Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e36342e302f31382d3234203d3e20343031323138.roa
File: 3230312e3136312e36342e302f31382d3234203d3e20343031323138.roa (raw, json)
Hash identifier: n//Y0mk3u68ClcYOySrcDlvIXVw+zOaq9pjym2fL1Do=
Subject key identifier: 1B:83:52:33:01:C2:A8:44:17:54:DA:84:EA:EC:54:96:4D:C2:3F:42
Certificate issuer: /CN=7B4754677F95C7206EF2F0B184D6C5453BB5027F
Certificate serial: 1DAF97ADA8D49B288C5D944FFD18A6F4352D7049
Authority key identifier: 7B:47:54:67:7F:95:C7:20:6E:F2:F0:B1:84:D6:C5:45:3B:B5:02:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B4754677F95C7206EF2F0B184D6C5453BB5027F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e36342e302f31382d3234203d3e20343031323138.roa
Signing time: Sun 16 Feb 2025 00:35:00 +0000
ROA not before: Sun 16 Feb 2025 00:30:00 +0000
ROA not after: Sun 15 Feb 2026 00:35:00 +0000
asID: 401218
IP address blocks: 201.161.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:af:97:ad:a8:d4:9b:28:8c:5d:94:4f:fd:18:a6:f4:35:2d:70:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B4754677F95C7206EF2F0B184D6C5453BB5027F
Validity
Not Before: Feb 16 00:30:00 2025 GMT
Not After : Feb 15 00:35:00 2026 GMT
Subject: CN=1B83523301C2A8441754DA84EAEC54964DC23F42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:94:b3:9a:c7:83:48:f1:a2:b0:81:b2:d3:
78:6b:38:86:85:ef:1e:b6:d8:c1:28:6f:08:ed:a5:
99:f6:3e:d7:c0:fb:71:d0:3c:48:d2:93:f0:cb:e7:
2b:56:c1:f9:cf:bd:74:b3:0f:85:18:d1:cc:b0:b6:
11:df:b5:b8:d2:d3:f8:a4:9e:92:94:77:7b:0f:18:
c1:a8:9e:ee:37:e2:47:de:c2:9d:6a:87:c4:18:e9:
ac:08:63:05:e9:70:94:96:6e:52:08:76:7b:6d:54:
72:5d:aa:6e:a0:c1:e6:43:27:64:e7:e4:c9:4e:9d:
bd:c5:fb:e3:e2:7b:fc:43:de:cc:69:32:f8:95:c3:
50:63:05:59:35:1d:ec:62:dc:0b:f7:cc:bf:bd:db:
4a:8c:83:be:d0:c4:f6:99:7d:78:20:92:4e:cb:fb:
fb:7b:5e:0e:3b:5b:b1:7c:c2:f3:c1:91:9f:06:5d:
01:cd:b5:68:07:b5:5d:f7:e8:29:71:a8:d5:ba:94:
16:b1:88:af:ba:10:a2:94:1d:60:cd:13:56:b3:60:
e0:15:b0:8d:5c:ab:d0:de:09:c4:0c:dd:d6:0c:95:
a0:48:45:d3:b0:8c:21:25:51:b3:8f:19:24:93:2d:
47:a5:fe:cd:fc:9d:22:21:bf:82:37:31:8c:16:ba:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:83:52:33:01:C2:A8:44:17:54:DA:84:EA:EC:54:96:4D:C2:3F:42
X509v3 Authority Key Identifier:
keyid:7B:47:54:67:7F:95:C7:20:6E:F2:F0:B1:84:D6:C5:45:3B:B5:02:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/7B4754677F95C7206EF2F0B184D6C5453BB5027F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B4754677F95C7206EF2F0B184D6C5453BB5027F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e36342e302f31382d3234203d3e20343031323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.161.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:08:51:99:28:31:9e:3e:e9:e4:e9:9c:d4:29:67:88:bc:4f:
e1:d5:2f:02:d4:eb:3a:54:1d:30:10:cd:4b:20:fb:08:48:a6:
0f:1a:f5:1c:2f:68:12:53:0f:e2:1a:5b:fd:66:e0:93:9c:c6:
0d:a9:72:cb:81:2d:2d:2b:95:ec:b2:56:18:0e:a3:1b:47:5f:
df:c9:d9:19:7e:de:24:0e:89:a3:31:b2:d5:8e:18:1a:0e:dc:
f4:5a:40:8b:88:61:fc:9b:38:72:b2:b5:8e:07:2c:d0:2b:10:
4e:65:ee:72:a0:84:4c:7a:b2:24:e8:c6:24:36:51:89:1a:ff:
59:70:44:49:26:71:de:f9:14:ad:27:23:53:8f:ac:3c:47:1f:
a1:de:df:bd:1b:f1:8b:de:30:5b:e6:7c:f7:d9:5f:6c:c1:05:
e8:08:5d:1f:1e:0e:6f:bd:4b:3f:91:12:50:e4:a2:4b:32:16:
bc:bf:85:02:ce:21:4b:7c:ba:f9:b1:8a:7c:91:9d:4d:cd:d1:
53:80:df:37:bd:a8:52:d6:23:25:f8:88:ed:df:13:a6:f4:f8:
12:22:53:6b:e8:8e:6c:30:00:f5:f4:53:e5:86:7a:46:f2:36:
de:f2:96:ba:26:e7:2e:f8:a8:bd:91:d3:7c:c7:59:c2:74:2a:
a8:0b:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:46:01 2025 by rpki-client