Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS262198.roa
File: AS262198.roa (raw, json)
Hash identifier: IDLJ9ZHtZm5MpivFGwU//NG70MqUtBZOgQOyNFQuY4Q=
Subject key identifier: 2D:31:04:F9:E6:A9:31:3D:55:AD:2B:71:84:03:2B:DE:B0:A3:5B:3F
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 373BBDE63ECDBC0785670A60DFC716BD74A3E26B
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS262198.roa
Signing time: Tue 04 Feb 2025 18:02:49 +0000
ROA not before: Tue 04 Feb 2025 17:57:49 +0000
ROA not after: Tue 03 Feb 2026 18:02:49 +0000
asID: 262198
IP address blocks: 201.218.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3b:bd:e6:3e:cd:bc:07:85:67:0a:60:df:c7:16:bd:74:a3:e2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Feb 4 17:57:49 2025 GMT
Not After : Feb 3 18:02:49 2026 GMT
Subject: CN=2D3104F9E6A9313D55AD2B7184032BDEB0A35B3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:d3:63:3e:4d:93:ee:48:d5:e6:7f:b0:6e:
ff:21:92:29:0b:e3:00:1f:50:7d:f8:d6:83:6b:d5:
aa:f5:ee:ca:85:68:34:09:1e:4d:3f:b9:f0:2e:14:
e5:2f:96:b1:49:2d:62:47:2a:0c:1a:2d:94:55:9f:
af:1c:8f:da:93:6c:e2:1f:95:a6:e9:8a:84:ea:7b:
c1:d7:bd:83:5a:32:ec:00:c5:73:9f:7c:12:9f:6b:
66:3d:4c:0e:82:52:41:76:cb:db:8f:64:92:84:94:
02:d2:a5:cf:0f:07:4e:ef:63:2d:6d:63:94:9e:c5:
d4:7f:15:94:70:3c:8a:88:b5:60:55:61:f3:a7:72:
22:ac:b0:47:44:47:26:f1:65:30:af:c8:be:e0:da:
e5:35:c1:23:65:86:17:f6:00:e8:1e:e6:ff:ad:7d:
e7:c2:fe:24:02:03:32:fa:e8:7f:f3:9c:9e:0e:ad:
c5:fe:d6:05:54:93:16:d4:0a:52:0f:e6:37:a0:c8:
ab:c5:e3:a4:44:53:ab:c1:65:aa:6b:a1:4d:12:91:
62:d3:e6:5c:04:31:5a:6d:a2:a6:12:3b:e9:c3:75:
f2:9b:c5:4a:27:ce:f2:2c:df:08:1b:a7:7e:ec:3e:
6a:9c:88:d0:b9:83:58:2b:63:ea:8f:ef:ef:a2:cc:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:31:04:F9:E6:A9:31:3D:55:AD:2B:71:84:03:2B:DE:B0:A3:5B:3F
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS262198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.216.0/24
Signature Algorithm: sha256WithRSAEncryption
79:30:d0:a6:e4:fc:02:9f:41:b3:ae:eb:69:55:09:50:05:b3:
bf:f3:92:50:f0:d2:31:6f:d9:98:94:18:10:e3:7d:be:e6:36:
ac:17:5a:02:41:57:40:cc:11:c0:39:03:9d:c1:c8:71:6e:d3:
36:ad:1f:85:a7:e8:1f:c1:c5:43:9a:6c:61:7a:9f:0d:4e:f6:
4c:90:d1:34:7a:fe:2d:e1:88:6a:ae:62:b8:af:52:5c:23:f4:
b9:0e:bd:99:ef:19:71:e9:c9:85:1e:a6:30:a2:7b:5a:ab:90:
be:84:8b:a8:94:e1:1e:08:ef:db:9f:39:4e:d8:00:0a:e0:fd:
12:78:e9:ab:ff:fc:18:bb:8e:1e:40:de:de:e7:6c:e3:36:3d:
15:a3:93:c9:87:d3:17:f0:9b:c3:ca:d4:ad:bb:2a:b5:bb:89:
43:62:0b:ef:53:30:b7:25:14:51:17:ad:65:3f:50:a0:0d:89:
c0:f0:57:44:4e:59:9a:ed:b2:4d:92:93:33:d3:fe:7c:e9:e4:
82:b6:f8:66:f9:20:e2:ae:1a:e9:b5:cd:89:d0:3f:d6:0b:1d:
fc:db:b9:63:eb:b6:db:34:6f:e7:b3:aa:28:48:27:6a:76:62:
09:be:77:9e:a7:f4:e7:05:fa:6b:21:e6:bd:57:51:8b:b6:0d:
43:d1:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:31 2025 by rpki-client