Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3134332e302e3136382e302f32322d3234203d3e203238303830.roa
File: 3134332e302e3136382e302f32322d3234203d3e203238303830.roa (raw, json)
Hash identifier: xyKLt6IQpBY5MM3VeiNEwjKAqgHSKG7XokUFSIUVcXI=
Subject key identifier: B0:9C:3C:26:16:31:67:0C:05:C0:57:8C:35:03:9D:27:A4:13:33:4E
Certificate issuer: /CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
Certificate serial: 7A15F268AC1AA49112B9C7A4846E6524D6D7764F
Authority key identifier: 29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3134332e302e3136382e302f32322d3234203d3e203238303830.roa
Signing time: Tue 04 Feb 2025 18:48:17 +0000
ROA not before: Tue 04 Feb 2025 18:43:17 +0000
ROA not after: Tue 03 Feb 2026 18:48:17 +0000
asID: 28080
IP address blocks: 143.0.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:15:f2:68:ac:1a:a4:91:12:b9:c7:a4:84:6e:65:24:d6:d7:76:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
Validity
Not Before: Feb 4 18:43:17 2025 GMT
Not After : Feb 3 18:48:17 2026 GMT
Subject: CN=B09C3C261631670C05C0578C35039D27A413334E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:3c:4e:b1:f6:bb:e1:5f:99:a2:87:c9:fd:
a9:70:4e:32:32:d8:db:13:f4:6f:cd:8a:fa:5e:04:
ab:02:30:79:8f:cf:36:70:cf:7d:6d:97:f2:1e:85:
c7:51:bf:5d:f6:60:82:7e:eb:58:b8:a1:67:a2:42:
7c:c9:18:81:98:ce:73:8d:96:2b:2e:68:2a:77:ed:
e2:4d:d2:b2:95:48:5e:0f:66:26:21:69:21:2f:5c:
4a:de:da:50:96:0f:04:e7:44:f7:9f:32:72:87:60:
d6:7a:12:30:f0:a3:ed:f8:32:2d:25:5a:20:56:dc:
5b:e9:5a:9d:63:ca:d0:63:c5:39:97:d4:c0:1e:42:
f7:f7:bc:37:64:43:0a:0b:ed:fe:11:e8:f1:7b:d8:
4c:10:67:db:94:e0:71:0a:09:cd:93:8d:42:33:b0:
e5:04:e2:fa:e3:42:2a:22:20:8f:b3:43:86:27:8b:
70:52:a5:e7:e8:6a:8c:9c:92:67:52:64:35:58:a7:
2c:50:e9:e3:5c:07:1e:5c:f1:29:fa:a2:10:1c:85:
a4:56:a6:ec:d2:9c:93:35:c1:8e:e7:07:8f:74:74:
2f:4f:79:f3:37:59:94:d5:ff:d0:1d:b8:d9:71:85:
7c:ba:0d:9b:5b:50:35:e1:0d:39:c7:99:f2:65:c0:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:3C:26:16:31:67:0C:05:C0:57:8C:35:03:9D:27:A4:13:33:4E
X509v3 Authority Key Identifier:
keyid:29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3134332e302e3136382e302f32322d3234203d3e203238303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:12:28:13:ed:f0:f7:32:ca:a7:0f:ba:eb:09:5c:d1:2c:1d:
15:f8:69:9b:dd:ee:c4:2f:61:fc:10:c0:c8:9d:ec:6b:fe:c0:
83:22:19:5a:b4:e3:52:bc:45:c0:dc:dc:a6:01:19:7f:85:15:
81:b9:c4:26:92:b7:8f:f9:98:21:64:b1:99:4c:b6:0e:88:3f:
40:0a:74:91:de:06:d1:af:ab:37:fd:0f:28:30:2e:78:5b:4c:
54:05:b2:33:b7:1d:04:a8:c7:e5:64:d3:05:16:6f:80:44:c3:
f4:74:c6:57:d9:52:6d:e3:89:44:19:7b:72:cb:a3:a8:4f:9c:
81:16:f5:c4:28:b0:52:6e:11:3e:15:e1:d6:77:33:4d:df:c0:
31:2c:99:d7:f5:79:ae:5b:05:5c:d5:eb:6b:b3:fa:2f:88:4e:
de:90:e9:c0:18:b9:ca:6d:47:49:b2:68:47:9b:02:92:bc:f7:
a9:8a:d3:a3:10:24:ca:95:53:d5:56:f9:1d:d0:ea:90:bf:a9:
27:55:2a:b3:f9:be:9f:52:c2:59:81:0c:45:73:f5:0c:e3:9d:
5d:67:ea:78:9c:13:05:65:e3:6a:7f:c0:e9:5e:bc:2a:48:d0:
85:b5:d1:2f:c2:51:90:99:76:2c:fd:45:21:c6:52:69:fc:21:
49:b1:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:11:04 2025 by rpki-client