Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32322d3234203d3e20323634373031.roa
File: 3136382e3233322e3234382e302f32322d3234203d3e20323634373031.roa (raw, json)
Hash identifier: sckT/cWtg7GnonUshx1cAcy6wbQenewCd7CKz7EGKYM=
Subject key identifier: 1B:00:3C:F1:30:FE:F9:55:08:9B:09:51:EF:88:2F:F0:42:93:1C:5D
Certificate issuer: /CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Certificate serial: 0B45260D6F8AE8EAAA479C2A2186BE7D0BA38C53
Authority key identifier: 15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32322d3234203d3e20323634373031.roa
Signing time: Tue 04 Feb 2025 18:27:41 +0000
ROA not before: Tue 04 Feb 2025 18:22:41 +0000
ROA not after: Tue 03 Feb 2026 18:27:41 +0000
asID: 264701
IP address blocks: 168.232.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:45:26:0d:6f:8a:e8:ea:aa:47:9c:2a:21:86:be:7d:0b:a3:8c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Validity
Not Before: Feb 4 18:22:41 2025 GMT
Not After : Feb 3 18:27:41 2026 GMT
Subject: CN=1B003CF130FEF955089B0951EF882FF042931C5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:12:1c:e3:0e:61:2e:a8:e3:fd:5c:0b:28:
11:c8:85:ca:00:43:8f:7f:7a:e8:d0:dc:3c:74:67:
03:24:f4:7e:1c:78:5b:20:7b:c2:99:89:55:12:02:
e8:90:48:48:d3:8f:c8:f4:ff:6c:03:3a:e1:6d:6c:
7d:7f:4b:9c:b9:9d:c3:29:ea:22:6f:51:77:ac:56:
b0:0d:ab:10:2a:db:81:24:07:16:df:08:9e:07:dd:
02:79:c9:61:57:0e:07:dd:9b:54:07:51:60:51:da:
23:13:af:d5:7c:d0:40:4c:b4:45:ab:86:79:d6:64:
b2:98:15:23:c8:c6:fd:7f:c4:fe:81:80:6e:1a:e0:
aa:06:1a:9c:fc:ad:7b:92:9e:77:7a:90:44:06:5e:
7f:12:85:7b:43:f0:25:85:e0:61:c4:23:40:e5:09:
f7:e8:b3:ac:34:2e:ef:ad:21:26:ed:f5:45:43:a5:
86:7c:cb:6b:f8:e7:9b:15:9d:e1:d6:4f:a4:67:13:
7d:8f:e1:6a:b8:79:3d:b4:25:4b:97:88:6f:b6:c0:
e8:5d:dc:87:02:35:67:0e:18:10:df:5b:57:2b:54:
05:22:70:9c:83:c6:f0:a2:e2:74:b6:72:5e:d9:b6:
1c:30:1e:ce:f6:9d:22:a3:69:38:ab:0c:85:8e:de:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:00:3C:F1:30:FE:F9:55:08:9B:09:51:EF:88:2F:F0:42:93:1C:5D
X509v3 Authority Key Identifier:
keyid:15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32322d3234203d3e20323634373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.248.0/22
Signature Algorithm: sha256WithRSAEncryption
58:35:a1:ea:93:0e:e6:da:48:d7:59:a4:61:aa:09:88:74:47:
c1:d0:3e:b8:b6:a0:c1:f4:04:c3:3d:73:e3:68:86:28:9d:12:
f9:08:13:d9:f9:1c:99:a3:6b:6e:75:8f:ea:9b:8f:0f:ef:43:
ad:d4:c9:7f:ef:85:67:ec:2e:db:fe:10:8a:1b:f1:66:8f:43:
3c:5a:e6:2f:b4:6a:12:a0:45:9e:d4:a9:c3:bd:ec:23:17:74:
3a:74:15:ab:d1:ab:d4:3b:9a:1c:e1:0f:eb:71:b0:52:fa:a6:
6a:56:6c:fd:7b:80:3f:5f:39:0d:d3:de:d5:13:b4:ab:ea:a8:
b7:04:41:99:c3:f6:db:b3:ea:6e:3b:c9:cd:af:66:ef:b6:18:
d4:8c:48:b0:f8:ad:cd:6a:89:e5:af:97:b5:c2:34:5e:13:2c:
0a:80:3c:d3:4b:ad:fa:13:dd:f8:d5:cb:3a:1e:99:dc:12:d2:
97:19:a8:7c:42:8c:fe:d4:51:ca:48:c1:7b:ae:3e:4c:3e:46:
41:95:cb:9b:9a:cd:a2:b0:ae:e3:41:c0:8d:c4:3d:8d:87:74:
2a:8d:1e:00:15:1b:54:70:6b:f9:14:df:c8:89:1e:fc:b4:fa:
bc:a6:e4:ce:12:77:f8:ac:60:4c:b4:13:8d:8f:7f:5a:69:97:
6f:75:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:06:28 2025 by rpki-client