Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234382e302e302f31362d3234203d3e20323738.roa
File: 3133322e3234382e302e302f31362d3234203d3e20323738.roa (raw, json)
Hash identifier: h3ZZ1oH1io13LaYfCeWCmJw6JXDjyyTe+1wdp11ZVuM=
Subject key identifier: D8:FB:A3:A7:A2:2F:20:7E:59:FE:D0:34:35:CF:39:33:E7:0B:D2:F7
Certificate issuer: /CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
Certificate serial: 1F6C7B696A2EC9595D57BD5CBD4D2F03FBCCEF85
Authority key identifier: 7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234382e302e302f31362d3234203d3e20323738.roa
Signing time: Tue 04 Feb 2025 18:53:47 +0000
ROA not before: Tue 04 Feb 2025 18:48:47 +0000
ROA not after: Tue 03 Feb 2026 18:53:47 +0000
asID: 278
IP address blocks: 132.248.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6c:7b:69:6a:2e:c9:59:5d:57:bd:5c:bd:4d:2f:03:fb:cc:ef:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
Validity
Not Before: Feb 4 18:48:47 2025 GMT
Not After : Feb 3 18:53:47 2026 GMT
Subject: CN=D8FBA3A7A22F207E59FED03435CF3933E70BD2F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:46:f6:e8:86:be:c7:39:e8:69:fc:2a:07:
40:d1:40:08:39:55:83:64:80:c2:4b:b3:c2:aa:d8:
0d:b3:e5:d5:70:fd:94:cd:9d:68:9e:2f:e1:7c:2d:
7a:93:9f:bd:c9:dd:61:c6:ef:de:39:1d:e3:97:4d:
9f:6e:f5:d9:f6:a7:38:df:9d:48:1e:0f:e9:4f:dc:
4d:ca:0f:a5:f6:13:a8:0e:85:72:6a:3b:34:da:fe:
75:87:f9:dd:03:80:86:35:4d:3c:e5:a4:66:56:ad:
e5:c5:18:5f:de:fc:19:c7:be:90:50:de:25:56:3e:
a9:c0:8d:bd:d4:16:be:c0:59:ef:8c:90:8f:8a:19:
20:90:da:49:30:5a:5b:1a:c0:b7:af:76:e3:f3:37:
70:af:3a:4c:d4:46:f9:ef:03:6f:5f:1e:2b:6d:b7:
e7:e7:56:36:6e:c3:e4:30:b6:c4:3b:da:08:d5:50:
a6:f1:67:04:b0:30:07:9c:88:12:e9:ce:d8:da:0a:
91:66:ac:1f:27:b9:93:5d:da:c8:c7:18:e7:6d:18:
4a:46:87:79:43:2d:a5:cf:53:dc:f9:c8:00:22:fc:
0a:ff:c6:20:c3:60:4e:7e:8d:d0:82:ec:7c:b0:36:
3c:bf:08:cf:a5:3e:e3:99:35:a6:bd:bd:8a:c9:3a:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FB:A3:A7:A2:2F:20:7E:59:FE:D0:34:35:CF:39:33:E7:0B:D2:F7
X509v3 Authority Key Identifier:
keyid:7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234382e302e302f31362d3234203d3e20323738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:42:45:76:b5:bf:c7:ab:c3:02:0f:a1:4c:a0:21:f6:be:2b:
91:73:a6:a4:1d:3a:85:0e:45:e5:5a:4b:87:6a:bf:df:0b:a9:
c7:c7:cb:14:9f:e2:70:d8:f3:0e:01:6f:9f:b8:41:83:bc:f4:
54:fb:4c:8f:f1:bb:3e:64:16:f6:49:ab:e1:3f:88:68:2d:12:
d1:46:d2:19:1c:e4:46:f0:d6:c7:97:09:83:ac:79:99:dd:68:
1e:10:8b:f4:0e:90:29:07:df:c9:ad:41:e3:50:1e:ce:60:9d:
64:23:d5:2a:b2:fa:b0:a5:01:3a:1a:9e:c2:3f:0b:0a:2e:79:
38:05:59:2d:87:97:1f:e3:70:35:3d:ab:61:86:ff:23:66:54:
72:fb:fe:e2:37:56:74:63:30:ae:0b:5b:3e:7e:bd:e1:0d:d2:
d3:b7:1b:e4:83:5d:dc:69:4d:7c:e8:a7:42:b1:2d:3e:8e:9b:
2a:7b:19:a1:a1:c6:e2:b2:45:bc:ec:6a:a6:23:9b:c2:e2:2e:
31:23:73:8c:46:ee:2a:c2:af:49:35:1e:66:cd:cc:38:b2:f8:
da:ab:19:9d:ec:73:16:7d:1b:54:cd:0e:9c:81:aa:8e:34:c3:
05:5d:54:58:2a:8f:e6:4c:7a:f8:54:06:4f:92:26:ce:9a:5c:
27:ad:00:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:05:11 2025 by rpki-client