Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/9d6224ed3f5941243f10b9302547e5f6484e103e.roa
File: 9d6224ed3f5941243f10b9302547e5f6484e103e.roa (raw, json)
Hash identifier: YXFo2y37Tuxg44MNqb86WAWDnAeU83TlxJPgRPSmbX4=
Subject key identifier: EA:24:9B:3D:28:6E:A9:76:9A:39:ED:B7:19:38:69:08:A9:E2:22:AB
Certificate issuer: /CN=6c6abe556edb1aa4b4b3686da974eefb141a89fd
Certificate serial: 14B414
Authority key identifier: C7:8B:89:89:72:E0:D4:52:FD:0E:C8:EE:96:16:95:E4:DE:BD:B4:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6abe556edb1aa4b4b3686da974eefb141a89fd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/9d6224ed3f5941243f10b9302547e5f6484e103e.roa
Signing time: Wed 04 Oct 2023 00:12:59 +0000
ROA not before: Tue 03 Oct 2023 00:12:59 +0000
ROA not after: Sat 04 Oct 2025 01:12:59 +0000
asID: 264619
IP address blocks: 181.191.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356820 (0x14b414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6abe556edb1aa4b4b3686da974eefb141a89fd
Validity
Not Before: Oct 3 00:12:59 2023 GMT
Not After : Oct 4 01:12:59 2025 GMT
Subject: CN=9d6224ed3f5941243f10b9302547e5f6484e103e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:3e:80:26:54:8f:e8:14:22:6d:f5:7c:09:
47:15:e1:7a:1f:36:b4:e3:9d:10:07:fc:c7:cc:d7:
4a:ac:3c:fc:97:b6:06:b3:91:f6:5d:24:33:f5:d1:
b8:cc:43:b5:7c:b7:cd:3c:79:42:90:8a:6d:82:7f:
eb:4f:96:a9:d4:21:9f:20:60:f1:a5:13:82:1e:45:
b6:d8:dd:b6:3a:5b:95:6b:4b:43:60:f2:ad:9f:f9:
26:db:39:cc:14:81:5d:ee:2d:e3:66:fd:26:42:84:
57:06:2f:1e:ed:25:2e:ac:ef:98:b3:3f:df:8d:6b:
87:e0:a4:32:21:bc:86:3e:04:93:4d:f2:1c:a7:28:
13:f8:b9:78:e0:bf:b5:88:cd:45:f9:89:3e:97:ab:
26:4b:09:9a:6b:55:06:9c:98:6e:91:a9:b2:5e:f6:
0f:49:a5:82:5e:a9:c9:99:78:24:9b:ed:c3:60:2e:
89:1a:c0:79:00:5e:06:d8:67:d8:27:48:79:e9:4e:
ac:ea:1d:7d:2f:74:cb:54:f1:a8:68:1b:e6:5d:fb:
67:68:83:f5:36:a9:18:42:c3:b7:0c:45:b2:fb:f8:
5b:0c:cc:d8:18:c1:03:00:67:20:55:3b:ee:50:5b:
d6:75:3d:d1:93:d9:01:cf:14:00:5f:ae:7c:9c:09:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:24:9B:3D:28:6E:A9:76:9A:39:ED:B7:19:38:69:08:A9:E2:22:AB
X509v3 Authority Key Identifier:
keyid:C7:8B:89:89:72:E0:D4:52:FD:0E:C8:EE:96:16:95:E4:DE:BD:B4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6abe556edb1aa4b4b3686da974eefb141a89fd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/9d6224ed3f5941243f10b9302547e5f6484e103e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/6c6abe556edb1aa4b4b3686da974eefb141a89fd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:52:72:e6:a4:26:39:08:a3:23:cc:41:e8:80:e4:72:b6:9b:
11:77:42:66:18:98:23:15:44:ea:30:c0:f6:df:cb:84:43:e2:
4e:13:67:4e:30:fc:a4:97:bc:42:4e:e4:25:87:79:e3:4b:6b:
93:b6:80:fc:fb:16:0e:a4:a1:3d:72:f7:68:ef:b3:0f:92:08:
4d:f5:59:12:22:61:70:da:0a:ae:8c:83:c4:04:3e:7b:33:f0:
b2:f4:3f:16:57:c5:20:66:f0:ab:33:42:39:86:da:66:ed:d5:
37:fe:78:c1:c3:77:94:7c:0c:1f:53:29:5a:2c:bf:11:cf:39:
9a:6c:85:5a:9c:50:a1:48:5a:c8:b1:01:98:de:6b:4a:66:82:
8b:66:36:bf:a8:23:51:56:21:87:84:57:97:38:a9:1e:b0:15:
59:32:34:f1:cc:e9:2d:91:5a:41:5f:50:5a:23:1f:1c:53:65:
d2:03:71:e6:4b:08:9c:1a:70:65:4c:bb:d6:b1:cf:b9:e3:2c:
da:73:dc:5c:d3:27:6b:a6:d2:79:e5:41:e4:19:26:a2:0b:5b:
b2:8b:7b:50:d9:df:b2:1a:b4:db:5d:98:13:7d:be:58:16:e5:
61:5b:9f:e0:e1:38:b5:67:1f:e7:e5:b4:a8:6c:e4:bb:04:2b:
e6:f7:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:58:31 2025 by rpki-client