Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134342e302f32322d3234203d3e203232333638.roa
File: 3230312e3232312e3134342e302f32322d3234203d3e203232333638.roa (raw, json)
Hash identifier: NsfnXrhV8L+cJlAYBrgL2BUAK06WZYKMtl2GgXPibXc=
Subject key identifier: 02:9A:C6:48:A1:82:72:7C:48:FE:21:AA:BD:09:A7:D6:7D:B1:F4:31
Certificate issuer: /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial: 08751E4D50D28827C51B7F880D6821A72C1CC32E
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134342e302f32322d3234203d3e203232333638.roa
Signing time: Tue 04 Feb 2025 18:22:13 +0000
ROA not before: Tue 04 Feb 2025 18:17:13 +0000
ROA not after: Tue 03 Feb 2026 18:22:13 +0000
asID: 22368
IP address blocks: 201.221.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:75:1e:4d:50:d2:88:27:c5:1b:7f:88:0d:68:21:a7:2c:1c:c3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Validity
Not Before: Feb 4 18:17:13 2025 GMT
Not After : Feb 3 18:22:13 2026 GMT
Subject: CN=029AC648A182727C48FE21AABD09A7D67DB1F431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:fa:1f:14:8f:51:09:3a:d1:bb:c2:fc:68:
ac:dc:37:6d:70:9f:f9:87:10:05:2e:e2:87:89:46:
36:fb:c5:f8:c4:e7:2c:0d:e3:62:70:2f:6e:85:bb:
5e:cd:10:0b:0f:62:98:85:b5:16:f6:c1:77:ef:34:
d3:6f:6b:aa:6f:e2:6d:97:90:e3:a2:45:fa:d9:22:
7c:9f:fb:54:17:16:1c:8f:c5:4a:21:e0:06:69:bf:
25:ad:0c:5e:ac:92:4d:1f:bc:4d:5c:d2:e6:d3:99:
ec:00:e7:9e:ee:b8:a8:d6:ab:14:26:b0:25:a1:8d:
8c:8a:1c:0f:4b:11:9a:da:7d:2e:ae:0c:4f:74:41:
d1:41:b1:2c:3a:68:66:9e:ae:5e:03:07:f9:4b:5a:
cc:2c:50:18:59:cd:17:16:2c:93:ae:3d:a1:48:32:
3b:7c:8a:57:62:7d:dd:7f:75:46:a1:09:43:3b:4b:
a0:c9:02:80:8e:f8:42:6f:3f:e0:52:f1:d6:aa:8c:
3b:e8:e9:62:b3:79:c5:6e:d0:23:62:37:2e:b0:14:
54:e5:19:fd:b2:e0:fc:9b:5c:8e:36:af:65:98:0e:
8c:00:ef:5a:54:26:c2:89:f5:87:0a:91:b5:f8:77:
c7:d7:fa:6d:17:92:8a:96:04:3c:96:7a:97:4a:4c:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9A:C6:48:A1:82:72:7C:48:FE:21:AA:BD:09:A7:D6:7D:B1:F4:31
X509v3 Authority Key Identifier:
keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134342e302f32322d3234203d3e203232333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:c9:d9:14:4c:6a:08:45:87:0a:7c:fe:be:70:32:39:d4:8a:
a3:e6:48:20:73:1f:23:3a:6d:ac:9f:ad:54:b8:b1:ea:c2:dc:
9d:99:f8:2e:9d:93:10:89:9d:ca:eb:ae:f4:6f:2f:3c:9d:f0:
6d:0b:bf:f1:f3:60:93:8f:60:12:fe:aa:d9:a7:3f:22:8e:e5:
3f:67:a0:04:04:21:8d:c4:c8:d2:58:92:cb:92:48:e4:df:4f:
94:cb:0e:69:45:12:4f:53:05:1a:1a:11:b2:61:3a:a2:d1:2b:
15:bf:f5:fb:90:2f:d0:b1:cf:21:1d:dc:12:9b:98:c5:4d:e3:
05:fa:4f:26:4a:23:c8:08:4a:83:d0:70:af:11:23:cc:c6:66:
7e:09:a6:c3:80:74:c4:7f:89:b2:5c:47:8b:30:57:1e:78:9a:
70:7f:1f:c6:83:db:bb:18:ce:dc:3b:70:e0:d5:8e:1f:37:b6:
d0:ad:96:af:c9:2a:65:8e:c6:c9:6e:4f:c7:11:d9:cf:15:cb:
34:fa:6c:5e:bf:d6:e3:54:e5:f7:e5:f5:85:18:ed:de:9e:47:
b7:fc:d6:cc:65:53:47:1f:6f:42:46:0d:23:d7:f4:dc:d9:86:
5b:fb:11:8f:6d:96:79:49:8c:95:d1:c4:91:37:7e:7a:d1:f3:
84:60:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:09 2025 by rpki-client