Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/9fadfa93876a5efeadf49802283b49c154cfb137.roa
File: 9fadfa93876a5efeadf49802283b49c154cfb137.roa (raw, json)
Hash identifier: 8ipI7GAwqpU7wOE1rJFd2mJ0tHmQf1HK2+jODjeYJ9Q=
Subject key identifier: FB:AF:22:65:F0:13:B7:FE:2D:5F:62:8C:77:55:64:EA:0D:45:48:65
Certificate issuer: /CN=063c6924e8891b8dd6d9889adcc8e4154f3f02c4
Certificate serial: 18A4D0
Authority key identifier: 13:EE:C7:A5:32:52:23:CB:DF:6D:3D:07:81:C3:95:16:AE:FD:BF:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/9fadfa93876a5efeadf49802283b49c154cfb137.roa
Signing time: Wed 09 Aug 2023 15:46:41 +0000
ROA not before: Tue 08 Aug 2023 15:46:41 +0000
ROA not after: Sat 09 Aug 2025 15:46:41 +0000
asID: 270049
IP address blocks: 131.161.220.0/22 maxlen: 24
2803:ade0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1615056 (0x18a4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c6924e8891b8dd6d9889adcc8e4154f3f02c4
Validity
Not Before: Aug 8 15:46:41 2023 GMT
Not After : Aug 9 15:46:41 2025 GMT
Subject: CN=9fadfa93876a5efeadf49802283b49c154cfb137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:99:b4:e2:27:cc:7b:e0:e2:d6:75:d4:14:
32:fd:0c:53:6c:ef:7d:84:84:1c:24:c4:b8:bc:3e:
05:1a:d2:0f:46:05:3d:85:c8:0f:97:0d:61:5f:0f:
6b:63:64:a3:7f:e9:af:6c:c8:7b:1a:da:6c:1b:18:
c7:ca:45:72:04:30:1b:07:7b:80:c1:a9:fd:b8:10:
02:22:e7:77:8e:98:46:59:6b:de:66:94:af:67:b7:
4e:1f:14:da:ae:40:75:eb:0c:56:e0:23:dd:90:07:
fd:f8:bf:97:72:78:d1:7f:1b:31:b1:21:6c:5f:9b:
38:24:95:2e:46:94:dc:48:86:35:0a:91:48:d6:9c:
f6:be:14:fc:54:65:e6:a7:90:6d:c9:1c:3e:dd:de:
2c:a6:77:2b:78:77:87:d6:51:ef:d4:cf:13:04:62:
3b:dd:75:b2:45:5d:5a:0c:b2:0f:f2:dd:e5:59:14:
b7:83:da:37:d5:4a:75:53:37:d4:1b:68:64:16:b7:
ed:1a:fc:8a:54:08:e8:91:bb:7f:7d:e1:32:2f:b7:
6f:a5:77:15:74:61:25:55:12:24:b4:ce:f5:01:88:
5f:2c:14:12:40:03:e1:da:cd:da:f8:14:70:fc:a7:
3d:73:f2:2d:b3:fc:37:0e:d0:4c:df:93:72:2b:a6:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AF:22:65:F0:13:B7:FE:2D:5F:62:8C:77:55:64:EA:0D:45:48:65
X509v3 Authority Key Identifier:
keyid:13:EE:C7:A5:32:52:23:CB:DF:6D:3D:07:81:C3:95:16:AE:FD:BF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/9fadfa93876a5efeadf49802283b49c154cfb137.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.220.0/22
IPv6:
2803:ade0::/32
Signature Algorithm: sha256WithRSAEncryption
03:29:d9:97:eb:46:fb:33:60:3a:0a:3e:27:fe:de:ae:71:0d:
94:4f:f8:93:83:f3:7b:ce:c0:bd:a6:fa:c9:16:63:b0:bd:6a:
21:d4:b4:d6:df:c8:82:6c:5c:0c:e5:44:a8:32:15:7b:3b:39:
4f:0d:52:82:4a:27:7a:7c:47:86:48:cd:e1:70:98:01:38:9c:
af:08:f4:79:81:65:61:35:3e:bc:4e:46:d8:0a:23:60:19:73:
fb:2e:97:c7:8f:a4:2a:0e:23:0a:1e:41:68:bb:6e:37:c1:60:
9d:fc:49:5c:98:49:9c:5d:38:0d:58:91:aa:3b:c9:03:47:c3:
f0:2a:b7:50:f8:18:66:30:81:36:85:2e:ee:d1:aa:90:70:23:
30:11:c2:bf:fd:d5:6c:77:99:02:e9:64:d2:d7:74:7c:4f:54:
a8:69:14:18:93:c9:3d:23:0c:e6:3b:0e:3c:ea:21:e0:9b:ba:
02:d2:61:c5:3d:6e:38:f3:e5:d3:4b:24:86:41:18:8b:a8:ac:
e7:9e:48:f6:76:08:d5:0d:c9:74:a5:bb:23:92:66:5f:9a:bf:
8d:4e:d6:11:02:ed:ad:bb:2b:b6:87:d9:d2:e3:c9:75:05:f2:
09:81:05:b8:1d:cd:70:dc:f0:ab:60:d8:36:8d:9d:82:60:ae:
ba:c9:bb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:18:02 2025 by rpki-client