Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3137302e38342e3133362e302f32322d3234203d3e203231383236.roa
File: 3137302e38342e3133362e302f32322d3234203d3e203231383236.roa (raw, json)
Hash identifier: 6sOe731Yhdf0ai4NjyrU7BEQHQHKVfP3QIi1ej4sWZY=
Subject key identifier: 6A:C6:F4:94:6B:E4:40:C1:F7:37:4D:05:B5:90:FA:A6:00:19:AE:A5
Certificate issuer: /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial: 66A59BF915BCBA7B30ED62C7A3FE978BF5101DBE
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3137302e38342e3133362e302f32322d3234203d3e203231383236.roa
Signing time: Tue 04 Feb 2025 18:44:35 +0000
ROA not before: Tue 04 Feb 2025 18:39:35 +0000
ROA not after: Tue 03 Feb 2026 18:44:35 +0000
asID: 21826
IP address blocks: 170.84.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a5:9b:f9:15:bc:ba:7b:30:ed:62:c7:a3:fe:97:8b:f5:10:1d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Validity
Not Before: Feb 4 18:39:35 2025 GMT
Not After : Feb 3 18:44:35 2026 GMT
Subject: CN=6AC6F4946BE440C1F7374D05B590FAA60019AEA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:d9:cd:f5:17:23:5c:b3:45:3e:07:94:a1:
b5:46:dc:d4:57:91:34:c4:c4:bc:21:b6:07:f2:21:
3e:53:02:c1:9f:dc:3d:49:01:38:bc:6f:1a:8f:99:
64:76:97:57:b1:1b:78:0d:2d:65:82:4c:59:a2:df:
c1:76:e8:39:01:d3:ed:93:a1:1d:50:8e:60:17:0e:
54:5b:91:35:43:39:39:5d:9d:5b:a0:ad:2e:1d:8f:
84:05:f0:e5:ca:d3:01:d5:46:da:66:a1:4b:9f:55:
fa:89:38:b8:27:8a:99:88:72:3d:3c:1e:ce:33:99:
d4:3d:be:31:98:a7:e8:c4:0f:6f:f7:75:53:42:d5:
bb:3e:b8:d1:ab:f2:ff:1c:09:11:ab:e7:d7:10:06:
d9:54:99:51:af:ef:4f:ee:57:3b:c0:df:15:82:65:
89:c6:14:42:e3:56:cc:0b:ef:c8:d8:bc:11:01:6e:
7e:50:46:38:85:55:01:5e:58:94:2a:85:5f:a0:d2:
bd:bf:66:43:92:03:1b:1b:68:90:dd:f0:e2:35:1c:
a5:e2:40:1b:d5:da:c9:98:16:5a:91:09:30:91:18:
26:ce:0c:6d:88:e3:8d:3c:40:c1:fb:16:1e:84:d3:
6d:44:6f:0b:dd:b4:9a:2f:80:7d:b7:7e:d1:b6:de:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C6:F4:94:6B:E4:40:C1:F7:37:4D:05:B5:90:FA:A6:00:19:AE:A5
X509v3 Authority Key Identifier:
keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3137302e38342e3133362e302f32322d3234203d3e203231383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.136.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:1d:78:55:df:1b:20:a7:3f:99:71:f5:be:bb:2a:6c:59:a7:
bf:72:a7:39:88:cf:ec:63:45:d2:fa:b2:c1:ba:e9:29:61:77:
07:a7:90:8d:36:27:c3:fb:8e:df:dc:27:82:d0:41:8a:66:f7:
4b:c2:b7:de:c9:83:a5:88:ab:2d:4a:e0:e4:be:c5:b4:23:5a:
6b:4c:4b:9c:3e:34:08:0d:b9:e3:c1:3a:62:fb:da:50:b6:d7:
40:e9:03:57:ad:82:87:41:ad:d6:e9:ac:ac:4a:81:b2:42:78:
f2:23:b5:96:74:1e:53:48:6e:d9:b4:8b:a5:7a:18:80:b3:c4:
c1:e7:75:7a:da:aa:81:d8:a6:7b:c0:4f:74:de:c1:c4:68:27:
49:66:35:65:d9:20:0d:c7:d7:bc:b8:6f:1b:21:fe:68:50:2a:
18:0b:09:83:fc:c3:cc:a5:84:a8:5d:f3:04:fd:35:9e:57:5b:
32:57:4e:fb:5d:80:9f:66:1d:1e:87:fc:e8:66:5e:df:02:a7:
83:f4:66:6b:c6:09:25:92:17:5d:32:d4:3e:6b:45:3d:90:aa:
6a:c3:20:15:7e:97:a6:55:cb:64:98:f1:ac:c7:15:f4:19:d4:
da:a1:f7:f2:27:d0:fe:6f:48:8a:ca:5a:e8:3e:6f:da:7b:f9:
d9:63:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:58 2025 by rpki-client