Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B34F2D90FAFF8E2559CDB2C9870E8758A0F5D9DCCE26DF5F56F541D3D26FC102/0/3137302e38322e3234342e302f32332d3233203d3e20323634383538.roa
File: 3137302e38322e3234342e302f32332d3233203d3e20323634383538.roa (raw, json)
Hash identifier: dOdscecntljde7m6xoqbabPuBuyvKjboepUW/b4q/WE=
Subject key identifier: 98:49:A7:FD:EE:F9:64:2E:36:C5:D6:20:4B:73:A7:F8:34:24:1D:8B
Certificate issuer: /CN=D425886F4B35D1F04B8DE6DC8171270697146F76
Certificate serial: 65BDED83A1F2255BFFA1540AA42E17EC5BDE68B4
Authority key identifier: D4:25:88:6F:4B:35:D1:F0:4B:8D:E6:DC:81:71:27:06:97:14:6F:76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D425886F4B35D1F04B8DE6DC8171270697146F76.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B34F2D90FAFF8E2559CDB2C9870E8758A0F5D9DCCE26DF5F56F541D3D26FC102/0/3137302e38322e3234342e302f32332d3233203d3e20323634383538.roa
Signing time: Tue 04 Feb 2025 20:08:55 +0000
ROA not before: Tue 04 Feb 2025 20:03:55 +0000
ROA not after: Tue 03 Feb 2026 20:08:55 +0000
asID: 264858
IP address blocks: 170.82.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:bd:ed:83:a1:f2:25:5b:ff:a1:54:0a:a4:2e:17:ec:5b:de:68:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D425886F4B35D1F04B8DE6DC8171270697146F76
Validity
Not Before: Feb 4 20:03:55 2025 GMT
Not After : Feb 3 20:08:55 2026 GMT
Subject: CN=9849A7FDEEF9642E36C5D6204B73A7F834241D8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:65:a8:b6:f5:a3:0b:0d:1a:02:02:84:8a:
58:c6:82:a2:22:79:5f:d6:78:92:50:b1:5e:de:27:
d4:ee:bd:f4:65:bc:1f:fb:f7:bf:49:55:28:a5:f0:
6a:03:99:19:e2:97:a3:5c:bd:e2:a1:14:fc:7f:77:
d8:7a:ee:c8:b5:fb:ad:04:94:7b:44:12:58:86:75:
be:96:11:41:41:61:8b:f1:09:d7:e7:b0:a4:62:fb:
f1:cd:64:8a:2d:42:06:68:a7:17:b3:d4:4b:16:b5:
ee:32:bc:c9:c6:5a:0b:8f:04:d4:93:bf:01:d9:f1:
fb:53:07:64:77:43:d9:d0:76:4d:13:5a:c6:63:ff:
26:51:e0:e6:f6:1a:07:f2:cc:6f:2a:8d:02:b9:f4:
36:63:17:c6:6c:ce:71:f3:ff:ed:cd:9d:f7:25:d5:
e9:04:90:c5:86:f1:5c:6b:a5:e4:77:ec:ce:59:fe:
b1:01:d7:65:f5:03:a9:53:28:80:80:07:ec:ba:96:
26:a5:5c:74:95:52:53:21:a8:4d:37:f0:fd:25:c3:
55:c3:83:53:06:d8:bc:2b:1a:ae:71:26:94:36:a3:
ba:51:50:fe:19:53:93:86:61:da:fd:3a:d4:09:9b:
b3:16:c1:f6:61:2b:4a:0f:cb:8c:4f:28:99:9d:94:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:49:A7:FD:EE:F9:64:2E:36:C5:D6:20:4B:73:A7:F8:34:24:1D:8B
X509v3 Authority Key Identifier:
keyid:D4:25:88:6F:4B:35:D1:F0:4B:8D:E6:DC:81:71:27:06:97:14:6F:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B34F2D90FAFF8E2559CDB2C9870E8758A0F5D9DCCE26DF5F56F541D3D26FC102/0/D425886F4B35D1F04B8DE6DC8171270697146F76.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D425886F4B35D1F04B8DE6DC8171270697146F76.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B34F2D90FAFF8E2559CDB2C9870E8758A0F5D9DCCE26DF5F56F541D3D26FC102/0/3137302e38322e3234342e302f32332d3233203d3e20323634383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.244.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:d5:6b:61:3b:60:dc:aa:a6:28:72:7e:3e:7d:c9:eb:84:db:
d1:3b:42:47:e4:89:9d:0e:a9:2f:7f:02:40:ed:5c:40:57:30:
94:14:5a:dc:7e:e5:0b:b0:0f:c5:7a:f1:20:e2:1c:31:aa:0b:
6e:8a:22:af:24:c1:2d:9b:af:32:0d:44:16:a3:5a:65:21:5b:
99:b6:12:cb:a2:61:63:73:33:25:44:ac:6e:cd:96:10:41:f4:
01:db:2f:a6:f0:ad:e4:fa:fc:ed:e3:23:e9:b4:dc:dd:26:a5:
55:1e:e9:c2:df:4c:79:91:63:2e:1b:e3:b6:80:06:fb:2a:b0:
dc:32:19:53:09:79:d2:a8:9d:ab:ce:ab:9a:f1:be:81:2c:93:
db:62:20:83:a7:f0:a7:1a:c4:c4:98:3e:d3:fd:9f:8c:a6:10:
9b:3a:52:73:43:d5:6f:e0:5f:f7:60:6e:73:5a:c4:b8:d6:3f:
92:b8:44:b4:59:b7:ca:51:de:fb:06:b0:0e:b8:39:40:f0:48:
e0:0f:58:3f:f9:e3:e0:02:d2:97:fa:82:6e:e4:d7:7f:d9:48:
0c:b3:b2:cc:6c:9a:db:53:0f:2b:f7:94:6e:7a:b0:f5:a2:e9:
39:4a:40:b9:19:a8:34:12:f2:be:a8:a3:c8:60:07:65:e1:98:
18:29:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:44 2025 by rpki-client