Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1089EA8D8DD189885376A0F648BDB342B11AA3AB9751B1B6D9E212AB24A87ED/0/3137302e3233332e39322e302f32322d3234203d3e20323634373336.roa
File: 3137302e3233332e39322e302f32322d3234203d3e20323634373336.roa (raw, json)
Hash identifier: pIIx4vCtjdBR0OYRjgLAQTXyDCyvsLiYh0abaSgo+II=
Subject key identifier: FA:25:E6:2C:A2:F7:48:5D:71:38:2E:F0:4F:F4:B3:D3:B4:0A:21:08
Certificate issuer: /CN=75D4F41FAB0A4B4D8085C19D7FEA62B8FFDC6E2D
Certificate serial: 53F3B06E86DC3347B4669FBF1CB9E21E330233BF
Authority key identifier: 75:D4:F4:1F:AB:0A:4B:4D:80:85:C1:9D:7F:EA:62:B8:FF:DC:6E:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75D4F41FAB0A4B4D8085C19D7FEA62B8FFDC6E2D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C1089EA8D8DD189885376A0F648BDB342B11AA3AB9751B1B6D9E212AB24A87ED/0/3137302e3233332e39322e302f32322d3234203d3e20323634373336.roa
Signing time: Tue 04 Feb 2025 18:31:22 +0000
ROA not before: Tue 04 Feb 2025 18:26:22 +0000
ROA not after: Tue 03 Feb 2026 18:31:22 +0000
asID: 264736
IP address blocks: 170.233.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f3:b0:6e:86:dc:33:47:b4:66:9f:bf:1c:b9:e2:1e:33:02:33:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75D4F41FAB0A4B4D8085C19D7FEA62B8FFDC6E2D
Validity
Not Before: Feb 4 18:26:22 2025 GMT
Not After : Feb 3 18:31:22 2026 GMT
Subject: CN=FA25E62CA2F7485D71382EF04FF4B3D3B40A2108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:62:60:c0:3b:f4:08:be:70:0a:6d:e5:e8:
26:4e:d6:a4:ba:1e:d2:81:f2:2e:a1:e9:2b:70:5f:
8d:e0:52:7d:80:5e:57:33:4a:8a:f2:e0:82:b1:a3:
99:c9:a9:d1:ab:99:49:65:19:e9:e6:ae:99:ab:23:
b5:b4:2e:03:e9:0a:41:34:a0:c2:78:7a:77:17:95:
90:f4:f4:37:fb:fb:20:62:5c:df:5c:97:b8:8f:22:
c2:ce:84:56:f1:ae:fd:f8:f3:78:1b:e9:81:c9:87:
9c:fd:c8:b0:1d:c3:67:7c:04:fc:c0:26:7f:ec:85:
29:06:61:96:7c:76:8e:60:24:e0:18:81:3c:6e:18:
c0:a7:04:89:81:79:1b:fd:11:cc:18:8d:79:10:97:
25:a5:63:14:ca:79:5b:b2:ff:e2:d3:2f:0d:7e:00:
71:89:cc:23:bb:d5:3a:75:e1:41:a1:00:7e:ad:7e:
3d:c7:e1:fc:a1:73:78:fd:3a:7a:34:55:06:71:46:
8d:09:27:0d:90:ac:e1:39:cd:ce:73:6e:20:f3:50:
48:32:bd:8c:ec:4b:36:14:f7:f0:07:29:63:c9:44:
95:7b:c5:95:1a:0f:00:9a:9b:7d:1a:ea:3b:f1:4c:
14:04:91:d3:03:4f:ae:4a:26:87:8b:36:50:ec:37:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:25:E6:2C:A2:F7:48:5D:71:38:2E:F0:4F:F4:B3:D3:B4:0A:21:08
X509v3 Authority Key Identifier:
keyid:75:D4:F4:1F:AB:0A:4B:4D:80:85:C1:9D:7F:EA:62:B8:FF:DC:6E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C1089EA8D8DD189885376A0F648BDB342B11AA3AB9751B1B6D9E212AB24A87ED/0/75D4F41FAB0A4B4D8085C19D7FEA62B8FFDC6E2D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75D4F41FAB0A4B4D8085C19D7FEA62B8FFDC6E2D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1089EA8D8DD189885376A0F648BDB342B11AA3AB9751B1B6D9E212AB24A87ED/0/3137302e3233332e39322e302f32322d3234203d3e20323634373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:6b:10:76:cc:d3:59:75:99:fc:b6:60:5f:4a:50:62:64:13:
c1:c5:fe:d4:35:f4:a2:4a:71:f7:78:f8:82:6a:6a:26:ac:1f:
2b:30:fe:b3:e5:97:e2:12:1a:8f:46:f2:92:08:c4:ff:88:f4:
1d:1a:b6:a2:b4:37:cf:1d:03:31:16:9e:53:9b:3e:b0:c9:69:
84:58:79:3f:ed:2b:62:d2:6e:0e:b3:a4:f3:50:ad:28:5c:47:
ac:79:4e:69:2d:bf:2a:fa:59:06:2c:58:13:7d:60:46:31:c8:
55:80:f4:02:74:05:90:8b:b1:d6:c0:9b:83:06:37:62:a7:d7:
a7:2e:7f:09:e4:e4:07:de:e5:e0:62:ce:1d:85:a1:49:4e:25:
b0:88:f3:ff:63:f0:d4:13:d3:45:1f:a1:e4:b0:ca:6b:a2:7b:
7a:02:d4:18:48:97:43:8c:65:fa:9e:80:4d:98:9b:9a:9c:16:
47:df:73:aa:7a:38:81:6b:2f:d2:36:ef:77:46:44:ce:d2:ec:
65:6e:8b:4c:64:c3:bb:c9:fe:11:38:67:bf:9e:bc:69:44:41:
1e:d1:6c:4e:8a:8e:f1:bf:65:d5:ae:ed:af:a7:65:be:39:0c:
03:22:b7:12:77:d4:33:81:fa:81:06:d9:8b:53:3e:02:b6:5c:
0b:99:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:21 2025 by rpki-client