Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa
File: 3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa (raw, json)
Hash identifier: 339ojM2sOIRPBNE7n5s+y5K1ZlNaMl+XGrFI3+a5y4k=
Subject key identifier: A2:19:79:1B:AA:EA:26:E3:AD:5D:91:8E:39:3C:D9:1B:93:22:2F:1C
Certificate issuer: /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial: 0BA3B5DA855D5DA11AA571E1E032CD5A967A7F21
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa
Signing time: Tue 04 Feb 2025 18:17:56 +0000
ROA not before: Tue 04 Feb 2025 18:12:56 +0000
ROA not after: Tue 03 Feb 2026 18:17:56 +0000
asID: 265705
IP address blocks: 186.28.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a3:b5:da:85:5d:5d:a1:1a:a5:71:e1:e0:32:cd:5a:96:7a:7f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Validity
Not Before: Feb 4 18:12:56 2025 GMT
Not After : Feb 3 18:17:56 2026 GMT
Subject: CN=A219791BAAEA26E3AD5D918E393CD91B93222F1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cb:ca:d2:08:1a:9d:33:65:c1:c3:84:cb:3f:
69:cc:78:98:e8:32:50:d1:05:80:11:b8:da:17:7f:
13:1d:34:63:59:ef:6b:2d:fb:3e:98:dd:14:19:06:
71:07:63:65:45:dd:4d:ae:2f:40:96:4e:8f:17:d8:
84:3c:03:9a:8c:91:de:be:ba:01:09:fd:68:be:99:
22:ad:19:eb:17:17:d9:1b:85:7e:5a:98:eb:72:16:
9b:07:30:73:cb:73:c8:0c:97:ab:a0:ce:07:98:fc:
3a:4a:31:56:21:56:1e:29:d5:cc:2b:6a:11:35:d0:
92:9a:12:0a:f5:9a:03:8f:23:b1:b1:6f:0b:5f:de:
6c:30:09:35:15:88:a3:66:d9:99:ec:8f:46:d5:35:
57:0b:6a:7e:5e:e7:09:13:39:dc:b3:0d:ee:6f:bc:
2f:2c:b6:ee:74:22:20:f8:f4:74:de:75:d6:a4:ea:
1a:49:93:62:bd:cb:78:db:b7:94:d1:69:7b:d5:fa:
ed:2c:7a:56:e5:42:90:e2:99:91:da:17:09:c9:a9:
d3:d1:47:bb:1f:02:3b:51:2a:16:20:21:38:9b:81:
91:3e:1a:33:83:fd:76:da:65:39:ad:03:cd:6b:26:
28:0c:9d:56:11:89:83:32:73:23:3b:be:07:a1:50:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:79:1B:AA:EA:26:E3:AD:5D:91:8E:39:3C:D9:1B:93:22:2F:1C
X509v3 Authority Key Identifier:
keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.28.180.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:71:fd:2d:e8:40:c7:d3:c4:79:41:ef:4f:9d:3a:50:17:e1:
0e:66:77:d8:db:5a:9d:b5:51:78:a2:bd:1d:6d:bf:3e:43:88:
33:c3:5c:8c:79:34:6d:d9:5b:46:b6:ee:15:83:35:4a:0b:76:
e0:16:2d:e4:5a:28:f0:05:52:d5:21:b1:80:52:4b:ed:09:59:
5c:a6:9e:7f:0c:0b:12:88:06:99:54:68:1f:71:ca:e5:04:27:
37:e8:82:6e:5a:9a:0f:34:77:a7:8f:f2:48:e4:fc:8d:6a:25:
86:87:4b:67:15:d7:b8:43:ef:9a:de:26:f9:64:55:c3:39:9c:
f6:7d:57:a1:0b:cb:a1:68:e8:5b:0e:67:fb:8a:07:cb:e0:de:
63:ee:e5:0d:ef:49:55:fe:ae:4a:b4:10:4b:32:87:bd:2c:a8:
a1:d7:07:2d:01:db:e6:bc:e5:8b:98:20:d7:73:bf:5c:49:4d:
07:70:e1:4f:51:a4:82:a9:8f:bb:b1:90:6d:3c:40:7a:c1:97:
71:1b:b4:04:89:83:3b:27:b3:0e:49:98:60:6d:11:9f:9a:d8:
ce:45:54:4d:80:fd:d7:d7:71:2d:fb:a5:40:c9:39:09:9f:ca:
ef:7d:3b:46:49:17:27:91:1a:e4:25:cc:68:1b:7a:35:45:3e:
95:95:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:48 2025 by rpki-client