Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3133312e3130382e3233322e302f32322d3234203d3e20323632323334.roa
File: 3133312e3130382e3233322e302f32322d3234203d3e20323632323334.roa (raw, json)
Hash identifier: HCiEmN4N8WHXla6wIDAk771mUsAzi+3rCmAniYtte+c=
Subject key identifier: EA:82:19:D0:5B:A9:60:60:00:0F:40:E5:47:E7:2E:AF:06:3C:72:0D
Certificate issuer: /CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Certificate serial: 603BE2BF346A0636C5C15368DA06DDE03FAAE026
Authority key identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3133312e3130382e3233322e302f32322d3234203d3e20323632323334.roa
Signing time: Tue 04 Feb 2025 17:59:03 +0000
ROA not before: Tue 04 Feb 2025 17:54:03 +0000
ROA not after: Tue 03 Feb 2026 17:59:03 +0000
asID: 262234
IP address blocks: 131.108.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3b:e2:bf:34:6a:06:36:c5:c1:53:68:da:06:dd:e0:3f:aa:e0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Validity
Not Before: Feb 4 17:54:03 2025 GMT
Not After : Feb 3 17:59:03 2026 GMT
Subject: CN=EA8219D05BA96060000F40E547E72EAF063C720D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:ca:d1:ae:a7:18:13:6b:50:55:8f:3b:e8:
6a:d2:ed:b1:ca:48:59:e6:3e:ba:a6:85:59:c1:73:
b1:df:f2:9c:4b:bd:e8:20:47:a0:d5:bc:14:c9:32:
f9:62:0f:df:8c:43:64:37:04:ee:87:ef:ec:82:99:
fe:4b:b7:40:7d:f7:d4:69:61:f6:f9:a8:3f:74:3f:
79:a5:6e:5f:8c:9f:09:1d:4a:10:1b:4e:29:5b:b2:
ff:8f:1c:ef:31:ac:24:b6:44:2c:4f:f9:50:5b:07:
d1:4e:3f:18:fa:de:75:4f:9b:6b:5b:93:35:e8:5d:
95:3d:bd:7d:55:83:c0:1f:c3:0e:31:d9:3c:82:3d:
df:58:b3:7d:47:84:8b:f5:fc:d2:c1:6a:ee:46:b5:
11:3f:d6:69:cd:d5:cb:35:22:da:b1:4c:9a:54:61:
41:3f:b5:9c:2b:11:80:0d:6c:25:00:b0:75:68:d2:
51:2f:32:8d:4d:52:b0:8c:2f:b7:16:0e:9b:c9:de:
d6:87:d1:30:f6:6f:43:5b:9e:71:eb:0d:79:ca:b7:
a5:10:fb:e4:2e:a1:76:20:be:fa:0e:e5:78:9c:60:
7d:4a:07:17:32:f6:e5:39:29:a6:16:f7:ea:fd:2b:
07:e0:11:de:79:e7:f2:a4:b5:b3:43:4d:22:39:62:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:19:D0:5B:A9:60:60:00:0F:40:E5:47:E7:2E:AF:06:3C:72:0D
X509v3 Authority Key Identifier:
keyid:22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3133312e3130382e3233322e302f32322d3234203d3e20323632323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.232.0/22
Signature Algorithm: sha256WithRSAEncryption
26:a0:45:85:ad:73:0f:9d:08:d0:4a:ef:12:24:54:70:44:70:
0b:3a:4b:c8:c9:ca:58:90:40:14:ec:e9:eb:1e:c5:12:c5:4e:
45:b5:3c:2b:f6:44:71:77:8b:83:3e:61:65:fe:2f:a7:9a:c2:
51:e7:4d:fc:85:bb:0f:d5:1b:ba:91:3b:36:fe:2b:40:5c:65:
7a:ef:14:a3:19:1c:f2:c5:fc:33:f1:7a:44:70:49:47:fd:13:
6a:31:0b:78:61:17:8b:ce:9d:ea:01:65:38:4a:d7:bd:6d:8f:
c2:3a:7d:b3:4a:e4:16:f0:73:cf:f1:35:a5:06:47:57:97:da:
7e:34:c3:98:1e:5a:36:88:58:d6:b2:7d:f4:f2:4c:64:3b:82:
37:28:83:aa:c0:9f:7d:d1:f5:3a:42:2a:d4:27:fe:bf:4f:c9:
66:56:b0:58:44:46:b3:d4:cf:6c:c9:b0:31:d1:3c:7b:2d:4a:
35:89:f6:e1:d6:e8:7e:22:2d:f9:78:1f:22:b7:e9:6e:3e:e7:
3b:bc:0b:0f:48:6f:ce:da:1e:35:be:ed:7a:40:c1:37:32:de:
a1:15:3f:76:07:94:33:e7:ff:07:2a:0e:a1:34:ee:38:4e:f8:
fd:76:95:b4:3e:d3:e7:8e:20:16:6a:23:f3:23:f0:19:68:fb:
49:7f:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:14 2025 by rpki-client