Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e302e302f31342d3134203d3e2036333036.roa
File: 3137392e32302e302e302f31342d3134203d3e2036333036.roa (raw, json)
Hash identifier: 94NAiFL3Sz7ywsFB6QVPlagEl33K51yeTiLaqmAcv4Y=
Subject key identifier: 8A:01:EF:9D:50:29:D0:3F:F2:18:59:04:42:6D:11:F3:97:59:0B:CE
Certificate issuer: /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial: 61171AFBE89E324F2F0C948659F895F253CC0DE9
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e302e302f31342d3134203d3e2036333036.roa
Signing time: Tue 04 Feb 2025 18:33:04 +0000
ROA not before: Tue 04 Feb 2025 18:28:04 +0000
ROA not after: Tue 03 Feb 2026 18:33:04 +0000
asID: 6306
IP address blocks: 179.20.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:17:1a:fb:e8:9e:32:4f:2f:0c:94:86:59:f8:95:f2:53:cc:0d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Validity
Not Before: Feb 4 18:28:04 2025 GMT
Not After : Feb 3 18:33:04 2026 GMT
Subject: CN=8A01EF9D5029D03FF2185904426D11F397590BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:95:f9:47:9d:89:d7:29:6e:50:be:4e:54:
ea:eb:99:e9:0f:e6:b3:bc:4c:92:2a:6d:44:12:9f:
34:70:53:0b:c6:02:2f:c0:90:75:b7:2a:7d:49:18:
72:af:0e:5c:90:71:2f:b8:6c:e5:32:42:50:68:3e:
0e:27:b6:c9:88:d8:d6:4c:52:a6:96:d9:a9:e6:3f:
b4:3d:0d:73:52:3c:65:bf:d4:14:e3:72:5e:00:b6:
65:0b:d8:b1:25:38:1b:42:d7:1f:b2:a6:c2:d8:69:
c4:5b:40:f1:e8:03:92:93:e7:b9:1e:c0:8d:6f:4b:
a6:ac:c4:00:ce:3a:5c:bf:5a:6c:86:57:a3:d3:f5:
a8:84:ee:4a:fb:b8:c8:cb:76:e2:17:ca:51:50:5a:
26:0c:40:ec:a6:2d:7b:40:04:15:b9:82:41:28:6a:
e4:f6:56:15:3c:bb:20:59:30:28:11:d7:c1:ed:6d:
e9:2a:c8:37:e4:f5:03:19:04:75:f5:ec:1d:91:08:
60:3d:a2:56:0e:35:24:f3:76:61:47:a8:3b:f0:1e:
57:f4:1a:8a:b2:53:cf:eb:b3:f5:70:67:c2:08:b7:
1c:87:c9:ea:68:0e:7c:bc:7a:af:13:54:89:e7:22:
5a:4f:1d:10:95:89:8d:c1:07:2b:17:4e:d7:b9:41:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:EF:9D:50:29:D0:3F:F2:18:59:04:42:6D:11:F3:97:59:0B:CE
X509v3 Authority Key Identifier:
keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e302e302f31342d3134203d3e2036333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.20.0.0/14
Signature Algorithm: sha256WithRSAEncryption
7f:79:bb:1f:e4:a3:fb:2b:4d:3a:08:1f:bb:1d:9d:5a:55:da:
14:8a:6c:cb:93:50:6d:27:1d:40:59:08:e9:07:6a:c8:50:7f:
42:26:5e:4e:5c:89:01:3e:24:27:cf:b8:f9:3a:a7:fa:73:23:
58:f9:7d:a1:79:3a:0f:55:54:57:09:8e:95:d2:b7:c9:e8:99:
da:44:f7:30:d6:7d:70:7c:0d:44:e9:79:8c:bf:10:a0:d1:ed:
06:af:cf:8f:4a:45:b9:80:db:2b:73:ac:88:66:bb:6c:13:19:
f1:d5:31:1b:1f:b9:74:44:1b:07:cb:f0:56:7a:26:70:d3:ed:
bd:ab:39:16:d3:16:e2:3a:67:92:ef:57:c1:a8:f6:93:a4:ac:
5d:5f:dd:ac:1e:e2:f7:4b:b7:ba:ea:8a:11:fa:9c:0b:e8:29:
34:7b:34:67:06:37:6c:bc:cd:17:10:42:4d:6a:dc:0e:0a:1f:
45:97:5c:e0:dc:99:9d:15:60:5c:4c:e5:8d:38:0d:6b:5b:21:
4d:74:68:ee:1e:01:43:68:74:4b:bf:d8:92:a9:db:20:c0:64:
d8:93:a0:76:0f:3e:9e:db:e5:ed:66:31:8f:55:0f:00:31:ca:
94:6d:dc:9e:d0:f0:28:81:be:87:d2:6e:ed:e6:8f:b0:b7:e9:
fe:e7:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:00 2025 by rpki-client