Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3137302e3234362e3131322e302f32322d3234203d3e203237393531.roa
File: 3137302e3234362e3131322e302f32322d3234203d3e203237393531.roa (raw, json)
Hash identifier: nfGUcCLo8q3bDlroCjEJL/nPQE1AumNNPuzkXwoN8ds=
Subject key identifier: DA:C5:A5:98:D5:2F:D6:52:A8:4B:03:D7:4E:F6:68:1C:23:C3:9F:71
Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial: 1810D284380A92ED625AAFE232E4E35285A0A402
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3137302e3234362e3131322e302f32322d3234203d3e203237393531.roa
Signing time: Tue 04 Feb 2025 19:56:49 +0000
ROA not before: Tue 04 Feb 2025 19:51:49 +0000
ROA not after: Tue 03 Feb 2026 19:56:49 +0000
asID: 27951
IP address blocks: 170.246.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:10:d2:84:38:0a:92:ed:62:5a:af:e2:32:e4:e3:52:85:a0:a4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Validity
Not Before: Feb 4 19:51:49 2025 GMT
Not After : Feb 3 19:56:49 2026 GMT
Subject: CN=DAC5A598D52FD652A84B03D74EF6681C23C39F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:ab:37:0a:f6:52:0a:ac:da:1b:e3:b4:f6:
fe:8e:79:b3:04:d4:5f:b7:4c:f7:fe:2b:f6:83:a2:
02:48:ad:17:a4:ef:33:c1:9e:f4:6f:52:e8:aa:35:
bd:e0:2a:c2:51:55:b5:a2:ca:c3:3d:e0:c9:f3:e8:
16:77:db:31:d5:96:c7:69:d4:04:d4:87:3a:6d:6d:
6b:56:25:ac:7d:42:06:43:70:df:2b:1f:a6:fc:26:
6c:fb:a9:0b:c9:bd:7e:f7:c3:9d:71:a9:29:dd:50:
32:3b:0e:ae:74:01:5a:23:16:40:12:c2:63:b9:c8:
45:ab:4c:d4:ec:18:66:e2:ba:c6:23:ef:24:f4:c3:
d7:37:a3:95:9a:d8:eb:af:46:a9:b3:3c:64:45:97:
92:8b:be:b4:46:8e:6b:01:42:74:50:e8:be:96:ef:
7e:1b:09:6d:b2:d7:db:72:91:4b:c7:4b:15:eb:1b:
22:c2:80:cf:19:41:11:5a:db:9e:0e:9d:68:a6:4c:
f3:86:c0:b0:c1:b6:88:4b:87:95:02:8b:cd:61:06:
d6:b0:be:8d:d0:a8:45:49:18:59:c6:31:57:84:15:
aa:ab:77:81:d6:c1:72:f0:6e:29:0d:e6:18:b0:e5:
42:eb:0d:82:3c:a7:d2:4c:a5:74:bb:c9:c6:fc:f8:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C5:A5:98:D5:2F:D6:52:A8:4B:03:D7:4E:F6:68:1C:23:C3:9F:71
X509v3 Authority Key Identifier:
keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3137302e3234362e3131322e302f32322d3234203d3e203237393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.112.0/22
Signature Algorithm: sha256WithRSAEncryption
69:37:16:fb:e7:68:2a:af:e0:2e:21:0b:45:2c:b2:7c:7f:b8:
bf:5c:45:10:da:b9:bb:1e:ab:a5:8e:f3:f9:62:0a:31:15:3b:
1f:be:44:74:54:ff:d2:cd:dc:c2:42:bc:8f:f4:c1:73:4a:0e:
94:24:a4:6c:6f:6f:37:ae:5d:9a:ed:97:97:d7:12:d0:35:31:
7f:60:0e:52:9a:86:aa:b6:ec:f9:64:a9:e8:55:ce:ae:5b:f7:
48:2b:2a:b5:74:54:eb:05:d1:ad:16:de:2e:15:31:fe:07:ad:
15:a8:1a:c3:5b:6c:51:45:7c:7f:81:3b:18:76:0d:87:9d:31:
40:0a:7a:1d:c6:3d:f3:6d:92:df:aa:2e:57:36:52:dc:0b:f3:
50:bc:5e:8c:e9:77:9f:1a:bb:7f:62:78:7b:25:45:7b:e3:ff:
27:74:3a:41:34:89:de:fb:72:18:ad:e1:66:e8:45:25:9f:65:
ab:3f:cf:a3:26:ec:97:44:82:af:a2:9c:12:28:2d:81:9e:11:
d7:3f:73:e2:73:c9:6f:e4:b3:91:46:c4:23:c0:ff:1f:19:c2:
75:96:b6:2a:57:4b:bd:1f:8f:26:2b:b4:92:0b:1d:d7:8a:d0:
c2:84:ee:fa:1e:f6:18:cc:21:2c:8a:66:80:77:c3:23:1a:fa:
e4:8c:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:13 2025 by rpki-client