Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e342e302f32322d3234203d3e2036333036.roa
File: 3138362e32342e342e302f32322d3234203d3e2036333036.roa (raw, json)
Hash identifier: k0TLZIWST7Phyn+BBySW4H4NqffeDo84LmdnGGkdPek=
Subject key identifier: DE:B7:63:73:C1:4D:3C:12:5D:72:65:01:FF:66:B4:2A:9F:80:CD:1A
Certificate issuer: /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial: 0BEE1F1CD76A7EDA53BEBD913053A2A3D4DFF936
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e342e302f32322d3234203d3e2036333036.roa
Signing time: Tue 04 Feb 2025 18:33:03 +0000
ROA not before: Tue 04 Feb 2025 18:28:03 +0000
ROA not after: Tue 03 Feb 2026 18:33:03 +0000
asID: 6306
IP address blocks: 186.24.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ee:1f:1c:d7:6a:7e:da:53:be:bd:91:30:53:a2:a3:d4:df:f9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Validity
Not Before: Feb 4 18:28:03 2025 GMT
Not After : Feb 3 18:33:03 2026 GMT
Subject: CN=DEB76373C14D3C125D726501FF66B42A9F80CD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:e2:8c:52:9d:22:95:09:1f:44:51:8d:f9:
39:61:63:b4:56:d0:2e:02:7e:85:05:86:9b:3d:01:
f0:96:e1:5f:5d:ea:23:d0:79:81:53:d0:5c:19:c2:
50:58:17:9e:53:97:4d:9b:7a:ce:54:77:44:0b:d4:
2f:ab:fc:fa:50:f3:4c:f7:17:fa:6c:5d:0f:b4:f5:
67:9f:4c:8d:d2:5d:2d:72:71:52:ba:48:5e:3f:3b:
c1:11:a3:e4:2f:2d:1f:17:13:d4:68:0f:b5:d7:4b:
28:5f:f6:6a:49:9b:7d:a7:07:f7:9e:a4:fd:0e:bf:
3a:c5:18:9c:c7:0f:ad:01:9d:72:ae:6f:13:b0:f8:
c3:d3:d4:54:46:53:8b:27:bb:8e:23:0c:76:d8:b7:
bb:16:52:43:83:34:d8:8c:2d:0f:d7:0e:88:0d:be:
ff:13:53:69:c1:19:54:65:71:16:40:e1:27:8b:d1:
90:3d:56:6e:93:22:db:9e:d6:f5:99:6a:c6:15:0a:
53:57:91:b5:67:5b:db:57:3b:e6:ba:66:d8:78:22:
a9:91:97:9c:50:b9:96:f0:3f:ab:eb:91:1d:1b:0d:
a3:57:57:49:1b:da:68:08:38:67:10:04:af:1d:2d:
67:fe:72:27:be:a3:9a:bc:b9:01:16:a6:f8:1e:a5:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:63:73:C1:4D:3C:12:5D:72:65:01:FF:66:B4:2A:9F:80:CD:1A
X509v3 Authority Key Identifier:
keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e342e302f32322d3234203d3e2036333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.24.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ad:f1:1e:7a:59:b3:2f:ed:35:5e:e1:ac:63:c4:eb:2f:fb:
f5:08:db:ba:65:c8:62:79:53:a9:6b:6b:5e:5c:b2:cf:ab:68:
70:5c:12:8d:a8:94:fa:55:d3:6b:d6:87:e0:e4:a5:6b:a1:d9:
f9:a0:a2:bb:ca:9a:4e:a6:1d:f5:a7:33:b7:0b:ec:62:8e:25:
eb:ed:17:ee:26:eb:3d:70:b3:6f:9b:73:bd:c3:a1:90:b9:11:
7b:90:f2:6d:5b:ff:f4:b9:92:1a:e2:77:e9:ee:f1:a4:ef:ad:
c7:63:39:80:da:4d:7f:89:5b:4b:81:6b:88:79:b2:69:bb:8e:
9d:6a:11:82:82:6a:6c:08:b5:28:ec:03:e1:01:de:eb:66:60:
bf:0b:3e:1f:9b:a0:c3:f7:56:d8:76:7d:4d:e7:02:d6:12:5c:
fc:0e:79:b3:53:7a:0b:14:4e:ec:6a:8f:2a:d2:7b:0a:2d:99:
43:0d:47:f2:a2:71:34:6c:91:9e:d2:67:81:03:56:a8:2c:94:
39:9d:e9:4f:f0:21:e1:ca:60:fe:13:ce:6d:be:41:06:47:98:
02:3b:15:85:05:0c:cc:9f:28:1c:c8:7c:17:a7:72:b1:95:3b:
1c:52:f6:47:2b:3d:1e:d6:59:dd:51:b2:0e:27:7f:c6:9b:6e:
c0:7a:f8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:03 2025 by rpki-client