Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3134332e3230322e32342e302f32322d3234203d3e203237373932.roa
File: 3134332e3230322e32342e302f32322d3234203d3e203237373932.roa (raw, json)
Hash identifier: RkicQZt3HFQKsXjR9WqZwJBaILj2KxHS+v5Qc/slrcQ=
Subject key identifier: AD:C1:C6:F2:3F:02:EC:95:A8:A8:7A:A9:89:CF:E2:0D:2A:70:89:68
Certificate issuer: /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial: 6B3807A3963E1A77D326BF102543D425DA84D045
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3134332e3230322e32342e302f32322d3234203d3e203237373932.roa
Signing time: Tue 04 Feb 2025 18:19:49 +0000
ROA not before: Tue 04 Feb 2025 18:14:49 +0000
ROA not after: Tue 03 Feb 2026 18:19:49 +0000
asID: 27792
IP address blocks: 143.202.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:38:07:a3:96:3e:1a:77:d3:26:bf:10:25:43:d4:25:da:84:d0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Validity
Not Before: Feb 4 18:14:49 2025 GMT
Not After : Feb 3 18:19:49 2026 GMT
Subject: CN=ADC1C6F23F02EC95A8A87AA989CFE20D2A708968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:d6:71:a1:39:75:f6:64:8e:a4:a9:1b:8d:
4a:3a:40:48:7e:db:ea:89:0c:5c:28:7d:25:82:d2:
1f:c7:9d:8e:1a:32:99:45:fd:86:83:61:15:91:47:
c9:87:1d:18:ce:02:b4:98:e7:ed:96:91:f3:af:36:
73:31:80:45:02:dd:87:c6:87:bc:07:20:3d:8d:7f:
d9:77:10:3e:6b:da:ee:d1:21:10:73:da:09:4c:75:
7a:e8:48:14:9a:4c:d7:ce:16:4c:73:df:d9:89:84:
d4:55:8a:b6:28:d7:92:70:33:68:9d:9b:ff:95:f8:
e3:94:80:8a:24:29:49:ad:32:ba:71:15:18:89:4a:
8d:7e:1f:e0:9b:d5:4e:24:24:24:2b:b4:8e:a5:16:
f2:72:b8:73:30:8f:d8:52:82:e5:f7:e9:29:0e:ea:
42:1b:21:37:6c:bb:61:03:93:c9:65:5f:cd:04:d1:
77:16:fa:f8:76:db:f3:d5:e3:5f:2c:2f:83:cb:f4:
c3:6f:6f:c4:c7:48:cc:25:ad:ca:9b:2f:c6:10:94:
9f:3a:a8:59:f9:1f:4f:2c:4b:a3:b4:0d:b2:73:53:
03:62:53:c9:87:6b:64:cf:83:f8:4f:62:85:02:27:
78:b2:9d:87:fc:1b:18:46:16:bf:6f:ed:bc:ae:37:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C1:C6:F2:3F:02:EC:95:A8:A8:7A:A9:89:CF:E2:0D:2A:70:89:68
X509v3 Authority Key Identifier:
keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3134332e3230322e32342e302f32322d3234203d3e203237373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.24.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:d3:8e:ef:31:f0:e6:f5:b4:32:69:b6:6b:15:4d:aa:0f:a5:
64:38:45:18:97:ef:cc:6f:62:22:41:c7:67:4a:49:0b:94:a6:
25:a6:3a:65:06:e8:86:ae:89:0c:69:72:5e:9c:d0:8c:c4:17:
5c:7c:61:65:23:1c:38:81:2c:05:ba:0c:e8:d8:18:60:f3:d1:
5c:18:ad:08:31:ac:d5:2e:00:e4:6b:c5:1f:67:ef:60:cb:10:
7d:42:97:50:65:e4:9c:3a:7d:bd:0f:49:61:63:61:bf:53:ae:
24:5e:02:b6:ff:17:06:3f:44:9e:2a:b6:40:1b:e7:1e:48:b2:
69:ed:d8:c4:f3:fe:92:f3:e4:6d:96:9a:7e:7d:39:d8:03:2c:
7b:23:7d:de:7c:fd:6b:9e:75:b7:fc:c2:75:a7:d7:51:dd:62:
34:ae:40:25:af:7d:7c:59:3a:98:a9:52:e8:57:79:d3:bc:f4:
1a:42:5c:19:1c:54:25:2b:97:8e:39:40:78:49:67:1e:2b:33:
e2:36:3b:03:b4:90:ce:11:5e:aa:af:1b:a9:8c:1a:60:aa:39:
8e:ad:59:06:7b:44:aa:46:4a:b3:ae:38:de:36:35:ef:31:ac:
fc:12:df:66:4f:da:c9:c4:12:85:b3:04:4a:61:7f:0c:78:1d:
92:81:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:22 2025 by rpki-client