Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3137302e3234372e3136302e302f32322d3234203d3e203237383339.roa
File: 3137302e3234372e3136302e302f32322d3234203d3e203237383339.roa (raw, json)
Hash identifier: Odf4EgnNUks38t5K7+otqGAMrcfEN29Vqq2hNZXXeUk=
Subject key identifier: F2:8F:36:8E:A6:29:70:8F:F1:68:82:13:D1:5B:94:BB:E2:02:01:3B
Certificate issuer: /CN=52A0CD9886DF104498561B789483DB0D9F8E804F
Certificate serial: 3B64409EBE2B9E92E8B139E53D05913A02C4FA4A
Authority key identifier: 52:A0:CD:98:86:DF:10:44:98:56:1B:78:94:83:DB:0D:9F:8E:80:4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52A0CD9886DF104498561B789483DB0D9F8E804F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3137302e3234372e3136302e302f32322d3234203d3e203237383339.roa
Signing time: Tue 04 Feb 2025 19:57:12 +0000
ROA not before: Tue 04 Feb 2025 19:52:12 +0000
ROA not after: Tue 03 Feb 2026 19:57:12 +0000
asID: 27839
IP address blocks: 170.247.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:64:40:9e:be:2b:9e:92:e8:b1:39:e5:3d:05:91:3a:02:c4:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A0CD9886DF104498561B789483DB0D9F8E804F
Validity
Not Before: Feb 4 19:52:12 2025 GMT
Not After : Feb 3 19:57:12 2026 GMT
Subject: CN=F28F368EA629708FF1688213D15B94BBE202013B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:11:39:1c:9f:aa:5c:2d:b7:8d:b2:94:fb:
9f:7d:d8:ff:3d:28:c7:99:98:91:f1:82:df:55:ef:
cd:8b:3a:da:a8:15:86:c4:ca:3e:13:77:6d:b3:fa:
e6:4b:3c:68:31:05:a2:07:bf:4a:4d:84:7c:a9:01:
76:d2:99:e9:48:6e:9f:f6:08:aa:f4:80:57:5c:08:
b5:2c:bf:98:20:3d:dc:96:0c:61:68:a9:12:87:3a:
d1:57:38:ad:01:2e:82:9e:40:b8:49:cf:f3:d1:7d:
ec:2e:32:18:fc:61:f2:21:bd:b8:f6:af:5b:2a:59:
33:4e:0e:54:8f:2c:04:fa:90:54:82:f4:8c:0b:96:
d1:01:4d:12:d1:80:44:23:be:96:38:b0:73:2b:ea:
ee:91:5d:9b:f3:96:5e:0b:28:3c:c6:b3:70:85:bd:
37:01:3b:4b:24:90:6e:e7:9b:db:fa:57:13:ca:8f:
3f:ea:0a:8b:0d:8f:80:99:60:5b:fc:03:c1:f1:9c:
c0:6b:9c:8c:2d:8b:c2:57:19:24:57:cb:11:f6:2e:
57:72:63:f1:08:0f:0a:37:9a:4e:6a:4d:e1:60:96:
7a:e6:1f:93:16:65:9e:04:73:86:5a:85:9b:d4:a8:
7b:09:08:5a:80:ec:1c:d3:08:17:30:24:fc:aa:83:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8F:36:8E:A6:29:70:8F:F1:68:82:13:D1:5B:94:BB:E2:02:01:3B
X509v3 Authority Key Identifier:
keyid:52:A0:CD:98:86:DF:10:44:98:56:1B:78:94:83:DB:0D:9F:8E:80:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/52A0CD9886DF104498561B789483DB0D9F8E804F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52A0CD9886DF104498561B789483DB0D9F8E804F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3137302e3234372e3136302e302f32322d3234203d3e203237383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.160.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:4e:2a:af:94:8e:1c:e8:a7:a2:b5:7f:60:df:3b:90:85:75:
25:77:ed:3d:b1:ba:f0:81:35:c0:67:8f:67:8d:05:69:a6:0a:
40:44:f4:8d:42:5d:8c:32:68:44:29:3e:eb:6f:57:e2:3a:36:
01:27:9f:bc:1a:40:b2:53:5f:7f:89:07:9a:37:3d:f1:1f:90:
d2:2b:40:f5:7d:a3:47:a1:b7:13:06:93:fa:53:54:51:2b:1f:
a1:55:f3:30:38:22:b0:22:33:dc:12:d0:fd:53:cd:9c:bd:fb:
a6:3b:e0:c6:c2:68:aa:45:1a:a2:21:36:9a:3a:3a:36:57:ff:
65:37:88:0c:3c:e8:c4:ab:ab:c0:d1:7e:cc:bf:a1:f4:0c:97:
68:c4:05:cb:95:e3:47:cf:9d:49:2a:93:ef:30:ea:d7:b4:9b:
f7:5f:ae:47:55:91:48:70:ce:1e:d9:07:a7:13:4c:bd:b6:cf:
66:f2:98:44:3f:a6:26:27:52:b5:18:62:eb:e6:2f:80:19:83:
4b:23:53:0c:07:4c:94:87:94:67:c8:dc:88:f7:2e:b9:c5:ec:
eb:37:1c:84:85:97:9d:25:86:8c:3a:e9:a1:df:82:17:76:2a:
6f:3c:9a:d9:61:46:94:da:c1:71:a1:fc:d2:88:40:c8:ac:d7:
96:e9:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:07 2025 by rpki-client