Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3133312e3232312e31362e302f32322d3234203d3e203238303933.roa
File: 3133312e3232312e31362e302f32322d3234203d3e203238303933.roa (raw, json)
Hash identifier: Xz+hAf2G/IymbnMS6pRngwoGLdDruNYCc1k9oaBwh3M=
Subject key identifier: A1:0D:F3:3B:3F:42:F3:1B:98:4C:EC:7B:57:2F:20:D2:28:70:22:B6
Certificate issuer: /CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
Certificate serial: 238A61ED6BA8F8E3653DD757CC930E5D12145247
Authority key identifier: BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3133312e3232312e31362e302f32322d3234203d3e203238303933.roa
Signing time: Tue 04 Feb 2025 18:49:53 +0000
ROA not before: Tue 04 Feb 2025 18:44:53 +0000
ROA not after: Tue 03 Feb 2026 18:49:53 +0000
asID: 28093
IP address blocks: 131.221.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8a:61:ed:6b:a8:f8:e3:65:3d:d7:57:cc:93:0e:5d:12:14:52:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
Validity
Not Before: Feb 4 18:44:53 2025 GMT
Not After : Feb 3 18:49:53 2026 GMT
Subject: CN=A10DF33B3F42F31B984CEC7B572F20D2287022B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:f7:07:44:08:4c:44:ae:64:00:8a:a0:91:
14:cb:47:4f:f0:51:29:e7:af:5e:1d:70:7d:2f:fb:
9e:70:cf:b0:df:bb:e2:94:68:e0:e7:c1:67:fe:a9:
9e:5f:d7:9c:9f:ac:a0:de:80:43:f3:5a:81:31:72:
29:05:e7:9c:75:9f:e6:18:4f:81:cc:40:56:6d:11:
82:b3:61:6e:74:47:b8:34:84:60:4b:d7:d2:51:13:
bb:af:8e:e4:5e:95:b9:ba:ff:34:e7:79:0c:90:8b:
3b:aa:cd:f3:81:f7:45:23:65:24:5e:35:f5:8d:da:
f8:ea:ff:6c:c7:a3:8b:3c:e3:be:bb:81:2e:0d:46:
5f:2e:88:5b:70:65:5b:c1:bb:a6:fe:ab:d9:9c:f2:
e1:68:bb:62:09:94:5e:ff:7a:0e:9a:6d:de:81:5f:
3d:c3:ae:3c:c4:e0:03:79:71:b1:13:2c:d8:ca:35:
2a:87:7c:c4:16:81:2d:60:44:ad:fb:f5:c4:ce:ce:
ae:cb:10:5a:98:cd:aa:69:5c:01:62:af:fc:37:1e:
a6:a3:70:8d:2c:36:6a:86:22:df:a9:13:d3:c2:e6:
0a:c5:c5:18:86:9e:3e:f4:cd:4b:39:7c:14:16:d1:
ce:99:44:9a:0d:3f:aa:c7:ba:0f:7a:d0:93:bb:97:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0D:F3:3B:3F:42:F3:1B:98:4C:EC:7B:57:2F:20:D2:28:70:22:B6
X509v3 Authority Key Identifier:
keyid:BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3133312e3232312e31362e302f32322d3234203d3e203238303933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.16.0/22
Signature Algorithm: sha256WithRSAEncryption
18:7e:4d:9c:23:66:b5:9b:fa:57:a8:1a:40:ed:f5:95:86:9e:
fa:61:90:06:5c:82:b8:ec:0f:1f:aa:1d:6d:ad:90:93:7f:61:
b0:45:a0:66:00:b4:54:00:4b:50:0b:8c:39:13:59:67:42:5e:
da:b7:79:86:b1:43:9d:cc:84:38:bf:97:1a:af:f3:f9:f4:0d:
d5:cb:cb:b6:be:0c:49:5b:7a:fe:a2:1c:6f:a1:8a:37:ac:7c:
0f:f0:4e:a4:63:26:2a:98:15:c2:30:5f:31:fe:a3:0e:ee:9b:
60:20:5c:de:10:c5:a8:0a:51:0a:cb:ef:0f:1a:3d:eb:38:85:
64:ca:6c:40:4d:9f:6b:1b:6e:80:56:78:78:be:d4:5e:4d:c0:
b0:4d:99:d8:91:92:1c:bb:41:e2:af:2e:6c:f3:1b:10:b4:85:
6d:85:89:4d:7b:e2:91:8e:51:41:ff:f9:dc:6e:7b:25:2c:24:
7e:5e:bc:37:cd:f0:06:e8:75:ae:b1:ca:f7:b1:51:63:62:13:
bd:93:cf:55:20:21:6c:d0:40:e0:ac:a4:55:38:37:7c:e8:85:
db:0f:ec:08:72:72:cf:21:c1:e3:0f:7d:7e:84:df:24:40:23:
00:0a:63:50:de:13:c8:bb:83:9f:4c:31:75:9d:7b:b5:a4:1a:
e7:cf:1b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:27 2025 by rpki-client