Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33352e302f32342d3234203d3e20323637373937.roa
File: 3136352e39382e33352e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier: T8oZ58TO1mcQp/kdS47Kn8QtdLQekiJjJvQkT6scStY=
Subject key identifier: 72:18:CD:3B:88:C3:B7:D7:8F:1C:5E:BD:77:4A:67:EA:D1:A6:26:54
Certificate issuer: /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial: 177C5B4413A0F65CAFA3BCD9139EC9E9B2AC4DC6
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33352e302f32342d3234203d3e20323637373937.roa
Signing time: Tue 18 Mar 2025 14:35:00 +0000
ROA not before: Tue 18 Mar 2025 14:30:00 +0000
ROA not after: Tue 17 Mar 2026 14:35:00 +0000
asID: 267797
IP address blocks: 165.98.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7c:5b:44:13:a0:f6:5c:af:a3:bc:d9:13:9e:c9:e9:b2:ac:4d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Validity
Not Before: Mar 18 14:30:00 2025 GMT
Not After : Mar 17 14:35:00 2026 GMT
Subject: CN=7218CD3B88C3B7D78F1C5EBD774A67EAD1A62654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:82:65:db:12:0e:1b:db:a0:eb:84:fe:3c:
34:d8:af:77:ec:d0:b2:8d:c3:36:75:51:25:95:33:
3f:5b:b9:e2:bb:77:e4:64:2a:81:37:63:44:28:3f:
b6:b4:8f:11:71:b2:44:e6:4a:03:56:df:d8:ca:e1:
60:71:6c:5b:11:45:ce:7a:94:1c:58:73:6e:dc:af:
cf:62:81:cf:03:1f:23:84:09:80:7f:41:ed:42:89:
dd:e0:e5:4a:84:a3:d5:d0:e1:b0:0a:b8:8b:35:8d:
fa:cd:9e:fc:64:7e:b6:da:0d:5a:bf:6e:78:11:17:
9e:ed:20:df:b4:58:62:eb:e5:be:56:97:23:b4:da:
75:0b:2f:55:7a:27:1d:2f:b8:e9:51:0a:97:d0:f6:
8f:9b:a8:4f:d8:1f:44:57:8e:f1:c3:ea:fe:b2:d1:
75:59:03:30:f2:5c:da:ad:41:a4:b9:03:b7:d4:f4:
7f:c4:11:f8:7c:c6:71:c6:a2:22:34:ac:6c:1c:92:
ba:6f:a9:5f:76:e4:39:8c:89:2d:96:31:9a:e5:f9:
8c:92:b4:38:4e:be:46:e8:38:76:dc:91:ba:9d:15:
a0:0a:5c:4c:bd:99:74:b7:fa:23:4c:b0:82:71:37:
f7:00:a2:31:1c:48:29:6e:5f:56:21:66:a2:6e:7e:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:CD:3B:88:C3:B7:D7:8F:1C:5E:BD:77:4A:67:EA:D1:A6:26:54
X509v3 Authority Key Identifier:
keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e33352e302f32342d3234203d3e20323637373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.98.35.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:f4:ee:a9:ca:f5:98:27:c4:2a:a3:16:25:09:cc:bf:21:ed:
b5:c1:56:bd:f0:4e:41:a2:7d:5a:80:89:60:eb:e9:5d:f4:e9:
6b:67:ab:b9:ad:71:38:1a:b1:10:fd:34:d4:e9:71:f8:44:49:
b7:a7:07:d5:8f:c9:6f:12:62:c9:49:f0:82:dd:83:57:37:be:
79:bc:c3:1d:93:35:0f:6f:76:ff:dd:56:2a:d8:fa:b4:81:3a:
0f:5d:34:d6:be:6a:dc:12:ec:91:47:d9:26:17:1e:0a:5e:50:
03:6d:42:f3:eb:8e:ca:0d:fc:60:5d:d0:03:ea:a2:55:c8:c9:
3a:04:cd:3e:6e:32:13:6a:0b:7f:f4:08:e8:86:eb:6d:3b:70:
6c:6b:aa:84:5f:08:4b:bc:ae:02:17:a9:a8:72:9c:d0:b3:f7:
3a:83:d5:ee:00:5e:d2:f0:93:a7:97:48:bc:2e:b7:05:7d:83:
a9:60:8e:fa:83:48:5f:39:24:2e:74:e2:af:f7:7c:59:fa:11:
64:5a:6f:78:81:9b:c6:58:6d:12:b2:8a:89:d8:67:fa:e4:ad:
fc:44:a6:e8:09:6b:1d:60:d6:57:d2:06:fa:01:35:3f:45:06:
50:67:23:07:d3:c6:c7:05:6a:ab:7b:c3:85:91:3a:8e:70:bb:
7b:b1:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:11 2025 by rpki-client