Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33392e302f32342d3234203d3e20323732383734.roa
File: 3136312e32322e33392e302f32342d3234203d3e20323732383734.roa (raw, json)
Hash identifier: KKtqYE3XhrWLFsENu8qr13OiIO4w5n7WjIj+72tKAyE=
Subject key identifier: B4:A7:50:C3:1D:00:61:9F:86:99:AA:10:C2:4D:1D:CA:53:69:03:12
Certificate issuer: /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial: 78F97D8801178F23D2810CF3BF6DE1ECB2BC14BF
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33392e302f32342d3234203d3e20323732383734.roa
Signing time: Tue 04 Feb 2025 18:42:41 +0000
ROA not before: Tue 04 Feb 2025 18:37:41 +0000
ROA not after: Tue 03 Feb 2026 18:42:41 +0000
asID: 272874
IP address blocks: 161.22.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f9:7d:88:01:17:8f:23:d2:81:0c:f3:bf:6d:e1:ec:b2:bc:14:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Validity
Not Before: Feb 4 18:37:41 2025 GMT
Not After : Feb 3 18:42:41 2026 GMT
Subject: CN=B4A750C31D00619F8699AA10C24D1DCA53690312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:cb:f7:30:da:c5:e8:68:17:76:f5:0e:40:
a3:3e:34:c9:51:89:78:c8:88:46:78:45:ef:88:ce:
48:d9:09:2e:88:a9:18:46:02:cb:27:48:9e:5a:d8:
78:cb:75:9a:09:61:bd:0d:34:76:fc:74:7f:01:1f:
9c:41:5e:91:26:75:63:a0:aa:8f:27:ba:2e:17:fb:
cc:24:6e:e1:f4:a7:86:69:7f:30:fe:87:b3:93:19:
c9:57:bf:6c:eb:b1:55:ef:55:3d:76:1f:29:56:15:
5e:79:90:da:60:43:88:4c:cc:e7:86:59:ef:ed:14:
77:a4:d9:93:85:9c:18:1a:dd:26:20:35:10:63:c5:
60:1d:93:9b:20:8f:46:09:b6:93:56:db:4f:0a:39:
74:42:d5:8b:e3:14:1d:01:a3:93:ad:4c:27:4b:d3:
0d:02:58:36:57:74:12:30:f9:ac:36:6e:45:86:6e:
de:52:d5:be:7e:26:a4:d7:bb:7c:fc:83:b4:b1:63:
48:ee:79:57:9e:bd:c9:21:d6:9e:d9:28:5e:9c:81:
6c:96:2b:76:35:a6:48:96:b3:f6:2a:3b:f1:43:a9:
e0:2a:fe:4f:1f:26:6f:93:1b:c6:cd:ad:92:57:4f:
d0:ae:79:44:7b:c2:cb:c7:d0:9a:4b:02:f8:b0:4d:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A7:50:C3:1D:00:61:9F:86:99:AA:10:C2:4D:1D:CA:53:69:03:12
X509v3 Authority Key Identifier:
keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33392e302f32342d3234203d3e20323732383734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.39.0/24
Signature Algorithm: sha256WithRSAEncryption
34:27:c9:d1:ec:53:32:1c:b8:a8:d6:40:92:e2:74:9e:64:d9:
97:07:ad:16:79:bf:6d:f9:0f:39:f1:a1:cd:6b:26:4d:9f:60:
c4:7c:2f:c0:b8:0d:7b:8b:97:aa:77:bc:20:53:db:0f:b9:88:
2d:d9:b4:a5:e5:4a:ea:88:d4:64:70:24:b3:cf:dc:95:ad:16:
9c:ea:fc:1e:7a:23:8a:35:0b:f9:e8:cb:5d:e8:c3:63:fa:14:
85:1f:bd:c8:61:b4:e4:11:09:ed:9f:cc:11:e6:be:74:ab:46:
b0:50:ec:52:5e:b7:33:d8:eb:0a:e9:54:8f:c1:a4:49:9b:c7:
6e:80:21:81:5f:06:62:95:77:c4:69:cf:4f:90:d3:43:5a:d9:
ba:6e:61:ae:c2:29:06:80:1e:ce:4c:73:19:6e:33:94:08:54:
21:77:4a:68:7a:e8:46:12:c9:7b:c7:03:2a:38:2f:eb:c5:f7:
72:54:3f:ec:64:a3:6b:a2:b6:a1:c4:1c:80:18:da:51:e1:a7:
9e:a8:75:78:34:7f:71:46:30:1f:29:a4:83:16:59:56:01:e8:
d0:7b:9b:ea:37:3f:0a:bf:63:d8:d4:20:91:28:50:eb:0e:81:
26:4c:45:fb:70:ac:13:10:ae:be:0f:e8:c8:e8:6e:33:69:4e:
7f:9c:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:58:06 2025 by rpki-client