Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e38302e302f32302d3234203d3e203532333431.roa
File: 3138362e3138392e38302e302f32302d3234203d3e203532333431.roa (raw, json)
Hash identifier: rXsrwxd2ecbfveLIjfTk6V21bNHTpAxzF0sgr3c6cy8=
Subject key identifier: B9:68:B3:3F:52:75:76:84:CE:3C:63:CE:77:56:D1:E9:6D:DF:64:68
Certificate issuer: /CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
Certificate serial: 7A2B290035AF406F86EA39BA09989FD6A56AD18E
Authority key identifier: AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e38302e302f32302d3234203d3e203532333431.roa
Signing time: Tue 04 Feb 2025 18:43:28 +0000
ROA not before: Tue 04 Feb 2025 18:38:28 +0000
ROA not after: Tue 03 Feb 2026 18:43:28 +0000
asID: 52341
IP address blocks: 186.189.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:2b:29:00:35:af:40:6f:86:ea:39:ba:09:98:9f:d6:a5:6a:d1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
Validity
Not Before: Feb 4 18:38:28 2025 GMT
Not After : Feb 3 18:43:28 2026 GMT
Subject: CN=B968B33F52757684CE3C63CE7756D1E96DDF6468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:95:34:c8:2d:34:e5:e7:03:64:49:0d:4c:
39:51:11:d5:18:11:71:bf:b3:8a:af:07:3b:a2:9c:
03:d4:b9:32:cd:53:5d:4f:cc:02:33:21:90:52:25:
43:e2:df:f0:a9:ed:b6:eb:2e:81:fd:80:6d:9f:70:
47:f8:35:63:25:1f:7d:58:a8:8c:de:85:fb:e5:1a:
51:7b:f3:53:79:c7:31:8d:ca:33:db:27:77:fc:ca:
3f:ea:cb:ca:82:9b:42:3a:05:cd:6b:d9:c5:fb:f7:
6e:ce:20:70:5d:7f:d5:0c:7e:35:fc:60:25:d3:0b:
b3:bd:a5:f3:5e:d0:63:39:19:2e:fb:92:1f:23:ea:
46:fd:94:60:23:c1:47:f8:88:ed:09:43:07:cf:0f:
6e:e2:ec:3f:fa:7c:5d:d5:e1:b2:c2:d5:ae:d7:93:
8c:da:13:fc:a2:4b:e6:b5:7c:04:63:6f:ae:9f:31:
0b:57:e1:17:7c:13:f9:8a:ae:41:d6:2c:ce:83:0f:
6d:95:92:f4:ae:ed:30:1c:e7:3d:05:80:3c:81:6a:
57:87:cd:ad:55:67:01:57:38:3a:55:cc:21:42:e1:
65:16:6b:82:a6:27:83:a1:c4:c2:2d:5c:b5:ff:62:
88:fe:29:aa:15:65:b6:2a:49:fd:a1:7e:c3:97:9f:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:68:B3:3F:52:75:76:84:CE:3C:63:CE:77:56:D1:E9:6D:DF:64:68
X509v3 Authority Key Identifier:
keyid:AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e38302e302f32302d3234203d3e203532333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.189.80.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:94:a3:4d:bc:3e:0b:ac:5f:32:11:71:39:d8:d9:e8:96:f4:
ca:14:f8:c6:ce:72:a4:91:f8:f1:c6:9a:4a:f1:a5:16:5f:6b:
be:7c:df:bf:6f:ee:c0:d6:4c:90:e9:c5:32:2a:8d:7d:05:6e:
2c:14:9f:5f:ad:38:01:25:8a:7b:87:02:9b:43:25:8d:1b:fe:
bf:e9:0a:5d:d7:f1:d1:07:82:af:b2:f8:9a:21:37:21:fa:17:
68:e3:59:1b:d7:f1:f1:a8:cf:56:22:1b:48:df:4f:64:79:1e:
19:29:c1:99:d9:11:d6:19:d3:6b:7a:6b:a5:7e:2c:c7:19:ef:
9e:b4:ee:1f:eb:c2:cb:a4:c4:c7:b1:15:4f:38:c2:33:4e:b8:
df:1c:6d:9a:9f:87:4b:f1:d3:aa:e2:67:96:82:7a:91:c9:43:
20:98:0f:2a:00:d0:44:4b:dc:67:4a:63:dd:d8:50:20:94:c5:
c1:a3:dc:cd:f0:9a:72:18:04:12:c4:09:ea:28:5f:8a:cb:f3:
8f:1e:2b:f1:bb:ab:81:a9:c2:9a:3c:ac:81:81:05:62:44:5b:
37:d6:ad:17:9b:e7:e3:47:f4:17:37:6e:22:9f:0f:46:4c:18:
23:4c:64:f2:97:cf:0e:55:e4:91:f6:a5:b6:37:2e:46:92:72:
20:c3:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:31 2025 by rpki-client