Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232322e3132382e302f31382d3234203d3e2037343138.roa
File: 3230312e3232322e3132382e302f31382d3234203d3e2037343138.roa (raw, json)
Hash identifier: mnA84BFOKCYzASQs/H7QWhmph/F5qi5RvMY0cViYY1g=
Subject key identifier: 8C:C2:1F:3E:71:D8:F4:A0:5F:F8:B6:32:F9:BD:38:89:61:E6:70:1E
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 15C149B25FDD875A58A29D846960B3F81A29B815
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232322e3132382e302f31382d3234203d3e2037343138.roa
Signing time: Tue 04 Feb 2025 18:30:03 +0000
ROA not before: Tue 04 Feb 2025 18:25:03 +0000
ROA not after: Tue 03 Feb 2026 18:30:03 +0000
asID: 7418
IP address blocks: 201.222.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c1:49:b2:5f:dd:87:5a:58:a2:9d:84:69:60:b3:f8:1a:29:b8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Feb 4 18:25:03 2025 GMT
Not After : Feb 3 18:30:03 2026 GMT
Subject: CN=8CC21F3E71D8F4A05FF8B632F9BD388961E6701E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:89:78:c4:a8:5e:a6:aa:08:f1:86:04:88:
f7:a7:96:aa:b7:54:8c:8c:6a:2a:66:4c:fb:fe:3e:
dd:c6:d0:77:a8:0d:d3:6c:18:6a:71:ba:d1:a1:32:
71:77:15:ea:cd:28:5f:5e:c0:c7:48:0f:9f:e9:4a:
1a:fb:e6:92:37:7e:3f:ed:46:0d:d8:18:b0:cf:da:
09:ba:b1:c1:70:4e:66:dd:f2:a3:04:64:92:6a:30:
79:91:9c:0c:b0:87:d4:24:d0:d3:c0:5c:77:93:1b:
6f:07:9a:84:6d:ee:fa:59:5b:0f:1b:9d:33:7b:9d:
1e:3a:33:29:80:ac:65:4d:7f:60:61:f9:ff:4b:cc:
9a:26:55:dc:29:77:aa:e5:94:ef:b3:3f:a0:2f:77:
26:55:14:3b:e7:8c:7f:0b:5a:72:8b:71:9e:38:c1:
24:37:c8:b2:d2:a5:d9:8f:98:c6:db:82:e0:10:91:
a6:29:1c:aa:55:66:fe:2d:f4:bb:fd:5f:a8:6f:5b:
04:04:ed:05:97:f1:7a:4e:4c:82:af:65:00:34:46:
65:6f:59:d7:a2:0a:71:cb:77:de:3b:95:86:76:99:
89:7e:f6:de:bf:86:62:5f:f8:fd:51:2f:e2:4e:f8:
1e:7c:ed:b9:37:1f:08:b0:a9:4d:f8:d1:a6:0b:b4:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C2:1F:3E:71:D8:F4:A0:5F:F8:B6:32:F9:BD:38:89:61:E6:70:1E
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232322e3132382e302f31382d3234203d3e2037343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.222.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:10:bd:f9:0e:a1:f2:2c:6b:78:79:55:98:5e:68:71:a1:4b:
aa:91:ba:55:b1:64:78:64:90:f5:e5:ec:64:b2:21:d3:f1:08:
a2:3d:02:da:87:da:34:11:ed:89:18:15:08:4a:3f:f9:c7:c4:
90:4e:e2:6a:08:01:6a:6f:6e:a9:ef:d6:63:33:de:f4:6a:7f:
c6:ef:22:02:22:f1:e8:32:60:cc:25:3d:de:40:ae:71:a6:ea:
3b:b5:ac:4a:b7:23:d3:73:eb:3e:b7:0d:e7:2b:9b:36:48:ff:
56:08:21:44:f1:ef:43:72:d5:e2:42:aa:cc:ae:1d:7d:30:3c:
1b:d5:9b:8e:14:ac:34:d6:87:ef:b1:60:6a:83:f1:77:5d:2c:
61:e2:30:d5:c8:27:48:ea:f5:7f:63:73:1b:64:6b:49:44:8a:
63:28:90:4d:72:7e:59:08:b4:95:34:60:52:ed:88:e0:96:d2:
4a:29:45:dc:5d:04:aa:28:2a:1b:56:1c:ef:62:ff:65:8a:07:
7b:c2:7f:69:1e:c4:7b:8d:5d:67:36:9a:b4:c9:fa:a8:24:cc:
df:e2:bc:fe:fc:53:2c:bb:9c:f8:51:48:b8:ae:9c:06:b4:09:
d3:c0:4e:7d:99:c4:1d:83:da:46:8b:28:5c:e2:81:99:b8:55:
79:8c:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:00 2025 by rpki-client