Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3134332e3235352e3133362e302f32322d3232203d3e203631353039.roa
File: 3134332e3235352e3133362e302f32322d3232203d3e203631353039.roa (raw, json)
Hash identifier: 7p7D590nHVYLMiCqmN3krqRe0CExKB08rBA/qA4Cr2w=
Subject key identifier: C1:C5:F9:29:D3:B9:ED:00:DB:18:C9:DF:E6:BC:4D:88:7A:7A:0D:1D
Certificate issuer: /CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Certificate serial: 63227BD66777CCE80A06164EE75580C84C7EE17D
Authority key identifier: 9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3134332e3235352e3133362e302f32322d3232203d3e203631353039.roa
Signing time: Tue 04 Feb 2025 18:02:30 +0000
ROA not before: Tue 04 Feb 2025 17:57:30 +0000
ROA not after: Tue 03 Feb 2026 18:02:30 +0000
asID: 61509
IP address blocks: 143.255.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:22:7b:d6:67:77:cc:e8:0a:06:16:4e:e7:55:80:c8:4c:7e:e1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Validity
Not Before: Feb 4 17:57:30 2025 GMT
Not After : Feb 3 18:02:30 2026 GMT
Subject: CN=C1C5F929D3B9ED00DB18C9DFE6BC4D887A7A0D1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:93:f4:38:ef:ca:e9:8d:b0:19:0a:95:0e:
8f:b5:7e:4c:a5:c4:77:9b:bf:fe:de:f5:95:af:ea:
ca:73:cf:c9:77:48:ce:03:59:9b:94:a7:53:a2:81:
ba:ab:76:fa:d1:df:fc:bf:23:ed:98:d4:ec:ee:59:
62:b6:d7:39:be:a1:eb:9f:87:15:a7:69:d0:cf:a4:
c5:09:7f:32:6e:61:04:9b:6a:4b:16:30:fc:1f:7d:
57:b3:4d:4c:79:a6:b6:1f:e5:4f:16:72:3f:e1:e5:
aa:f5:78:fc:2f:13:85:0e:6f:65:b9:bf:f8:77:d5:
e0:7f:e1:9a:a8:24:c5:dd:dc:7f:4a:2b:b4:24:6c:
62:d7:aa:ca:dd:3d:a1:51:14:43:31:b9:24:86:24:
3b:3d:35:81:b8:96:5c:83:87:26:e5:86:63:7b:f6:
d8:4b:99:0e:1d:9b:f1:54:24:49:fe:2d:2d:38:7a:
42:d6:57:31:4a:91:8f:d6:22:e7:49:ec:f1:bb:a9:
63:97:e9:0f:07:f7:97:46:40:c9:35:ec:47:43:07:
90:b1:52:a3:e2:0b:3c:d9:75:e3:94:56:c3:6d:43:
5d:82:1c:cb:be:6b:33:d0:b2:87:0c:a5:18:85:88:
16:7e:3f:a1:81:cd:ca:b5:24:cb:cc:80:9e:a8:df:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C5:F9:29:D3:B9:ED:00:DB:18:C9:DF:E6:BC:4D:88:7A:7A:0D:1D
X509v3 Authority Key Identifier:
keyid:9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3134332e3235352e3133362e302f32322d3232203d3e203631353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.136.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:89:fc:de:ba:0c:4d:9b:0a:12:e2:24:fb:e3:da:61:d5:54:
ca:0d:26:14:55:22:74:b7:46:c4:8a:c2:b0:07:2c:3a:b8:18:
f3:58:f3:c3:c0:c6:1e:0b:2c:c3:0a:e8:b7:65:96:7a:c0:e2:
84:59:ba:d7:74:28:3e:16:39:da:51:3d:5e:23:dc:fb:3f:88:
4a:87:84:02:ea:14:0e:1f:70:91:2c:18:11:14:d3:90:5b:c5:
68:4d:bf:b6:3c:56:97:22:7b:77:ed:69:9a:6c:35:47:a4:49:
f8:77:79:f8:fd:8a:67:dc:63:a3:b4:81:56:65:74:ae:90:1c:
d9:9c:49:9c:b2:ae:0d:32:8b:f3:10:f0:d5:72:41:e2:d1:30:
70:aa:e1:e6:7c:94:e9:3f:fa:a2:1f:c3:7b:17:dc:ec:cb:0f:
b4:82:54:13:78:af:6d:e2:95:7c:31:b6:96:7c:8c:92:19:58:
7b:5b:c6:1e:51:52:44:52:90:a3:2d:2e:09:d3:ad:0c:a4:3c:
cb:50:05:b6:84:59:81:11:54:ed:12:0e:04:aa:3d:89:ae:a0:
00:93:a6:d4:b2:9f:c9:32:f5:87:24:fa:12:01:21:f4:9d:5e:
b3:09:23:f5:95:44:f8:ab:b7:86:1c:90:53:e4:b5:85:84:af:
99:29:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:36 2025 by rpki-client