Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e38322e302f32342d3234203d3e20323637373937.roa
File: 3136352e39382e38322e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier: 2d7MGuEprUlc6/M2f7s4C5b7v34NZDe+YwyDHdgEht8=
Subject key identifier: C1:7A:A9:2A:24:B4:92:61:CE:05:B3:3E:D3:0F:EB:61:60:CB:8A:B9
Certificate issuer: /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial: 7364A78A0B2879475B2C5437EF4604BB256EF654
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e38322e302f32342d3234203d3e20323637373937.roa
Signing time: Wed 19 Mar 2025 21:25:00 +0000
ROA not before: Wed 19 Mar 2025 21:20:00 +0000
ROA not after: Wed 18 Mar 2026 21:25:00 +0000
asID: 267797
IP address blocks: 165.98.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:64:a7:8a:0b:28:79:47:5b:2c:54:37:ef:46:04:bb:25:6e:f6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Validity
Not Before: Mar 19 21:20:00 2025 GMT
Not After : Mar 18 21:25:00 2026 GMT
Subject: CN=C17AA92A24B49261CE05B33ED30FEB6160CB8AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:99:8b:78:8e:0d:e6:bd:f2:ba:a4:87:32:
83:03:c2:83:d0:eb:15:70:98:fa:17:51:43:79:37:
2e:3d:1f:7a:e4:db:31:c9:b6:76:f4:d9:37:76:65:
0f:83:22:01:ba:7c:14:86:5a:88:45:37:c8:e1:71:
0b:8d:50:f9:85:aa:36:37:3f:33:1f:f3:b8:7a:d3:
59:ab:8c:6c:18:8b:c2:82:05:0d:1f:63:62:b6:9b:
94:3e:0f:1b:28:dc:27:87:6e:9b:f2:9c:69:75:31:
8d:23:67:a3:45:9e:34:99:30:df:f1:71:b5:99:08:
fa:2a:6b:ae:cd:59:d7:56:89:b3:01:b4:55:73:f4:
f1:77:c0:07:e4:9d:72:22:9e:75:ca:61:28:40:97:
6b:5c:c8:2e:5e:47:75:44:48:f9:60:02:dd:75:6b:
9b:bf:cb:b9:27:8a:8b:a0:2d:e7:df:88:24:1e:f7:
34:a0:bb:30:1c:b4:f3:bd:97:49:3f:86:8e:02:9c:
31:43:a8:64:39:ad:67:d8:da:46:2d:d2:b2:35:0a:
4f:58:c4:13:bd:1a:57:e9:99:4f:20:74:e0:bd:ac:
76:2f:80:20:5e:ce:06:c0:c7:94:08:25:17:35:11:
0e:87:2f:a2:c0:3d:d3:08:89:d3:4e:b7:a2:08:0f:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:A9:2A:24:B4:92:61:CE:05:B3:3E:D3:0F:EB:61:60:CB:8A:B9
X509v3 Authority Key Identifier:
keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e38322e302f32342d3234203d3e20323637373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.98.82.0/24
Signature Algorithm: sha256WithRSAEncryption
35:30:64:6f:61:a6:fc:b9:84:70:3a:4a:76:48:43:22:43:6f:
e0:a7:d1:6e:f7:4e:b1:6e:97:d0:24:3d:90:5f:c5:96:4a:cc:
28:3b:69:37:74:30:3d:d2:18:c2:72:e7:33:78:81:d7:d8:be:
0d:31:f0:60:bc:a8:6e:52:e5:69:c7:b0:08:98:4e:d7:af:e4:
b1:0f:0d:64:21:9b:12:c1:45:59:d1:39:d7:68:d7:b8:13:62:
b9:cd:13:f3:18:2f:c0:5f:ad:88:91:ab:de:89:bf:52:f5:eb:
36:33:e8:c8:9d:cd:53:c7:00:6b:bd:3e:62:14:98:8b:87:8f:
06:d9:a6:0b:0c:cf:20:b5:81:74:58:4f:bb:48:9e:81:f4:d4:
ca:a9:85:de:d5:7e:b2:71:7e:e9:2c:78:6d:9b:5b:dc:14:ce:
29:d1:d8:4e:2e:cc:91:08:fb:0d:e6:b7:df:80:af:e1:99:7c:
8d:3c:18:59:06:58:6c:68:38:7a:0c:31:3a:51:f4:cd:b3:45:
b7:7a:5c:40:d3:dd:33:1f:b8:22:de:26:f2:0b:08:ee:53:ed:
d0:3c:30:00:13:d8:ec:d1:57:f3:d2:88:12:c5:1d:7e:f0:14:
0c:8a:7f:ac:b4:dd:de:e0:41:e0:0d:cc:72:9f:48:3b:44:6b:
ba:03:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:06 2025 by rpki-client