Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39362e302f32322d3234203d3e20323632313931.roa
File: 3230312e3135302e39362e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier: bKd8SBS9JwIsDry7e/8D5afzEReyp5EQ9OHpQbANgug=
Subject key identifier: 3D:A5:46:47:01:9E:42:75:1B:C1:2C:BC:1C:D6:1B:1E:33:C4:16:8B
Certificate issuer: /CN=6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF
Certificate serial: 13135C08507EF45AF6FF16A4463A4508F366120A
Authority key identifier: 6F:E8:D9:F3:26:C9:49:74:AC:24:CD:1C:C7:5E:4E:49:EF:AF:1C:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39362e302f32322d3234203d3e20323632313931.roa
Signing time: Tue 11 Mar 2025 19:05:00 +0000
ROA not before: Tue 11 Mar 2025 19:00:00 +0000
ROA not after: Tue 10 Mar 2026 19:05:00 +0000
asID: 262191
IP address blocks: 201.150.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:13:5c:08:50:7e:f4:5a:f6:ff:16:a4:46:3a:45:08:f3:66:12:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF
Validity
Not Before: Mar 11 19:00:00 2025 GMT
Not After : Mar 10 19:05:00 2026 GMT
Subject: CN=3DA54647019E42751BC12CBC1CD61B1E33C4168B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:71:3a:10:72:90:ee:7e:86:46:eb:6c:5b:
20:36:d0:26:11:fd:91:e0:6a:16:37:d3:1e:89:b1:
99:de:9f:9b:7e:8f:7c:1a:0e:12:b2:eb:93:37:b9:
5f:38:55:7c:fc:58:74:9f:b6:05:9b:95:85:bb:fe:
33:8f:1c:c4:5b:3e:67:55:80:05:1e:32:f6:4a:7d:
98:2e:29:88:5a:ad:6a:f4:58:23:38:0d:ef:cf:c7:
5d:72:3f:7d:43:b3:1f:ff:23:0f:c1:6d:ad:0d:87:
01:1f:65:47:ff:22:58:11:65:fb:e6:99:39:c1:1d:
e4:9d:98:42:3c:c8:e1:16:ad:96:05:24:b6:7b:0b:
fa:e3:40:2d:05:f6:27:d4:e5:0c:d8:ac:a0:0b:79:
ac:10:5e:9c:7a:3d:07:91:10:9b:6c:74:f6:15:1b:
33:ea:f5:60:ca:93:da:58:39:94:d7:1a:e3:65:eb:
9c:8b:61:f7:43:c6:20:2f:8c:e4:4e:7f:3d:4b:7d:
27:53:e2:3c:e0:a9:30:76:ad:5e:09:ba:eb:55:77:
12:4d:cc:62:e3:af:cd:e3:62:2d:1c:19:05:a4:76:
08:16:4d:f3:12:61:23:c3:22:d8:8a:1d:d5:11:a1:
e6:10:72:91:d0:99:f8:1c:cd:c7:5f:39:c6:0e:bd:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A5:46:47:01:9E:42:75:1B:C1:2C:BC:1C:D6:1B:1E:33:C4:16:8B
X509v3 Authority Key Identifier:
keyid:6F:E8:D9:F3:26:C9:49:74:AC:24:CD:1C:C7:5E:4E:49:EF:AF:1C:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39362e302f32322d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.150.96.0/22
Signature Algorithm: sha256WithRSAEncryption
21:e9:0f:37:32:41:fb:81:a6:f7:20:93:1d:cb:d8:3b:48:0a:
92:4e:01:cd:3c:e8:1d:41:e8:88:8c:e3:1a:e0:0e:24:79:5b:
c0:b9:cd:63:b3:fd:4d:2a:67:22:6c:a1:62:b7:42:3c:f9:5b:
19:02:fb:f2:c1:7d:c9:f0:63:0d:e8:ed:98:ff:09:54:98:96:
6e:25:f1:63:a6:cf:23:ba:20:cb:36:63:da:9d:58:c6:d2:7e:
fe:4e:05:39:ad:f8:50:9c:cc:c8:9c:46:a1:1d:4c:93:dd:3d:
b1:97:61:4a:41:ce:bb:0b:c4:90:15:fc:ee:55:c2:51:5e:88:
00:80:06:80:6a:f7:b3:4f:99:67:7b:64:60:2d:9a:b6:93:02:
99:28:0a:9b:c2:e1:3f:a5:ba:a0:50:52:4d:8a:bb:3c:a5:44:
d7:09:ea:55:ac:74:04:8a:7e:9a:a8:1e:8f:98:f1:56:9d:1f:
ab:2f:13:99:e1:42:c2:de:3b:98:75:eb:43:6a:f6:f4:e6:fa:
00:75:47:6b:ff:f1:40:69:81:be:59:10:cb:88:61:53:c6:9e:
a1:8a:d5:09:28:68:f6:71:cd:59:43:f2:a9:6a:d5:e1:97:3d:
5d:e8:cd:14:a3:4a:27:63:f4:7c:03:a0:4c:f7:2d:6c:83:cb:
9a:45:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:23 2025 by rpki-client