Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33322e302f32342d3234203d3e20323637373839.roa
File: 3136312e32322e33322e302f32342d3234203d3e20323637373839.roa (raw, json)
Hash identifier: f8EhSWGr3konMfnZT0ees/lD7/G8PBdA+iJ6zbbV/X8=
Subject key identifier: D8:E3:36:5F:13:D7:09:54:D3:28:C9:D2:41:9B:CD:50:06:26:F3:C1
Certificate issuer: /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial: 3F54FB1822B7DF83437400238216614E91A3C03C
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33322e302f32342d3234203d3e20323637373839.roa
Signing time: Tue 04 Feb 2025 18:42:42 +0000
ROA not before: Tue 04 Feb 2025 18:37:42 +0000
ROA not after: Tue 03 Feb 2026 18:42:42 +0000
asID: 267789
IP address blocks: 161.22.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:54:fb:18:22:b7:df:83:43:74:00:23:82:16:61:4e:91:a3:c0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Validity
Not Before: Feb 4 18:37:42 2025 GMT
Not After : Feb 3 18:42:42 2026 GMT
Subject: CN=D8E3365F13D70954D328C9D2419BCD500626F3C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:71:15:cb:d5:f3:e7:61:a4:81:f7:53:a3:
21:7e:78:b6:51:61:b9:f8:52:a8:ce:9a:29:f6:23:
06:0b:b3:5c:4c:22:49:2c:ad:52:ff:2b:da:35:83:
e9:2c:06:65:af:2f:c2:5a:fd:92:75:b6:95:2e:a1:
e3:4a:5a:df:61:e5:54:61:26:27:c1:d8:ed:a8:3f:
36:fd:2e:e1:4a:ec:19:66:43:4f:59:86:39:5a:2b:
d9:e1:d3:ad:ed:ba:be:e8:e1:ca:5e:a2:e1:ad:d2:
37:95:b0:aa:4c:90:66:88:45:d6:37:9d:b1:d2:08:
10:c4:26:51:36:22:35:48:e6:fb:c2:df:b3:17:bf:
d4:4b:08:73:a1:8f:d6:56:fd:3c:f2:eb:c8:4d:1d:
62:55:24:e8:36:33:31:cc:15:95:82:b9:f0:16:71:
d4:29:30:2b:c7:0d:84:7f:fb:1f:5e:db:ad:ea:cc:
0c:e4:fe:f8:fb:2c:e3:44:62:0e:db:ca:47:08:30:
81:65:d8:93:db:b7:d6:6f:e3:47:dd:d8:82:ae:03:
a4:4a:fa:09:cd:5c:f1:33:68:bc:b3:ef:cb:af:35:
fe:bc:d7:b7:f7:4a:5f:78:c2:fc:e1:41:1a:58:f9:
73:d3:2d:32:31:6a:b6:72:33:fb:5f:58:4c:2b:a9:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E3:36:5F:13:D7:09:54:D3:28:C9:D2:41:9B:CD:50:06:26:F3:C1
X509v3 Authority Key Identifier:
keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33322e302f32342d3234203d3e20323637373839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.32.0/24
Signature Algorithm: sha256WithRSAEncryption
65:50:3c:11:96:c2:a3:2e:84:8e:04:06:19:45:31:d4:f8:e9:
fa:c8:85:2c:79:de:10:90:7d:3b:8f:2c:d2:45:de:ae:d0:53:
30:ed:1e:a4:d6:2a:84:b4:19:c8:d2:bb:5a:ae:98:ce:8e:39:
1f:79:15:af:74:dc:11:d8:46:b2:f1:20:02:96:49:ac:b0:a5:
79:f4:09:3d:a7:0c:ab:b3:56:8b:ef:1b:6e:b7:66:36:dd:b2:
4a:4c:33:6d:16:76:42:98:4a:d2:d7:b4:2f:d9:65:f8:a6:35:
9a:2b:16:b4:b5:6c:10:00:ab:b0:75:3b:89:83:36:56:8b:48:
17:38:ac:fc:28:8f:6b:61:30:ad:1c:90:ca:c4:1a:3f:74:a3:
ee:af:26:b3:86:15:80:9f:76:b9:20:41:7e:d3:bc:4e:ed:8d:
40:aa:08:56:d5:81:c6:62:05:0c:fb:bf:1a:92:75:60:de:3e:
82:78:d4:0c:1f:f9:80:f6:eb:c3:2d:0c:a6:db:3f:af:82:63:
c6:06:ab:35:f5:10:aa:f3:c2:ca:4a:e8:f6:ba:c0:62:dc:d8:
f6:1f:de:cc:79:d2:37:5f:22:2a:a0:95:73:8b:d6:4f:f0:cd:
9b:79:c4:68:f2:86:a2:6e:42:2c:a9:11:e4:31:f5:7c:96:08:
b2:cf:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:58:04 2025 by rpki-client