Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/3136312e302e3137362e302f32312d3234203d3e20323633323231.roa
File: 3136312e302e3137362e302f32312d3234203d3e20323633323231.roa (raw, json)
Hash identifier: As+VA1rHIW1KLpvUFN9QKUtgzgkfvjDZpnGc6yKWv3k=
Subject key identifier: BC:8A:5E:CD:85:71:4E:9E:EB:11:F6:E7:B9:D9:73:0A:9F:AC:17:2D
Certificate issuer: /CN=5D6C01932C342063BFD909811E1D18892BDD422B
Certificate serial: 231A87985BB56B14E6620A99F000B363CEFD71C9
Authority key identifier: 5D:6C:01:93:2C:34:20:63:BF:D9:09:81:1E:1D:18:89:2B:DD:42:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D6C01932C342063BFD909811E1D18892BDD422B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/3136312e302e3137362e302f32312d3234203d3e20323633323231.roa
Signing time: Tue 04 Feb 2025 18:45:43 +0000
ROA not before: Tue 04 Feb 2025 18:40:43 +0000
ROA not after: Tue 03 Feb 2026 18:45:43 +0000
asID: 263221
IP address blocks: 161.0.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:1a:87:98:5b:b5:6b:14:e6:62:0a:99:f0:00:b3:63:ce:fd:71:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D6C01932C342063BFD909811E1D18892BDD422B
Validity
Not Before: Feb 4 18:40:43 2025 GMT
Not After : Feb 3 18:45:43 2026 GMT
Subject: CN=BC8A5ECD85714E9EEB11F6E7B9D9730A9FAC172D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:a1:d9:9b:34:f1:68:fb:93:59:f1:81:5e:
c7:51:a5:77:b3:3f:e9:49:31:18:1e:42:4e:0a:ad:
af:7d:1f:84:4c:8e:b9:0a:44:91:23:f8:ba:13:8e:
e7:3c:5e:29:57:3f:82:9b:7f:49:82:5f:e4:80:f5:
72:10:86:54:12:1a:7e:c7:cd:f2:02:76:f3:6e:af:
a1:46:39:50:8d:29:d7:86:a9:d2:0c:ff:83:91:fb:
e3:95:29:35:ba:1f:5e:cb:30:86:74:b4:d7:cc:ae:
33:2c:f1:26:4f:2b:10:ce:97:cd:a9:63:65:0f:a4:
00:c3:f0:c8:8b:0e:0f:f5:f8:60:30:39:1a:f9:90:
f3:87:fb:4b:0d:6c:56:0b:b9:d9:80:7c:2b:a1:1a:
e2:70:4d:7e:4e:18:df:dc:2c:72:2b:35:91:c0:97:
00:af:ba:01:4d:e7:3d:82:ff:93:9d:f9:46:d8:3a:
01:74:f3:e0:a0:8d:53:53:e2:b1:d5:db:9a:60:03:
6d:40:7a:55:cc:0d:07:05:1f:72:ae:57:0b:2e:62:
8f:47:00:b9:38:43:7c:ef:29:b3:53:56:b8:b7:8e:
0e:2c:76:8d:0e:58:02:5b:ff:97:21:2c:fa:c1:95:
ec:bd:cd:97:60:d1:67:b7:1b:22:2d:c0:9f:42:a7:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8A:5E:CD:85:71:4E:9E:EB:11:F6:E7:B9:D9:73:0A:9F:AC:17:2D
X509v3 Authority Key Identifier:
keyid:5D:6C:01:93:2C:34:20:63:BF:D9:09:81:1E:1D:18:89:2B:DD:42:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/5D6C01932C342063BFD909811E1D18892BDD422B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D6C01932C342063BFD909811E1D18892BDD422B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/3136312e302e3137362e302f32312d3234203d3e20323633323231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.0.176.0/21
Signature Algorithm: sha256WithRSAEncryption
70:b2:e8:90:0a:2a:cf:d0:03:5b:9b:a0:4c:ee:d5:fe:7a:aa:
e4:9c:41:1d:ea:e3:d9:ae:cc:a1:0c:13:31:71:a2:bd:9e:73:
ad:29:34:fe:65:9b:48:58:a1:c6:c6:77:f9:4a:10:7a:f9:f3:
a5:b8:80:28:6a:a5:09:e2:58:65:11:c6:a2:92:94:66:9a:a8:
0a:a7:8e:bc:cf:c7:1d:d1:eb:46:3e:6d:7c:5d:14:d0:65:df:
71:e0:be:7d:7f:30:5c:9b:ad:73:3a:33:cf:94:c4:b7:17:72:
41:59:8e:5b:a5:f7:aa:9c:86:ef:c4:0d:4b:88:35:13:5a:9b:
8d:8b:c9:cf:3b:4f:f3:8d:cd:23:d9:1d:09:aa:85:0e:81:46:
87:55:5b:81:0e:46:dc:08:fe:66:fe:0a:67:c3:f5:a0:d0:5e:
61:96:3e:de:f2:70:9f:8b:50:3b:40:78:b8:23:a4:e8:a0:f1:
66:56:50:82:22:73:13:b8:a3:17:44:cb:b1:2d:91:66:8f:e0:
19:ac:34:8a:f7:63:a9:5b:1e:8d:a0:e8:87:17:19:65:cc:aa:
80:ab:45:76:d3:6c:1f:ba:e6:af:f3:ec:b8:07:40:2f:b5:cb:
b5:8b:9f:83:1f:bd:42:25:a5:5c:8b:17:4b:9e:33:e3:76:28:
a1:98:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:04 2025 by rpki-client