Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/3230312e3232312e3132302e302f32342d3234203d3e203532333934.roa
File: 3230312e3232312e3132302e302f32342d3234203d3e203532333934.roa (raw, json)
Hash identifier: 9Tb57EULA6pSVfEJeeka47CoBqjD1VwMSptnhNeEaL4=
Subject key identifier: 0F:B6:62:8D:AC:B8:34:20:1E:78:23:93:E8:4E:47:52:3D:75:F9:31
Certificate issuer: /CN=0BC40038D7F4C4663CAF584B7D98BC198DB79EAA
Certificate serial: 0A6F3F39FDB6110AC75334AE00C53EB1ADCD7E57
Authority key identifier: 0B:C4:00:38:D7:F4:C4:66:3C:AF:58:4B:7D:98:BC:19:8D:B7:9E:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/3230312e3232312e3132302e302f32342d3234203d3e203532333934.roa
Signing time: Tue 04 Feb 2025 18:12:31 +0000
ROA not before: Tue 04 Feb 2025 18:07:31 +0000
ROA not after: Tue 03 Feb 2026 18:12:31 +0000
asID: 52394
IP address blocks: 201.221.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6f:3f:39:fd:b6:11:0a:c7:53:34:ae:00:c5:3e:b1:ad:cd:7e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BC40038D7F4C4663CAF584B7D98BC198DB79EAA
Validity
Not Before: Feb 4 18:07:31 2025 GMT
Not After : Feb 3 18:12:31 2026 GMT
Subject: CN=0FB6628DACB834201E782393E84E47523D75F931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:c5:dc:dc:91:cd:24:05:30:b3:e2:e3:e0:
26:24:79:48:f0:b5:9d:18:27:36:bf:e6:f9:df:2d:
dc:3d:9b:4b:4f:a0:6b:10:a3:e1:33:3e:82:c8:b0:
38:0b:db:94:df:3f:2c:32:b7:b4:2e:d6:00:ce:58:
68:16:ab:13:ac:85:8d:78:f4:45:ab:4b:67:23:00:
4b:1b:64:1f:d7:02:63:d4:d0:48:fe:f3:28:02:27:
36:1b:e5:cf:4d:79:20:63:af:0e:04:11:dd:fe:a4:
64:fc:c7:c8:bf:15:8c:54:0c:0c:7e:28:ba:64:54:
ca:cb:5d:78:97:80:4e:21:fa:fd:bc:19:60:f8:79:
21:c0:77:05:f4:f9:d1:29:b7:8d:9a:b9:cb:9d:b8:
75:0d:ec:e3:e9:20:7f:84:5c:85:3e:54:d3:ed:f0:
45:4c:fd:64:64:74:2d:b3:ae:53:35:e8:07:ee:c1:
e6:45:c3:82:33:24:10:7b:9c:c1:9a:3e:e3:ac:95:
6f:da:cc:5f:aa:04:0c:25:86:01:72:76:9a:d0:7e:
73:7e:a2:57:4c:20:0a:69:ae:ba:a9:30:99:7d:90:
aa:32:05:cc:26:d2:b3:70:47:36:92:4f:bd:8b:89:
e4:e9:7d:bc:9a:0a:b6:fe:e8:88:4c:11:d9:ab:43:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B6:62:8D:AC:B8:34:20:1E:78:23:93:E8:4E:47:52:3D:75:F9:31
X509v3 Authority Key Identifier:
keyid:0B:C4:00:38:D7:F4:C4:66:3C:AF:58:4B:7D:98:BC:19:8D:B7:9E:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/3230312e3232312e3132302e302f32342d3234203d3e203532333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:02:bf:22:80:3d:f7:ac:b4:65:ad:1f:22:d4:82:70:4b:bb:
ed:56:5b:d0:c0:31:71:8a:52:56:db:41:33:77:e5:cf:41:0d:
c6:aa:da:d7:91:65:07:27:63:e3:88:e8:4c:a5:42:95:b1:66:
b1:05:b2:ce:c7:c0:92:c4:14:7d:ff:b3:a1:4a:e0:fe:4e:a1:
3d:dc:17:63:ac:a5:1d:f9:85:29:72:0e:fb:80:02:b1:fc:e7:
a2:e7:ee:b4:f1:d1:a3:2c:fa:70:e2:94:c0:b0:38:f4:48:53:
59:fd:1c:38:22:56:c6:27:ce:0b:78:ad:5d:a3:9e:cf:1a:f8:
41:86:23:53:a9:80:e7:11:f8:55:3b:3c:a8:6e:fe:f8:00:08:
2e:af:cb:95:74:b4:67:4b:18:49:c0:d5:c1:1a:62:16:20:81:
5e:f2:c5:7c:84:26:69:28:ab:55:25:ec:11:c3:ae:f3:05:67:
78:d5:1f:6f:53:58:6c:90:08:61:e4:9c:b2:aa:82:d7:f0:0a:
d5:08:cd:8e:be:9a:03:ca:9e:e7:8d:cd:83:22:ec:0c:60:76:
bf:b6:8c:12:cc:5a:42:cc:dc:f0:b1:6d:f3:49:56:a2:cf:eb:
27:b4:c9:d3:9b:2a:5d:c0:d5:58:df:bf:32:fb:27:c7:b3:1e:
a4:6d:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:55:42 2025 by rpki-client