Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa
File: 3137302e3233332e37322e302f32322d3232203d3e203333333932.roa (raw, json)
Hash identifier: Mx6CrnqKitF0EiLMF4J0LGaqqYgkvnEaBhGgGLOa5dg=
Subject key identifier: BA:BC:7A:02:88:0E:D9:C8:E8:0C:37:1B:E3:2C:FC:A5:AE:9E:BD:5F
Certificate issuer: /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial: 2B2F032630B7A3590A238AE54ACF828299507C89
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa
Signing time: Fri 03 May 2024 14:05:00 +0000
ROA not before: Fri 03 May 2024 14:00:00 +0000
ROA not after: Fri 02 May 2025 14:05:00 +0000
asID: 33392
IP address blocks: 170.233.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:2f:03:26:30:b7:a3:59:0a:23:8a:e5:4a:cf:82:82:99:50:7c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Validity
Not Before: May 3 14:00:00 2024 GMT
Not After : May 2 14:05:00 2025 GMT
Subject: CN=BABC7A02880ED9C8E80C371BE32CFCA5AE9EBD5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:7c:95:2d:0e:37:f4:e8:e1:13:0a:32:95:
14:de:10:a4:e2:1b:60:61:f9:90:29:bf:55:7f:1e:
27:36:e1:b9:4e:c4:ca:3a:a6:87:96:53:85:fa:4d:
6e:55:72:d8:fe:45:df:2d:18:fb:1a:00:6b:22:23:
90:51:ba:87:49:26:c0:a7:05:f9:13:06:bc:04:4e:
35:39:90:3a:45:22:e1:3b:e4:87:dd:0f:da:e1:33:
d5:49:9a:a2:4f:08:1e:c5:d9:54:23:d8:c8:9d:26:
ff:1a:56:ad:c3:42:3f:98:9d:9e:ee:dc:5f:05:d2:
f6:c8:1d:7f:94:0c:4f:6c:b8:f4:fd:d8:ab:3c:0d:
8b:7b:59:f0:30:ba:b1:68:f0:7c:b0:6f:f9:8c:28:
98:95:9a:1c:da:c9:2c:4d:84:3c:82:e4:82:8d:72:
76:1c:7a:8d:6c:c0:f9:42:2c:2f:5e:8e:1a:fb:56:
b4:d8:ba:51:1b:b4:44:f9:67:23:1e:59:f3:16:94:
f4:22:1b:a9:a7:a2:e0:e2:78:e0:7d:00:d5:4a:ff:
bf:e6:0e:8f:2e:76:cb:c4:f6:28:ec:b6:5f:7d:0d:
0d:af:a0:4f:19:4b:9a:e5:b0:e2:df:6e:45:cc:61:
d0:3e:8f:ca:46:ce:c1:93:36:ea:70:96:50:d5:e2:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:7A:02:88:0E:D9:C8:E8:0C:37:1B:E3:2C:FC:A5:AE:9E:BD:5F
X509v3 Authority Key Identifier:
keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:d8:0c:5f:24:64:f9:72:c0:cd:89:da:97:5d:b0:c7:7e:ce:
92:8d:f3:52:ea:37:35:ef:e4:cc:e3:6e:7d:fa:d6:31:1f:27:
eb:e4:b7:a8:74:c0:e6:d1:30:c5:37:79:2f:5d:b3:fb:04:57:
c2:3e:91:54:43:ec:72:22:3f:e2:2d:43:3f:ad:13:1a:7a:ee:
c7:1a:ce:5c:b7:24:50:1e:4a:da:4e:f9:87:f7:ff:4a:fb:2b:
4e:ba:40:30:a1:8d:f0:2f:3c:88:3a:3b:7e:2c:aa:47:ce:4b:
09:f4:4a:05:62:19:46:d9:cb:4b:04:e2:d5:e5:f1:15:0c:73:
09:be:a8:aa:2c:2f:82:18:23:d6:36:47:66:f4:a1:e4:f6:5f:
c0:34:2e:95:02:27:50:65:fd:53:05:a0:e7:b9:b9:e5:f4:89:
b1:23:ea:01:27:2d:13:49:7c:5b:60:59:da:22:c6:29:2a:c4:
d6:8d:2d:90:5b:48:36:6e:81:db:20:04:ed:b7:15:e8:4a:e7:
f9:1a:66:05:44:bf:3f:f0:d5:d6:ab:62:d6:ec:66:e6:35:fe:
1f:8e:a2:5d:68:7d:12:ad:b3:99:86:0d:ac:fb:81:5b:3e:ed:
50:ce:6a:ff:f1:58:bc:e4:ea:e3:64:f7:b2:15:4e:5d:80:a6:
ec:98:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:32:03 2025 by rpki-client