Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3234302e302f32342d3234203d3e203238353532.roa
File: 3230312e3135392e3234302e302f32342d3234203d3e203238353532.roa (raw, json)
Hash identifier: Cb65H/gaN6VeDBtflaW8E0HYGTIDhkcNkI+HnRBB1Ac=
Subject key identifier: EC:C9:06:09:CD:6D:5A:E3:A1:9E:47:BF:03:1F:7A:FF:0D:21:31:27
Certificate issuer: /CN=BD43B3A76583426984FFC51B907F3FD29E2F3BB0
Certificate serial: 39B9DD046B9CBC3D43CD4EDB8DF8FD33FA2140B2
Authority key identifier: BD:43:B3:A7:65:83:42:69:84:FF:C5:1B:90:7F:3F:D2:9E:2F:3B:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3234302e302f32342d3234203d3e203238353532.roa
Signing time: Tue 04 Feb 2025 14:20:00 +0000
ROA not before: Tue 04 Feb 2025 14:15:00 +0000
ROA not after: Tue 03 Feb 2026 14:20:00 +0000
asID: 28552
IP address blocks: 201.159.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b9:dd:04:6b:9c:bc:3d:43:cd:4e:db:8d:f8:fd:33:fa:21:40:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD43B3A76583426984FFC51B907F3FD29E2F3BB0
Validity
Not Before: Feb 4 14:15:00 2025 GMT
Not After : Feb 3 14:20:00 2026 GMT
Subject: CN=ECC90609CD6D5AE3A19E47BF031F7AFF0D213127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:69:e5:92:87:11:88:24:b6:c8:28:88:a2:
7d:ee:7e:a9:5e:a2:71:e6:57:5d:fd:e9:e2:22:61:
53:b2:f3:73:4a:43:6d:df:f0:4f:0b:d5:6c:75:83:
23:a3:60:48:95:c4:39:24:8b:ed:61:69:67:68:59:
f8:db:73:2d:da:79:1c:bf:86:ff:e7:ba:5d:7f:5f:
5d:31:2f:bf:fb:9c:40:8e:8b:dd:c1:5b:ef:61:f4:
cc:1b:29:bc:fb:c8:b4:0e:c0:12:c1:70:b0:f3:a0:
ad:2a:0d:98:02:37:0d:d8:32:f4:76:05:bf:b7:48:
62:5b:7d:3f:b0:db:7e:ad:81:82:18:2f:15:4b:30:
5a:dd:ec:46:3c:ef:25:98:e5:dd:b7:f2:6a:b2:60:
60:b9:3d:e8:20:4c:55:43:11:ac:9c:8e:39:23:14:
db:05:9c:fd:ba:bf:59:a4:9a:a6:08:e1:1d:4d:a4:
e1:0c:94:19:13:46:a0:c9:80:9d:30:76:4a:b7:a4:
77:a6:12:f3:ca:61:9d:ab:4c:0a:21:cc:9f:3b:e1:
4e:f9:f5:01:1f:bd:77:d6:11:ec:e4:2f:38:79:cf:
33:51:65:97:35:62:83:48:a4:48:e6:b9:7f:0f:1d:
4a:a6:b3:3f:15:b2:1f:68:02:6c:75:15:2c:a2:df:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:06:09:CD:6D:5A:E3:A1:9E:47:BF:03:1F:7A:FF:0D:21:31:27
X509v3 Authority Key Identifier:
keyid:BD:43:B3:A7:65:83:42:69:84:FF:C5:1B:90:7F:3F:D2:9E:2F:3B:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD43B3A76583426984FFC51B907F3FD29E2F3BB0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3234302e302f32342d3234203d3e203238353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.240.0/24
Signature Algorithm: sha256WithRSAEncryption
92:38:3b:a6:4d:25:e9:b0:0d:a3:9a:d6:c9:16:8e:bc:e6:ce:
0b:7d:74:ef:c3:2b:30:d8:5f:50:a0:a4:1e:8f:77:c5:5f:9c:
76:13:90:41:28:38:26:32:5d:1e:d3:4c:93:10:c3:ec:0c:02:
9c:b2:cb:69:25:f3:12:e1:45:27:30:d1:dd:c2:86:3c:c5:be:
d7:a7:21:ef:96:9c:4c:f7:04:d2:dc:4a:2a:e4:44:76:38:fd:
9b:a0:75:2e:9c:1e:05:11:c2:32:c5:57:de:06:a3:f7:47:68:
18:f9:a0:92:9c:0e:de:6a:96:7a:33:99:a9:13:5f:7d:3f:9c:
64:ce:27:aa:7f:16:08:84:f3:42:59:8c:3f:cd:fc:d5:82:2b:
fc:d1:1c:c3:67:c5:a0:94:bb:17:ad:c9:21:1e:0c:4e:d9:82:
03:d4:01:66:fd:e3:a9:8d:78:32:25:19:2a:29:17:4a:e6:93:
03:89:3f:11:87:4f:e9:33:fa:03:87:e5:d1:da:44:87:87:cf:
65:57:66:6d:58:0a:db:3b:ea:dd:20:04:87:6e:bd:fd:fc:06:
5e:d2:51:e0:80:80:8e:2f:cb:14:62:92:bf:93:44:57:00:b0:
2f:3f:f8:20:0a:79:19:a1:44:80:cd:d6:9f:d1:0e:3d:ad:7e:
fc:e0:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:20 2025 by rpki-client