Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/3138312e3232342e31362e302f32322d3234203d3e20323635353836.roa
File: 3138312e3232342e31362e302f32322d3234203d3e20323635353836.roa (raw, json)
Hash identifier: gCsliXCsJRI9HKB/X45t2QNSQvcFoLb8Bahry238mFY=
Subject key identifier: A0:F6:9A:DA:11:90:B1:8A:B9:D1:56:72:4E:6D:FF:45:D9:6B:E6:DA
Certificate issuer: /CN=9C464528F67B00410467C3FEDE9E1DD404D5EA8B
Certificate serial: 5E7AEABB0F4E2FD5F6775662423B10FCBD1BA090
Authority key identifier: 9C:46:45:28:F6:7B:00:41:04:67:C3:FE:DE:9E:1D:D4:04:D5:EA:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/3138312e3232342e31362e302f32322d3234203d3e20323635353836.roa
Signing time: Tue 04 Feb 2025 18:33:58 +0000
ROA not before: Tue 04 Feb 2025 18:28:58 +0000
ROA not after: Tue 03 Feb 2026 18:33:58 +0000
asID: 265586
IP address blocks: 181.224.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7a:ea:bb:0f:4e:2f:d5:f6:77:56:62:42:3b:10:fc:bd:1b:a0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C464528F67B00410467C3FEDE9E1DD404D5EA8B
Validity
Not Before: Feb 4 18:28:58 2025 GMT
Not After : Feb 3 18:33:58 2026 GMT
Subject: CN=A0F69ADA1190B18AB9D156724E6DFF45D96BE6DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4c:b2:12:3d:94:6e:b9:75:99:de:38:13:b1:
19:35:4a:d5:6e:a2:0a:29:63:c2:87:39:fa:3f:b5:
41:c2:01:f1:95:4a:53:da:a6:aa:d7:06:1f:2e:7c:
84:05:75:67:8b:b4:a4:67:ee:1a:77:94:85:ec:c4:
f5:86:26:e1:cc:3f:40:cf:a0:4e:d7:60:e5:e3:63:
c6:76:7a:b8:da:d2:a6:28:16:c8:2f:0c:ba:a3:71:
32:c6:94:08:8a:6d:f9:76:68:57:7c:8d:50:94:40:
ba:a6:bb:06:c7:93:ec:4e:52:0f:f3:0c:d6:6e:31:
49:e8:2e:8b:4e:48:d5:bb:d5:21:03:b1:56:16:f9:
a5:e5:40:43:78:2e:d8:f4:69:b7:76:35:91:51:e3:
e7:47:d0:bc:a4:d2:95:b9:c4:5a:96:ca:98:4f:8e:
57:9e:fb:0f:8a:cd:f0:71:50:c3:52:73:92:2c:a1:
1a:d4:cc:a3:0d:48:c4:db:c5:2f:5f:da:e4:71:2c:
e7:7f:d6:59:fa:90:58:5e:9b:98:ca:e1:73:91:81:
37:2c:4a:ed:79:1d:e4:12:3f:52:3b:cc:19:75:c8:
81:b9:f0:ef:99:f7:01:00:22:8e:ec:55:1b:36:b7:
4c:c9:fa:6e:60:a4:31:16:2d:dc:fa:ef:27:b6:f5:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F6:9A:DA:11:90:B1:8A:B9:D1:56:72:4E:6D:FF:45:D9:6B:E6:DA
X509v3 Authority Key Identifier:
keyid:9C:46:45:28:F6:7B:00:41:04:67:C3:FE:DE:9E:1D:D4:04:D5:EA:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/3138312e3232342e31362e302f32322d3234203d3e20323635353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:04:d4:f9:3b:9b:1b:b4:25:af:b7:11:5d:b1:5d:d1:da:52:
e8:0a:90:52:70:04:d6:ad:07:fd:5f:9b:c2:4e:9f:82:94:b4:
81:a0:2a:54:5c:51:d2:a2:6f:29:c3:3b:9b:b1:9d:4d:49:9e:
a9:8a:08:a6:6b:be:5f:7b:b4:cf:f1:ae:13:be:ff:4e:18:99:
7e:bf:3f:f1:b0:46:f6:48:31:87:80:50:fd:91:24:0d:61:01:
59:5a:3e:3f:32:13:ab:91:90:f7:f0:96:63:6f:2b:bb:71:00:
58:b4:2b:ca:60:db:f6:0a:04:c6:8f:19:14:f3:35:19:e5:c9:
39:4a:41:50:26:ef:6f:92:a9:3c:11:7f:a2:dd:45:7c:0c:51:
94:82:30:fb:0b:ea:9e:da:2e:d0:9d:e7:8e:35:84:7d:cc:9c:
db:e8:b5:f7:e0:cc:9c:b1:dd:10:4c:4c:64:d3:4b:d3:30:8d:
57:c8:aa:78:79:9e:e2:90:f9:90:67:6c:9f:ac:0b:5c:d4:18:
5d:d1:ea:3f:54:c3:f5:5a:83:29:63:e4:eb:46:89:bf:da:0b:
94:90:77:67:75:32:0b:e6:40:4c:e7:bf:da:f1:eb:93:4e:71:
c8:10:7f:6d:cb:e2:5b:00:3f:96:dc:b8:e2:ee:a3:71:9e:fa:
df:f9:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:04 2025 by rpki-client