Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e312e302f32342d3234203d3e203231353735.roa
File: 3134382e3130322e312e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier: 1YdtsfPBZK4o0zU/7YL+NmPDJwcZ05E8Pqx81P64QPc=
Subject key identifier: 0A:A8:06:D7:69:A5:1E:AF:B6:78:8D:EB:64:B9:9B:43:81:4D:DB:9B
Certificate issuer: /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial: 720383052FA8B38C8081556693910A33E20C7D8C
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e312e302f32342d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:42:37 +0000
ROA not before: Tue 04 Feb 2025 18:37:37 +0000
ROA not after: Tue 03 Feb 2026 18:42:37 +0000
asID: 21575
IP address blocks: 148.102.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:03:83:05:2f:a8:b3:8c:80:81:55:66:93:91:0a:33:e2:0c:7d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Validity
Not Before: Feb 4 18:37:37 2025 GMT
Not After : Feb 3 18:42:37 2026 GMT
Subject: CN=0AA806D769A51EAFB6788DEB64B99B43814DDB9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:0f:89:ac:a5:d7:99:9d:72:00:b4:36:c6:
b7:80:34:89:38:15:0b:f1:32:d2:e8:f1:42:ca:ad:
01:f1:13:09:a6:e6:fa:c0:3b:23:76:69:88:7f:0b:
16:95:7a:47:b2:4f:0b:7c:ca:39:eb:10:10:de:39:
38:58:26:1b:ce:00:a7:49:2d:78:dd:4f:7b:ed:fa:
73:92:82:1b:61:19:68:96:78:88:33:52:9f:75:d9:
d8:13:7d:29:29:35:46:9e:8b:db:f9:4e:7f:2a:68:
5f:0c:84:72:c9:a7:1d:72:94:f9:0e:1f:51:44:8b:
29:ac:06:45:0b:2a:03:5e:81:14:f1:7b:9a:a5:eb:
d3:fb:1d:cc:35:b0:55:08:cf:8e:a0:ac:5b:18:c3:
0a:67:86:57:d6:1e:68:64:d0:b5:d3:55:9e:27:f0:
20:cd:21:3f:88:4d:30:8e:e8:e7:6e:03:50:56:dc:
c3:f9:e2:8a:0b:cc:5d:f0:a5:33:04:fd:65:2b:af:
f8:e5:95:d5:5b:84:2f:c9:04:0d:11:e6:41:55:da:
ef:77:e5:f3:bf:b9:45:07:14:55:c8:9e:20:0d:5f:
51:85:49:21:b8:7d:6d:27:49:c1:96:41:e1:95:6d:
cd:97:79:97:6c:ad:30:74:d0:a0:06:96:f2:74:6e:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A8:06:D7:69:A5:1E:AF:B6:78:8D:EB:64:B9:9B:43:81:4D:DB:9B
X509v3 Authority Key Identifier:
keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e312e302f32342d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ea:f2:cd:d0:0f:8b:a8:d0:8e:e7:47:ee:f4:14:d4:70:c8:
ad:08:5d:43:e1:ac:a5:c8:1c:37:6a:97:85:bc:3b:00:39:33:
92:e2:23:72:3c:aa:92:6b:bf:ba:2b:1b:fe:ee:be:cd:b9:f3:
b7:44:a1:d8:f8:99:63:46:46:70:8c:6f:ce:43:55:3c:7e:8e:
33:08:d0:76:b6:49:b4:d7:40:c2:67:63:27:9d:08:8b:86:94:
51:ab:bd:73:43:fe:8e:5f:79:1f:7d:a5:19:75:12:96:a0:db:
8d:56:51:12:82:c3:d6:f0:ce:98:c8:09:10:69:ba:93:1b:e9:
9c:24:c5:fc:16:4c:22:32:5c:5f:a7:9c:e7:ac:09:c5:03:ce:
f8:37:91:4a:d8:3e:da:bf:6a:6c:49:fd:42:60:34:d2:b1:07:
d7:68:4b:db:98:be:c3:2a:5b:fe:c5:e9:7f:02:47:31:23:36:
49:c2:2b:79:98:10:60:49:0f:a2:d9:cf:18:76:65:d3:dc:5a:
9d:06:dc:49:86:5b:99:7d:40:21:22:1e:a9:26:f5:81:ff:ef:
64:69:f3:29:42:f0:6d:8c:c4:22:6f:e0:05:b1:ba:3d:e5:e1:
a7:0c:e4:43:ad:10:f9:73:17:42:37:6f:cb:b1:d1:79:37:ea:
90:b4:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:52:56 2025 by rpki-client