Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3137302e3235342e322e302f32332d3234203d3e20323639393830.roa
File: 3137302e3235342e322e302f32332d3234203d3e20323639393830.roa (raw, json)
Hash identifier: kNpWjUMzWHHoMIq3xj+tn3M6JNSy+Ow0Q8HuiD6TT9A=
Subject key identifier: BC:63:AE:A7:D5:23:96:7E:BD:4E:96:3A:C0:12:49:5B:EA:72:7C:2A
Certificate issuer: /CN=2FD825A27B2B347F806C2CACDF49209D17BBF654
Certificate serial: 0FBAFF4F130390A7A0937BDAAF06A79193E0DA05
Authority key identifier: 2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3137302e3235342e322e302f32332d3234203d3e20323639393830.roa
Signing time: Thu 29 May 2025 20:55:00 +0000
ROA not before: Thu 29 May 2025 20:50:00 +0000
ROA not after: Thu 28 May 2026 20:55:00 +0000
asID: 269980
IP address blocks: 170.254.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ba:ff:4f:13:03:90:a7:a0:93:7b:da:af:06:a7:91:93:e0:da:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FD825A27B2B347F806C2CACDF49209D17BBF654
Validity
Not Before: May 29 20:50:00 2025 GMT
Not After : May 28 20:55:00 2026 GMT
Subject: CN=BC63AEA7D523967EBD4E963AC012495BEA727C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:fc:ea:aa:ba:82:5e:89:b7:7f:6f:98:aa:
eb:40:99:ec:84:d1:da:d5:f6:45:c6:2b:c2:6f:df:
6f:60:31:4e:58:8d:7f:c1:df:07:3f:a3:c8:f8:56:
97:12:f4:cb:f1:72:bb:ff:88:84:54:12:53:fe:99:
54:0f:c1:c9:bd:da:12:37:9a:0b:41:c1:6a:b6:a9:
af:ad:6f:34:04:80:af:6e:67:8f:8e:ab:fb:89:09:
ae:69:18:3a:93:49:f4:b9:2e:d8:fb:67:19:ec:ee:
18:3e:fa:52:70:90:73:21:86:ad:ef:fb:f3:6c:a7:
46:e3:5e:42:f4:a8:87:7d:8b:b0:41:a5:a0:50:e9:
5a:99:2b:35:93:95:5c:bc:4d:18:b6:28:43:f2:c5:
c5:32:56:e0:a4:a1:1f:18:47:1f:ab:de:2f:51:7d:
db:d0:62:cb:1a:15:cd:ec:f7:59:9e:45:c9:f9:a7:
bf:90:ae:85:28:f4:ee:f2:02:3a:8f:44:07:c1:aa:
b2:03:dd:7a:8a:a4:31:5d:c9:17:f3:34:cd:17:41:
30:85:d3:86:9e:e2:97:f8:e8:ab:b5:c8:bd:72:4e:
e0:8c:01:1b:5e:21:b3:a8:fe:39:a2:03:83:9d:c0:
86:3c:1e:13:bb:fb:7d:bc:9c:18:fb:c9:18:fe:0a:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:AE:A7:D5:23:96:7E:BD:4E:96:3A:C0:12:49:5B:EA:72:7C:2A
X509v3 Authority Key Identifier:
keyid:2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3137302e3235342e322e302f32332d3234203d3e20323639393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.2.0/23
Signature Algorithm: sha256WithRSAEncryption
59:56:44:d1:cf:db:f4:16:d2:16:dc:7b:b8:d5:a8:3d:02:71:
75:bd:48:1e:c5:1a:42:86:99:5e:db:50:23:97:65:4f:2b:bd:
17:93:73:22:3d:91:ad:01:bc:69:f9:0f:43:99:5b:38:44:b5:
2a:a2:03:57:d4:28:54:d1:2e:32:06:08:bf:2a:ed:8b:41:a0:
83:a6:5c:95:54:5d:bb:7b:93:0f:f1:a8:63:06:8e:66:d2:87:
f0:9d:db:36:6b:f9:0c:37:fd:a8:bb:37:68:52:d6:f5:fa:87:
73:ef:87:ad:86:42:aa:e7:bc:3a:ac:93:26:97:67:0e:a8:0f:
a5:69:38:d7:33:d8:57:3c:b0:2a:52:50:8c:ed:5b:5d:6b:06:
62:4d:41:85:cf:62:67:d8:e4:9f:49:41:b4:36:a5:24:86:ab:
22:18:2a:8a:1e:d3:b1:88:ed:f7:11:1f:eb:13:00:bc:2c:c0:
d3:e7:ce:87:a5:d7:71:3d:4b:c0:44:3a:3b:3a:b6:90:b0:d4:
09:db:46:37:4f:51:d1:ef:c4:54:06:96:72:56:1e:ca:02:98:
8a:e0:43:55:b4:b6:81:b3:3a:16:7f:5f:dc:c3:f2:6b:27:21:
c8:39:b1:d3:25:17:4e:2a:00:f3:e9:c6:58:41:e2:5e:e7:b0:
53:e9:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:19:38 2025 by rpki-client