Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/5b32997d6dd959e369b521531175f287b4bf22b3.roa
File: 5b32997d6dd959e369b521531175f287b4bf22b3.roa (raw, json)
Hash identifier: YJ05tGgQfVZFLUVEETAdcXZV6PVsi+7H8paqOkwgqRo=
Subject key identifier: 59:BF:62:6C:60:6F:2B:2F:FA:6E:0D:F0:1D:F3:19:99:B2:42:98:7E
Certificate issuer: /CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Certificate serial: 0EE056
Authority key identifier: 88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/5b32997d6dd959e369b521531175f287b4bf22b3.roa
Signing time: Mon 03 Jul 2023 16:03:53 +0000
ROA not before: Sun 02 Jul 2023 16:03:53 +0000
ROA not after: Thu 03 Jul 2025 16:03:53 +0000
asID: 263824
IP address blocks: 131.255.41.0/24 maxlen: 24
131.255.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 974934 (0xee056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Validity
Not Before: Jul 2 16:03:53 2023 GMT
Not After : Jul 3 16:03:53 2025 GMT
Subject: CN=5b32997d6dd959e369b521531175f287b4bf22b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0b:1a:2c:6e:0d:02:eb:86:02:f3:b1:dc:42:
f8:81:3b:1e:9b:09:76:37:47:ee:63:73:5c:60:b0:
e2:68:82:f6:dd:24:60:c3:0b:04:0b:9e:54:90:16:
22:50:b8:a3:1c:de:11:df:d4:21:1e:23:2b:4f:70:
a1:6d:94:b5:d0:ce:33:75:0a:b6:71:2e:26:98:e4:
d7:1f:02:9b:77:12:5c:b1:6b:e8:9a:ba:88:58:05:
4d:ac:10:93:00:d2:50:46:e1:76:79:b2:3c:dd:22:
01:61:96:bb:46:0d:a0:8a:a9:65:33:9a:4d:00:2f:
ce:2d:de:db:6f:1d:84:d0:49:28:cd:f7:60:f4:7c:
4f:77:44:fc:d9:e0:84:0f:93:ce:e1:30:5d:51:d9:
ea:d5:0a:89:94:b2:39:7b:cb:d9:79:27:30:08:d7:
7d:23:d3:cb:fe:57:3b:9c:a3:23:f2:d2:63:0a:b3:
24:50:35:0d:d2:09:c2:2d:e6:f5:d1:6a:4d:1b:b9:
e3:be:f1:fa:84:30:3e:6f:6f:1a:a8:f1:03:fc:a4:
44:20:97:1e:00:c4:b5:57:fe:b8:5d:ce:ff:e2:1b:
5e:05:da:b2:d7:05:8c:7e:a7:c1:81:a5:ea:dc:83:
db:be:57:77:e1:d8:c1:c2:fa:74:bd:d4:d3:5f:1a:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BF:62:6C:60:6F:2B:2F:FA:6E:0D:F0:1D:F3:19:99:B2:42:98:7E
X509v3 Authority Key Identifier:
keyid:88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/5b32997d6dd959e369b521531175f287b4bf22b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.41.0-131.255.43.255
Signature Algorithm: sha256WithRSAEncryption
19:cd:c5:b8:7a:dd:bd:ac:e8:9d:14:5d:72:1c:70:0c:7e:8c:
46:71:96:c9:a3:ed:31:d0:c7:35:2f:db:24:23:55:9f:55:10:
2d:4e:21:55:8a:6c:b5:9b:0a:46:6c:30:36:fa:47:91:83:e6:
89:aa:4b:31:d3:ff:7b:4e:04:ef:64:51:c1:25:89:e0:f7:f5:
ed:3b:13:b8:75:c3:ab:ec:36:c1:d2:5b:34:7b:b9:99:03:5f:
7d:96:12:d4:08:1f:d5:26:13:62:7a:7e:37:2f:7e:7b:8d:20:
29:83:a9:56:1d:cd:80:26:34:61:f8:12:4e:47:b5:ae:e4:ca:
4c:7a:6f:a0:bf:3b:bf:ae:59:82:03:c6:28:01:22:ac:c5:ef:
a2:dd:4c:51:a9:38:d6:d0:3c:ed:bc:7c:64:b7:4a:af:04:19:
02:eb:0c:f6:e8:8f:ad:f0:26:d2:2d:d4:54:89:c3:4f:97:63:
fe:f5:e5:21:f7:fb:be:fe:6e:bf:27:ba:ae:a3:47:b9:37:e8:
a0:a8:82:c3:24:77:06:41:46:16:dd:9a:4c:be:94:8b:92:e0:
ab:23:a7:98:d0:57:e2:11:8c:af:53:75:3b:c3:69:a8:6c:c3:
cf:43:16:ac:e6:d0:89:b3:1a:b1:27:3b:9d:45:ce:04:2b:a8:
fa:70:3d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 00:49:07 2025 by rpki-client