Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e382e302f32312d3234203d3e203237393933.roa
File: 3137302e3231302e382e302f32312d3234203d3e203237393933.roa (raw, json)
Hash identifier: MNKhgcy4VxnTWGAMoJrHXdMbYbc0D5xETRdH2vvMHZQ=
Subject key identifier: 9A:50:B3:0B:78:02:A7:8A:7D:3E:52:1A:4D:54:AC:2F:49:AC:A5:F7
Certificate issuer: /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial: 21970DD950B7647BAD6F65A3078BCB46E40B6FA6
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e382e302f32312d3234203d3e203237393933.roa
Signing time: Tue 04 Feb 2025 18:27:06 +0000
ROA not before: Tue 04 Feb 2025 18:22:06 +0000
ROA not after: Tue 03 Feb 2026 18:27:06 +0000
asID: 27993
IP address blocks: 170.210.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:97:0d:d9:50:b7:64:7b:ad:6f:65:a3:07:8b:cb:46:e4:0b:6f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Validity
Not Before: Feb 4 18:22:06 2025 GMT
Not After : Feb 3 18:27:06 2026 GMT
Subject: CN=9A50B30B7802A78A7D3E521A4D54AC2F49ACA5F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:d7:dd:93:b8:65:ef:dd:19:b2:ed:27:40:
24:9b:61:3c:67:53:00:2e:14:71:ca:0a:4a:db:ed:
5f:e1:a7:81:f7:65:9c:0c:01:28:d0:68:36:b4:18:
a8:10:ff:f4:8d:46:0a:b8:87:8e:4d:02:a7:cc:d9:
22:74:f6:67:d1:2c:68:2d:db:29:a6:d5:90:07:75:
ba:3a:8a:6a:10:79:d8:a6:ed:92:b1:21:a5:27:00:
14:2a:c9:38:52:87:03:8e:6c:ed:e4:3d:fa:7e:40:
a4:59:02:94:56:47:1b:76:9f:e0:36:10:34:ff:f9:
ab:c6:25:d4:52:a4:9c:08:c3:cd:34:68:4d:1a:57:
3b:5b:d9:a6:09:a5:f6:bd:f3:a6:d3:c3:3f:f0:80:
f7:ab:13:fd:3b:77:7e:4d:47:8e:70:1e:1e:d7:c3:
74:1e:4b:f0:c5:8b:1a:df:6c:0d:8e:7f:ce:50:e5:
b8:6a:8e:2b:47:f2:06:2d:a3:1f:12:c5:19:85:0f:
fc:3f:7f:be:12:30:dd:51:53:25:fd:8d:96:8c:db:
16:9c:0d:e2:34:c4:12:d9:80:d8:69:81:01:b4:f2:
96:5c:f8:38:06:a8:a3:22:b7:10:b9:aa:dc:bc:3a:
ff:b7:93:de:f8:dc:65:69:b4:96:6f:e4:17:f0:69:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:50:B3:0B:78:02:A7:8A:7D:3E:52:1A:4D:54:AC:2F:49:AC:A5:F7
X509v3 Authority Key Identifier:
keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e382e302f32312d3234203d3e203237393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.8.0/21
Signature Algorithm: sha256WithRSAEncryption
32:81:70:e8:98:ce:93:52:28:73:ed:2b:a9:a5:92:47:1c:b2:
33:48:0d:b5:11:f2:6c:76:a4:64:3f:26:c5:59:78:3d:85:aa:
11:49:f4:e2:49:ad:7e:07:61:65:8c:5e:64:cd:d5:7a:fe:b0:
2c:f7:f3:d9:1a:c4:c0:5b:58:50:fd:0c:c8:35:8e:8e:9b:db:
52:60:dd:3d:66:29:43:5c:8c:66:a7:65:9c:27:1e:7a:e5:45:
34:d4:98:5f:89:71:e0:03:c4:5d:4a:4d:de:ac:47:51:e0:de:
61:8f:cd:e3:2d:5a:1b:7a:b9:c3:03:bd:92:7b:d3:82:6d:65:
53:c4:c5:d9:98:d5:17:3e:97:d2:62:1f:86:23:38:22:18:38:
9a:0e:d8:bd:49:15:56:21:50:3b:ec:78:55:18:9b:3a:31:6f:
c6:08:d8:b9:b0:19:4b:2a:29:84:a7:79:12:14:e7:9d:c6:1a:
90:26:aa:0f:ab:06:44:5b:99:9c:bc:f3:be:f1:18:11:08:29:
fc:87:d7:76:38:b5:8f:ee:ca:f7:58:87:8e:df:bc:7e:f9:bc:
4e:ab:6a:95:ff:28:bf:7e:cf:dd:4d:a9:c6:32:a6:2d:32:ba:
c3:fb:c5:fa:08:de:7c:cf:b4:9d:3d:85:31:69:e9:1c:8f:31:
b3:0c:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:14 2025 by rpki-client