Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/764abaabb4e5feace5abcbac3ea542f0261db63d.roa
File: 764abaabb4e5feace5abcbac3ea542f0261db63d.roa (raw, json)
Hash identifier: aAUQ8WDjXEcx2wqYEjQdsOa1Wwt1qrVQNzwpFaM3oG0=
Subject key identifier: DE:96:52:D9:E4:39:93:99:F1:10:E0:4B:DD:9A:B5:48:BD:9B:7C:CB
Certificate issuer: /CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
Certificate serial: 05D2
Authority key identifier: CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/764abaabb4e5feace5abcbac3ea542f0261db63d.roa
Signing time: Tue 12 Mar 2024 23:03:33 +0000
ROA not before: Tue 12 Mar 2024 23:03:33 +0000
ROA not after: Thu 12 Mar 2026 23:03:33 +0000
asID: 262944
IP address blocks: 138.185.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
Validity
Not Before: Mar 12 23:03:33 2024 GMT
Not After : Mar 12 23:03:33 2026 GMT
Subject: CN=764abaabb4e5feace5abcbac3ea542f0261db63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:45:c4:60:35:1a:19:a0:f5:20:12:5a:60:
1e:5f:9f:9b:52:6a:f7:a7:b3:52:70:08:e8:cc:d1:
1c:11:23:13:76:cd:d0:21:94:3b:48:b0:8f:06:1e:
d4:ad:1b:6d:71:37:17:c3:ea:27:1e:d7:6c:11:e8:
af:da:ab:02:63:97:62:30:1f:66:3a:46:db:e4:b9:
a4:37:2b:da:5c:fc:cf:4f:54:d0:a1:14:d2:db:a7:
51:07:8a:e6:7b:28:ea:9e:10:89:65:96:15:38:94:
f6:7a:c3:42:4b:38:24:57:04:73:3e:4a:84:db:b7:
dc:bf:ce:0a:51:e5:24:da:a7:0a:14:d6:71:14:d3:
4a:c9:20:2f:96:ba:08:21:8d:bf:e0:47:0f:e2:b4:
f0:82:44:54:72:00:6c:9e:6a:f6:3e:9c:b7:67:ee:
4e:f8:f8:f5:e9:13:00:9a:5d:79:58:5d:6a:46:ce:
84:00:d1:27:4c:9e:ba:10:43:6f:cb:7c:ef:51:65:
39:54:32:6a:6c:8f:d9:2d:60:35:1b:2b:e1:63:86:
0f:bb:ff:f0:d7:e2:a8:20:dd:6e:ec:d4:32:b1:9d:
1d:f1:39:ad:d3:b8:d1:7f:be:24:a3:44:3c:fe:40:
54:36:d9:9f:94:e9:72:bd:15:ce:bb:c6:dc:57:52:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:96:52:D9:E4:39:93:99:F1:10:E0:4B:DD:9A:B5:48:BD:9B:7C:CB
X509v3 Authority Key Identifier:
keyid:CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/764abaabb4e5feace5abcbac3ea542f0261db63d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.225.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2a:61:ca:03:e2:26:57:cc:63:f0:a4:3d:9a:80:e6:41:87:
16:1a:a4:6e:86:b2:a4:fb:86:cc:35:47:92:62:fa:07:b6:5b:
94:91:36:3c:7c:b1:0a:c4:f6:5f:82:07:20:7a:9b:ed:d8:29:
44:fb:bb:e0:a8:6a:d9:2b:bf:6d:26:32:75:49:2d:37:b0:9d:
67:41:e3:88:55:44:8d:83:ff:9d:89:e7:c5:f1:1e:69:bf:d9:
96:19:3e:a7:48:75:20:73:6c:b2:9a:da:17:6b:06:57:07:34:
48:34:82:03:9b:78:b6:ca:cd:44:5f:79:48:be:1c:c1:05:54:
96:1d:bb:78:c2:21:54:a6:d5:9a:3d:6b:b5:42:19:33:ff:da:
2c:70:3d:a4:ef:f2:11:fc:38:e2:bc:cb:5b:88:e5:e4:d9:a5:
3f:b1:c6:e2:d6:6e:77:d3:71:c1:89:d7:dc:84:27:56:65:ad:
d2:2a:f7:99:e0:98:77:46:6b:fa:94:4b:2b:f0:2c:9f:a2:44:
c5:d2:d3:da:12:5b:18:f3:54:03:2e:38:27:04:0f:cd:7b:e7:
a9:67:62:51:97:56:05:67:a9:fc:e1:a6:4f:c7:15:2b:6f:42:
6b:d5:63:e5:68:46:3b:d8:ff:1a:00:8c:86:7b:3b:28:c0:4e:
a0:a1:2b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:37:49 2025 by rpki-client