Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3136372e3234392e33322e302f32322d3234203d3e203231383236.roa
File: 3136372e3234392e33322e302f32322d3234203d3e203231383236.roa (raw, json)
Hash identifier: ReZaDQgtcUWjNssJmrDzZbkkta6vaJwtVZRYmVjtVIw=
Subject key identifier: C6:E7:65:87:52:93:B9:14:27:A4:3E:14:C1:D9:5D:4A:60:D0:6F:41
Certificate issuer: /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial: 51264FF19DAB43D955885E111EBEDB25D1A6C0A3
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3136372e3234392e33322e302f32322d3234203d3e203231383236.roa
Signing time: Tue 04 Feb 2025 18:44:32 +0000
ROA not before: Tue 04 Feb 2025 18:39:32 +0000
ROA not after: Tue 03 Feb 2026 18:44:32 +0000
asID: 21826
IP address blocks: 167.249.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:26:4f:f1:9d:ab:43:d9:55:88:5e:11:1e:be:db:25:d1:a6:c0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Validity
Not Before: Feb 4 18:39:32 2025 GMT
Not After : Feb 3 18:44:32 2026 GMT
Subject: CN=C6E765875293B91427A43E14C1D95D4A60D06F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:bd:85:39:fc:9d:27:e0:d9:61:3d:5c:bc:
3f:bf:9c:dc:0e:e3:41:dd:d2:22:2e:c7:77:93:27:
09:e7:47:c6:4c:a0:cc:35:5a:bc:c3:13:8b:02:f4:
b7:f7:00:cb:da:47:ab:56:58:51:d2:bf:c3:54:a7:
2e:8c:2c:5f:4a:5e:97:dc:de:4e:6a:0a:3e:ea:fc:
2b:4b:6d:48:7d:0f:af:ee:2a:b2:b0:8c:f6:38:f6:
6c:dd:46:d3:1e:44:9d:d5:b3:89:cf:40:8b:0c:c5:
cb:72:49:e9:4d:78:1f:92:17:2d:3b:b7:0b:6c:ee:
f5:41:dd:d2:20:24:81:4b:a2:9f:bb:15:16:fa:1f:
d4:2d:28:c0:a6:f3:1f:76:a3:f9:1d:44:7f:d3:44:
19:d1:a7:ae:48:c5:fb:b1:b0:6a:fa:4e:00:ab:1b:
42:00:8b:31:32:79:df:be:d8:9b:11:57:82:8a:87:
74:d9:dc:99:09:f9:bb:70:1c:cd:79:c4:01:3b:da:
73:25:31:6c:c8:14:42:ad:80:94:eb:03:63:db:cf:
fa:16:40:fc:92:b5:9f:88:a6:0b:52:50:5e:54:62:
91:57:a3:02:f8:82:53:5b:6c:13:93:ac:86:f9:26:
6d:1f:bf:55:27:59:67:46:2e:c1:78:11:ad:f9:46:
e3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E7:65:87:52:93:B9:14:27:A4:3E:14:C1:D9:5D:4A:60:D0:6F:41
X509v3 Authority Key Identifier:
keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3136372e3234392e33322e302f32322d3234203d3e203231383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.32.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:e1:68:7c:52:13:21:e8:b5:1f:e2:01:32:0b:2f:6e:b9:d5:
06:38:76:d1:c7:88:86:30:fb:01:24:71:bf:fe:0f:11:be:0d:
7a:b7:76:63:5b:f5:5c:84:d7:f2:dc:fc:a4:a4:80:cb:77:66:
aa:e0:aa:2e:1b:b4:08:ee:a8:39:ad:4a:f5:b7:1c:5d:cc:b4:
79:1d:86:81:e1:3e:51:10:4e:db:e2:12:0b:24:33:a2:63:05:
3b:a6:52:46:ef:d8:a7:5a:05:42:99:3d:ad:85:28:76:68:1d:
71:12:3b:fb:fc:14:07:f2:1a:71:d9:51:c6:d4:db:d8:91:f4:
37:54:d4:14:cb:fd:b7:e8:82:f6:07:fa:07:81:d6:ca:d1:32:
c0:35:b1:ba:a3:31:e6:d0:5f:a6:30:b9:21:8f:45:51:56:13:
0e:22:85:82:75:ae:e9:6e:a6:75:2a:16:c9:71:15:7b:4e:8a:
89:a4:a0:df:0d:40:8d:0a:ca:64:44:80:62:f6:98:06:ad:84:
eb:86:cd:a8:af:13:62:5c:cb:ad:26:6d:83:f1:e1:2b:a0:0a:
78:23:01:40:22:47:10:27:c4:42:4f:b3:fc:b2:d3:ec:af:1d:
85:08:e1:59:1f:28:c4:69:61:9b:7c:51:4c:4e:5a:da:f2:c3:
6c:07:e3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:50 2025 by rpki-client