Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/3230312e3133312e33372e302f32342d3234203d3e20333936393938.roa
File: 3230312e3133312e33372e302f32342d3234203d3e20333936393938.roa (raw, json)
Hash identifier: f5Rml0E9jdDqwV7C0/Ky1IPfWHX3Bct3qRGk6mCdcM8=
Subject key identifier: AC:FD:A5:22:66:3D:E4:10:2F:61:0F:25:69:89:72:EA:5E:F5:4A:69
Certificate issuer: /CN=D4BE631DE4A459DA0843658F219917B16E6E0D6D
Certificate serial: 4A2159135660A3A6CBBCA4116C127F458E4C112F
Authority key identifier: D4:BE:63:1D:E4:A4:59:DA:08:43:65:8F:21:99:17:B1:6E:6E:0D:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/3230312e3133312e33372e302f32342d3234203d3e20333936393938.roa
Signing time: Tue 04 Feb 2025 18:46:11 +0000
ROA not before: Tue 04 Feb 2025 18:41:11 +0000
ROA not after: Tue 03 Feb 2026 18:46:11 +0000
asID: 396998
IP address blocks: 201.131.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:21:59:13:56:60:a3:a6:cb:bc:a4:11:6c:12:7f:45:8e:4c:11:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4BE631DE4A459DA0843658F219917B16E6E0D6D
Validity
Not Before: Feb 4 18:41:11 2025 GMT
Not After : Feb 3 18:46:11 2026 GMT
Subject: CN=ACFDA522663DE4102F610F25698972EA5EF54A69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:90:7b:ca:32:6e:6e:c6:93:41:88:70:9e:28:
33:3e:77:bd:82:b1:ad:6e:03:a2:60:55:39:5c:27:
a1:57:0a:42:92:6c:5b:19:39:9d:d2:f8:ef:ce:ea:
57:f5:e2:a1:63:75:f6:b6:ff:00:2b:eb:26:83:41:
ee:57:0c:fe:cc:d2:3d:2a:41:83:5e:dc:45:f0:5e:
9c:b1:c9:8f:53:4c:02:c2:f2:c8:11:8f:f9:90:75:
7f:b8:b4:d8:fe:42:1c:af:c0:93:34:cc:07:da:a6:
ca:3d:fa:7d:fe:25:6e:19:3f:88:10:e3:d5:db:0d:
da:64:6c:8b:7a:cd:2e:d6:0c:9f:3f:a4:ca:68:62:
5d:ad:86:ea:5b:f8:6a:27:6e:99:d7:bf:c2:9d:f6:
87:04:f2:d4:93:3e:79:40:be:57:e0:65:2b:a0:20:
1c:46:ab:1d:74:5e:8c:dd:db:5e:72:44:92:c6:03:
17:d5:78:cf:aa:07:71:7c:ca:f8:45:62:34:00:4b:
71:9f:40:2c:20:83:f2:30:2f:08:06:19:12:6b:73:
71:39:8c:a3:69:f2:8f:e3:60:6b:fa:42:e6:b2:51:
9a:d5:c5:a4:24:c4:08:e7:a8:f1:1d:a6:78:f3:ba:
3d:13:33:18:e1:0d:f7:1b:fb:70:5b:72:97:9b:db:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:A5:22:66:3D:E4:10:2F:61:0F:25:69:89:72:EA:5E:F5:4A:69
X509v3 Authority Key Identifier:
keyid:D4:BE:63:1D:E4:A4:59:DA:08:43:65:8F:21:99:17:B1:6E:6E:0D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4BE631DE4A459DA0843658F219917B16E6E0D6D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2D1C9AB0696B12CF80F5128429DB5CD6F5E189B58C7E5396C905CBD06281641/0/3230312e3133312e33372e302f32342d3234203d3e20333936393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.37.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1e:7b:e5:d2:7f:8b:f3:27:7c:2a:40:03:97:5c:75:1b:17:
c9:db:38:8c:9b:b4:0e:2b:d8:f7:3f:a2:2d:85:63:70:57:9a:
1a:99:fe:2a:30:ea:56:fc:04:93:e9:55:96:c7:71:1c:22:d5:
7a:3b:f8:d3:10:21:eb:e9:18:19:bd:c8:45:f9:c4:9b:9a:54:
ec:3d:3c:51:f7:a9:64:4c:0d:22:88:00:2f:02:d6:a2:76:3e:
da:33:a8:cd:04:8a:85:9c:6c:54:65:de:4d:a4:11:b1:25:19:
6f:27:68:3e:1f:47:0a:2f:66:c9:cc:8b:bd:2b:c8:64:32:a9:
77:aa:52:ce:e6:f4:45:0c:78:b2:f0:b6:7a:99:17:95:5e:6d:
b5:20:a6:1c:55:33:3c:21:52:e9:62:9f:c9:49:26:42:c0:fa:
2b:aa:0d:a5:06:45:93:73:11:71:11:ff:4f:c7:45:2b:61:91:
00:54:5e:69:ec:bf:2c:41:ff:54:65:bd:a5:ae:34:fa:8f:28:
99:69:e3:a4:c7:7e:6e:04:3a:cd:d0:1a:be:33:e9:21:96:d8:
64:44:ab:a1:70:1a:ab:76:a3:cf:35:3a:35:cb:68:ac:0a:49:
60:40:b4:79:34:63:d9:44:f3:92:95:51:25:2a:c9:9a:ce:c0:
0c:8f:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:09:01 2025 by rpki-client