Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/3137302e38322e34302e302f32332d3233203d3e20323634383335.roa
File: 3137302e38322e34302e302f32332d3233203d3e20323634383335.roa (raw, json)
Hash identifier: v6H3zyzhWWRPj0vdY+YqAWWlysiq/3DJkITvEk1nxso=
Subject key identifier: 52:E2:88:07:A8:65:86:BD:38:0C:07:0D:18:32:70:7E:A0:99:39:68
Certificate issuer: /CN=10CD3A4AEF186D6769F0B98233D18F40FE564CB3
Certificate serial: 426227301BD61766911644F3DFDBEE4EF8F11B5B
Authority key identifier: 10:CD:3A:4A:EF:18:6D:67:69:F0:B9:82:33:D1:8F:40:FE:56:4C:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/3137302e38322e34302e302f32332d3233203d3e20323634383335.roa
Signing time: Tue 04 Feb 2025 20:04:18 +0000
ROA not before: Tue 04 Feb 2025 19:59:18 +0000
ROA not after: Tue 03 Feb 2026 20:04:18 +0000
asID: 264835
IP address blocks: 170.82.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:62:27:30:1b:d6:17:66:91:16:44:f3:df:db:ee:4e:f8:f1:1b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10CD3A4AEF186D6769F0B98233D18F40FE564CB3
Validity
Not Before: Feb 4 19:59:18 2025 GMT
Not After : Feb 3 20:04:18 2026 GMT
Subject: CN=52E28807A86586BD380C070D1832707EA0993968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:20:29:85:6a:6f:8f:fb:67:21:09:c6:d8:
11:99:12:ec:74:6e:38:dc:31:ef:da:1b:37:de:66:
10:2d:3a:6a:7a:25:66:f5:cb:35:bb:34:28:4b:22:
25:f2:5d:81:c9:df:77:94:0e:67:cd:53:4b:cb:e9:
6e:90:29:b9:c1:c6:e5:69:d8:c6:4c:8f:15:f1:30:
ac:f4:4f:f5:58:4d:c3:23:54:27:13:57:55:88:c7:
05:a9:e1:7d:b5:cf:ad:50:f7:dc:fb:c1:3b:a5:51:
80:5d:1e:4d:99:1d:51:60:c6:3c:db:6f:22:fb:81:
14:34:b6:a1:c2:bb:dc:bd:d9:d3:dc:5c:66:46:20:
86:7e:46:00:5c:07:46:00:8d:90:5c:b0:f1:7c:6c:
f5:34:e7:74:be:1c:59:15:77:1f:78:1c:f4:58:dd:
e6:14:66:74:3f:89:a4:17:28:13:2d:5a:5a:4f:aa:
14:26:cd:d6:8b:f0:c3:b0:93:84:a4:f5:69:9d:bc:
8e:f7:a4:bb:3d:b2:90:82:76:00:19:19:3f:2f:16:
fc:8f:89:db:58:a8:4d:e4:4e:f9:c6:90:b0:39:af:
84:f1:c1:53:88:cd:81:a1:6a:77:83:bf:23:5d:02:
b0:d0:30:57:00:b0:94:f8:17:e0:8d:4b:7b:01:35:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E2:88:07:A8:65:86:BD:38:0C:07:0D:18:32:70:7E:A0:99:39:68
X509v3 Authority Key Identifier:
keyid:10:CD:3A:4A:EF:18:6D:67:69:F0:B9:82:33:D1:8F:40:FE:56:4C:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/3137302e38322e34302e302f32332d3233203d3e20323634383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.40.0/23
Signature Algorithm: sha256WithRSAEncryption
70:3f:40:54:32:57:77:49:11:a3:69:0e:96:30:bf:86:07:3f:
25:ac:d4:70:6b:fa:6c:83:d5:56:3c:12:dc:1b:e3:89:02:89:
eb:2a:20:ca:78:f5:ff:0a:f1:b9:a5:28:c4:9e:fb:92:4f:da:
9e:83:20:f4:25:a3:8f:04:6b:71:44:41:61:81:bb:49:92:df:
f3:d6:3f:c7:55:69:b8:d3:77:15:90:6f:b0:81:b3:ca:1f:60:
b1:69:9a:11:ca:c3:75:04:38:c0:9d:1c:70:31:89:2b:1d:66:
0b:7b:67:df:de:e5:73:d2:7c:4f:85:a4:74:61:b7:d4:68:35:
ed:ee:96:be:a3:11:55:98:f0:ab:d9:60:5d:48:bd:48:46:f3:
16:f8:c8:c0:8c:eb:89:b0:a2:9a:eb:d4:d5:74:15:42:f3:f9:
73:7a:7c:77:ea:20:6a:b6:22:da:53:fd:b3:9b:6b:49:12:6a:
f9:4f:7b:c2:b3:19:23:0f:c6:ee:86:2a:aa:f7:89:cc:0a:c0:
76:8e:75:ed:d9:04:e7:fa:24:c5:51:94:ed:60:10:82:20:9d:
bf:15:08:f4:b3:67:87:13:1c:0f:0a:5b:c8:29:57:af:5f:63:
ca:8c:86:27:6c:1a:08:fe:c6:c3:86:3f:28:0c:44:55:a6:3c:
36:59:88:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:23 2025 by rpki-client