Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa
File: 3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa (raw, json)
Hash identifier: X+OTbABJO/Rk5REx54YJs//iSH/BaOKNkmCURymwnt8=
Subject key identifier: 86:DF:2E:62:AA:27:3D:BA:99:09:C6:F7:1E:C0:EF:A3:46:B0:E0:F3
Certificate issuer: /CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Certificate serial: 0C931B0B302C23B3F4C50CDDC88979F3ED62BBFF
Authority key identifier: 4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa
Signing time: Tue 25 Mar 2025 19:10:00 +0000
ROA not before: Tue 25 Mar 2025 19:05:00 +0000
ROA not after: Tue 24 Mar 2026 19:10:00 +0000
asID: 20207
IP address blocks: 181.174.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:93:1b:0b:30:2c:23:b3:f4:c5:0c:dd:c8:89:79:f3:ed:62:bb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Validity
Not Before: Mar 25 19:05:00 2025 GMT
Not After : Mar 24 19:10:00 2026 GMT
Subject: CN=86DF2E62AA273DBA9909C6F71EC0EFA346B0E0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:e5:f9:65:8e:e9:f0:1f:a2:4f:3f:8b:ac:
c9:da:c3:02:8b:5f:f5:e0:d3:05:72:d5:0d:1a:b9:
f0:fd:32:af:a8:56:fa:54:ec:af:33:13:58:96:20:
db:2d:b8:54:8d:ab:fe:9a:4b:78:a4:35:72:d3:d9:
8b:79:88:e9:71:2f:c3:e8:39:11:03:4d:8b:74:a1:
c4:1e:fb:7d:ed:a5:79:8f:53:52:7b:ff:33:d1:48:
14:11:cb:15:3d:82:40:7c:c5:0c:5c:ac:bc:5f:06:
8c:8c:9d:f7:f0:01:48:75:2d:a7:62:ea:c1:6e:c3:
28:8e:e0:4f:6a:c0:7c:90:57:74:41:7d:68:9e:62:
5b:24:8e:3d:28:64:92:35:cb:57:0b:a9:0a:90:23:
14:0a:21:ba:5b:10:38:63:71:44:3a:7c:ac:e7:69:
3b:c6:54:83:9b:c6:c7:9c:70:ed:5d:25:10:d1:b1:
c4:87:48:07:57:8f:3e:d8:91:53:de:03:97:af:2e:
e5:44:28:a8:7f:73:a9:4b:37:a7:a9:d7:03:7f:ea:
64:41:12:d6:01:61:26:9d:6b:7a:40:89:0f:0f:bb:
fe:28:b4:cc:91:8f:11:2f:d8:97:d8:f4:a6:9c:38:
ac:b9:21:11:6c:39:63:03:d2:59:95:17:7c:75:57:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DF:2E:62:AA:27:3D:BA:99:09:C6:F7:1E:C0:EF:A3:46:B0:E0:F3
X509v3 Authority Key Identifier:
keyid:4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.174.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:40:8c:ee:dc:2a:2d:37:6e:a3:7f:9e:1f:89:be:54:70:03:
d2:bf:58:72:c9:c9:a3:87:85:a2:3e:76:c6:52:51:be:10:8f:
e8:e6:06:30:ae:1c:fc:e2:f5:35:23:70:59:aa:78:65:aa:77:
33:ca:b3:54:f2:85:b3:f9:ea:9e:6f:4a:a4:8c:11:09:9c:21:
a1:91:82:7e:68:b5:e6:50:73:45:0b:64:c2:52:07:35:99:f7:
4a:b3:bc:f5:7c:35:aa:5b:3d:19:0d:a0:ad:07:a8:fd:d9:2f:
1e:97:ce:ef:00:d7:86:25:c2:63:b8:1a:12:89:7e:67:06:ba:
bb:58:c7:81:af:a5:bb:0f:9f:97:a7:33:ea:88:61:23:bd:46:
4d:9b:31:0a:00:7b:ea:14:a7:9e:37:44:53:10:61:93:92:2b:
0f:d0:26:f2:33:9c:34:da:7b:9b:7f:1d:11:31:a9:ac:ea:68:
64:7e:b0:f9:90:43:0b:31:ad:af:31:77:d7:6c:82:d7:9d:e4:
11:c6:e4:5b:23:7c:e7:fd:15:88:eb:c8:15:b3:54:de:39:27:
51:6d:90:1f:b7:80:89:b1:7c:14:0b:81:61:35:87:1f:3b:54:
f6:2e:c5:04:92:bc:ca:0e:21:c9:3d:b5:77:1e:bf:38:fe:71:
2e:89:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:40 2025 by rpki-client