1:3c:6e:de:fd:79:19:29:2b:4c:16:30:
94:5b:79:89:8f:6c:1b:76:5a:3c:fe:3a:55:d8:cf:34:82:e0:
54:0f:40:08:ed:00:6d:d5:01:38:7d:94:be:1c:f6:11:a9:81:
15:e5:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:52 2025 by rpki-client