Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/3136382e3132312e35362e302f32322d3234203d3e20323634363735.roa
File: 3136382e3132312e35362e302f32322d3234203d3e20323634363735.roa (raw, json)
Hash identifier: bUIKu1/rDe8TdEVflBU9mK5ywr2U1DR4O9UPMUyGGnw=
Subject key identifier: 58:97:8C:A0:4C:F8:28:BB:04:25:BD:B1:22:54:50:82:56:B1:74:4D
Certificate issuer: /CN=F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E
Certificate serial: 32C972B10AB86D8E7B7DCBC27A3AC902C86A2B03
Authority key identifier: F4:D4:85:7F:01:6A:86:FB:FB:D6:05:66:A3:AE:A9:CE:93:B4:CD:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/3136382e3132312e35362e302f32322d3234203d3e20323634363735.roa
Signing time: Tue 04 Feb 2025 20:02:55 +0000
ROA not before: Tue 04 Feb 2025 19:57:55 +0000
ROA not after: Tue 03 Feb 2026 20:02:55 +0000
asID: 264675
IP address blocks: 168.121.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c9:72:b1:0a:b8:6d:8e:7b:7d:cb:c2:7a:3a:c9:02:c8:6a:2b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E
Validity
Not Before: Feb 4 19:57:55 2025 GMT
Not After : Feb 3 20:02:55 2026 GMT
Subject: CN=58978CA04CF828BB0425BDB12254508256B1744D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:29:24:20:34:da:e5:f9:8c:c4:f0:fa:5d:
ff:59:2b:5a:5e:92:90:a9:2e:ee:b0:91:2a:66:ba:
34:97:8e:2c:5e:21:49:8f:56:0d:c4:19:88:76:24:
f6:96:25:ed:ce:5e:eb:32:f9:89:5b:24:0d:bd:23:
a9:fe:d1:64:ef:90:47:f1:38:43:80:bf:b6:1a:6a:
66:1b:a3:5e:fd:0c:2f:3d:0e:32:3b:32:82:10:ee:
6e:02:5e:77:f9:4b:2c:cf:07:19:eb:ca:9d:18:48:
f6:2d:d0:c1:1f:1b:f0:cb:e8:81:78:8e:73:a3:54:
68:89:14:69:bd:22:da:d6:86:12:53:70:fd:3e:f3:
90:b9:c6:db:78:d2:c1:6a:ce:66:5a:93:82:2f:04:
23:93:95:cb:12:7f:3d:7b:b0:fb:7b:bc:90:a3:06:
fc:7b:cf:ed:5e:9d:da:ed:9b:f5:9b:14:c7:4e:85:
cc:3e:6f:b4:25:3c:9f:54:9b:b0:d7:13:87:65:44:
e3:e5:82:fb:25:48:f5:a3:af:33:cf:b4:a2:48:7f:
69:e7:56:5c:4e:e3:d0:9d:1b:47:b9:92:97:01:83:
ac:88:a3:85:db:f3:03:0a:42:33:49:8c:ac:94:43:
20:e2:be:d7:8f:f8:9a:5c:ea:b8:df:f6:7b:ea:78:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:97:8C:A0:4C:F8:28:BB:04:25:BD:B1:22:54:50:82:56:B1:74:4D
X509v3 Authority Key Identifier:
keyid:F4:D4:85:7F:01:6A:86:FB:FB:D6:05:66:A3:AE:A9:CE:93:B4:CD:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/3136382e3132312e35362e302f32322d3234203d3e20323634363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:70:35:4d:26:90:29:ec:c8:05:16:08:60:d4:55:c6:f2:a7:
a4:b8:70:8c:1b:d1:ca:57:5e:b5:36:bd:f4:01:69:9f:22:98:
c6:a4:c7:06:26:bf:4d:d5:76:dc:03:c2:54:e8:e7:0e:ea:33:
dc:21:e2:12:61:7a:bb:0d:d3:73:8d:9b:0f:1c:40:65:49:49:
57:1a:b6:65:f4:a7:ab:3c:6e:25:df:6b:f6:e8:42:ff:6a:75:
34:14:51:85:ca:6b:bf:91:d5:1b:23:14:0a:9b:77:93:d4:ad:
e0:52:9f:c9:18:1e:95:50:06:b2:d8:04:f5:8e:a1:ca:02:36:
b9:b2:c8:25:08:21:ab:71:74:94:e4:4f:ed:cc:2d:01:fa:98:
cc:90:f4:7f:c4:4c:b0:8f:d2:41:91:91:20:75:34:73:fd:64:
d5:db:c4:32:d0:6e:c6:18:6b:7a:06:ab:cf:87:8b:5d:13:f3:
91:3d:20:97:61:41:62:e3:ae:12:22:d6:e1:d0:1f:64:c7:1a:
bb:24:4c:d1:3d:ea:20:03:a8:b6:b3:6a:50:d6:25:43:7e:bf:
af:0e:c4:ad:6b:cd:f1:e8:81:2d:e8:e1:89:9a:b3:cc:b9:b9:
3c:52:b0:78:35:30:39:d5:12:76:3a:e1:82:91:39:71:19:76:
8a:7e:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:24:57 2025 by rpki-client