Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3136362e3131342e312e302f32342d3234203d3e203532323530.roa
File: 3136362e3131342e312e302f32342d3234203d3e203532323530.roa (raw, json)
Hash identifier: lbzlOvGYm3DIhDd4MQ9H+9vg7ex2K0oIfmYszkBJihs=
Subject key identifier: 43:B3:3D:05:15:14:D5:ED:E0:3A:CF:78:53:4B:6A:02:D0:03:0C:F6
Certificate issuer: /CN=E840769E201D72D7EA098EEE7538061FBEA58116
Certificate serial: 753D31D89FC8D82172DD17C7600F1A2306728738
Authority key identifier: E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3136362e3131342e312e302f32342d3234203d3e203532323530.roa
Signing time: Tue 04 Feb 2025 18:09:21 +0000
ROA not before: Tue 04 Feb 2025 18:04:21 +0000
ROA not after: Tue 03 Feb 2026 18:09:21 +0000
asID: 52250
IP address blocks: 166.114.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:3d:31:d8:9f:c8:d8:21:72:dd:17:c7:60:0f:1a:23:06:72:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E840769E201D72D7EA098EEE7538061FBEA58116
Validity
Not Before: Feb 4 18:04:21 2025 GMT
Not After : Feb 3 18:09:21 2026 GMT
Subject: CN=43B33D051514D5EDE03ACF78534B6A02D0030CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:7f:1e:aa:20:ef:ce:f5:c0:a3:cc:79:33:
34:ca:c0:d3:16:fb:53:f4:72:84:64:d4:84:6c:30:
19:01:2d:da:ed:e5:16:85:8f:93:79:cf:af:09:64:
fb:22:c5:69:41:b2:a6:85:c0:87:4a:ab:70:0c:7f:
f1:e8:93:1e:1a:1f:06:f2:ed:1e:5e:a0:1c:47:c1:
d0:96:2a:a6:cc:e9:27:3a:14:35:c4:4b:73:a7:34:
23:1f:95:02:6e:a4:9a:2e:15:92:4e:93:9b:49:33:
c3:8e:e2:83:53:24:e6:3e:5b:17:83:88:01:0f:6c:
52:dd:89:b7:a4:85:e3:39:c7:8c:26:f5:3e:75:b5:
4f:40:65:a8:8c:38:64:74:49:9c:3a:4d:6d:2a:a9:
ef:e5:ec:54:59:c0:8a:f8:7f:1a:f9:b0:34:0d:ad:
16:6c:84:f0:de:8f:68:93:f0:47:e5:58:88:d0:c4:
ad:29:e3:4e:f1:53:0f:cc:9c:fb:c3:7b:87:c8:cc:
ff:a4:ed:01:5e:ca:ca:93:cf:36:51:7e:9d:52:9f:
73:66:27:2e:8e:a6:65:5d:b0:80:35:4e:cb:a9:72:
a7:ac:30:08:33:e7:21:79:8d:7b:48:5c:0b:79:b6:
bc:86:c5:16:7b:67:7a:1f:80:93:ba:0b:26:c8:25:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B3:3D:05:15:14:D5:ED:E0:3A:CF:78:53:4B:6A:02:D0:03:0C:F6
X509v3 Authority Key Identifier:
keyid:E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3136362e3131342e312e302f32342d3234203d3e203532323530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.114.1.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0e:4d:85:91:b8:b9:89:61:ba:ac:f0:15:ee:58:45:56:d3:
01:9b:c6:75:95:df:16:f1:0b:22:e2:57:9c:53:1a:3a:1c:65:
b1:68:aa:16:56:47:af:b7:bf:8c:61:8f:7e:4c:27:d4:99:1a:
71:f1:39:5d:00:0e:e0:08:82:4f:53:5c:28:c4:1f:3a:77:02:
f6:82:4c:8e:49:13:22:f1:13:9c:3f:24:bb:28:04:32:51:e2:
c8:64:06:c4:6c:e6:64:55:6f:7b:e2:5b:9c:90:c3:c5:fd:4c:
94:40:f4:45:30:85:2e:bc:c6:e6:58:a8:ad:7e:d1:f1:ba:b5:
3d:83:05:03:83:54:6e:2f:5f:b1:20:86:e7:97:b0:2b:b5:d0:
bb:13:3e:bc:7b:5e:dd:21:58:6d:66:2f:6a:90:68:39:36:d8:
9c:ae:4f:04:2b:a1:bb:fc:60:f9:73:6b:7e:2b:7a:02:87:0c:
b5:f9:46:b6:23:ef:ba:73:ce:90:50:d0:d3:d4:f9:16:cf:61:
9c:4c:28:6f:43:1f:ff:a7:04:45:ca:54:03:2e:d7:3e:d2:db:
b1:b4:1c:db:58:d1:78:2c:5f:df:8a:33:46:af:aa:d5:b3:ef:
9e:91:ce:15:c4:a3:6c:5f:7a:68:a6:cf:00:63:ea:fb:d2:7d:
41:6b:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:15:01 2025 by rpki-client