Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34322e302f32342d3234203d3e203237383233.roa
File: 3133382e3231392e34322e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier: LR/RNhKOosgtcRP6ticAVfIMkU3nGdqrN3JqjUa+G4s=
Subject key identifier: 35:12:28:E9:3F:EF:5D:35:E5:A0:4E:76:C3:6A:57:F0:6B:5B:D8:BE
Certificate issuer: /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial: 52C89811468B5C95A927B809035CB0D1108E85C2
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34322e302f32342d3234203d3e203237383233.roa
Signing time: Tue 04 Feb 2025 18:08:14 +0000
ROA not before: Tue 04 Feb 2025 18:03:14 +0000
ROA not after: Tue 03 Feb 2026 18:08:14 +0000
asID: 27823
IP address blocks: 138.219.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c8:98:11:46:8b:5c:95:a9:27:b8:09:03:5c:b0:d1:10:8e:85:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Validity
Not Before: Feb 4 18:03:14 2025 GMT
Not After : Feb 3 18:08:14 2026 GMT
Subject: CN=351228E93FEF5D35E5A04E76C36A57F06B5BD8BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:61:ea:11:6d:89:9a:63:c4:73:34:bd:20:45:
ff:85:17:2b:2f:5d:78:75:c1:75:43:45:2a:4e:2d:
47:be:35:47:59:ae:98:4b:50:10:76:63:02:cf:3d:
54:bd:af:08:7e:84:d8:fa:f1:ba:bd:97:dc:6e:ae:
5b:ff:30:75:3e:4f:fc:ce:78:84:03:24:9c:34:cd:
50:ba:c1:8a:31:fd:da:ca:65:ec:72:ec:73:d9:2b:
39:20:a6:85:e7:40:cf:71:94:a1:7a:5f:4f:8f:86:
5f:1b:9a:2d:52:3c:96:90:39:20:db:a8:b9:c9:e6:
09:07:17:40:9e:9d:4a:26:88:72:2a:ca:c5:9f:6c:
42:b6:7f:b9:64:76:63:96:0d:f9:35:0a:4b:41:b9:
49:8a:92:9a:9c:59:2f:0a:0d:08:99:83:e2:e8:7e:
92:24:f3:49:18:02:61:3a:3a:68:b0:07:48:dc:da:
f2:f8:f9:ff:b6:e2:ab:97:da:21:96:ff:7d:bf:aa:
e4:6a:09:98:c0:fd:3a:4f:dd:10:5c:91:38:e0:9a:
6d:5c:02:b6:1f:b6:dd:8f:f5:78:f7:01:d6:ff:4f:
c5:61:b2:ed:6c:2e:0b:33:df:f9:7c:e5:da:6a:8a:
fd:ce:8d:be:f5:28:5c:10:2a:be:86:74:b3:59:0b:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:12:28:E9:3F:EF:5D:35:E5:A0:4E:76:C3:6A:57:F0:6B:5B:D8:BE
X509v3 Authority Key Identifier:
keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34322e302f32342d3234203d3e203237383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.42.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:e9:de:e6:db:32:d8:6b:13:38:e3:24:9f:2a:36:83:30:2f:
15:2f:65:d0:28:29:24:c5:e2:45:db:6f:c2:a4:5c:ba:74:99:
2c:b7:cc:4f:39:0c:6b:32:1f:ac:b5:ea:92:54:8d:1d:d9:3e:
b5:1b:3e:80:81:71:6e:90:d9:0d:5b:9d:37:d0:dc:0f:e4:08:
54:55:4e:0a:84:a0:5e:b0:9c:71:ff:ac:4f:cc:8c:2e:09:40:
0e:ce:d9:3c:44:ea:0c:c4:94:d5:01:29:be:83:1c:e6:18:7d:
11:06:46:3d:c9:a7:d8:74:60:6c:5d:3b:f0:5e:d9:52:cf:08:
a1:29:be:4e:d0:63:c5:fe:a3:ac:85:30:93:44:6f:66:4a:04:
7f:a2:5b:56:7a:f9:bb:12:13:56:58:94:18:67:2a:58:a4:a7:
62:35:d6:9d:e7:1c:72:d4:ba:16:79:fd:02:16:9c:e6:29:22:
41:aa:ab:c4:56:aa:7b:0b:43:39:9d:f2:a4:6f:86:a3:86:25:
9a:d3:39:28:fb:8a:cc:0d:3a:a9:01:62:fa:2c:f5:a9:c0:da:
b7:7b:ea:57:64:48:f6:54:f4:9e:21:5d:bb:43:64:f8:3d:ac:
21:30:a1:43:0c:d9:eb:55:33:04:65:d9:69:19:bc:db:fc:80:
19:b7:18:16
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUsiYEUaLXJWpJ7gJA1yw0RCOhcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDMzFEQ0E0MDYyRkJBOEZGNDE3NUM1MThFRjIyNDZD
RjU3MEQ4MDAeFw0yNTAyMDQxODAzMTRaFw0yNjAyMDMxODA4MTRaMDMxMTAvBgNV
BAMTKDM1MTIyOEU5M0ZFRjVEMzVFNUEwNEU3NkMzNkE1N0YwNkI1QkQ4QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkYeoRbYmaY8RzNL0gRf+FFysv
XXh1wXVDRSpOLUe+NUdZrphLUBB2YwLPPVS9rwh+hNj68bq9l9xurlv/MHU+T/zO
eIQDJJw0zVC6wYox/drKZexy7HPZKzkgpoXnQM9xlKF6X0+Phl8bmi1SPJaQOSDb
qLnJ5gkHF0CenUomiHIqysWfbEK2f7lkdmOWDfk1CktBuUmKkpqcWS8KDQiZg+Lo
fpIk80kYAmE6OmiwB0jc2vL4+f+24quX2iGW/32/quRqCZjA/TpP3RBckTjgmm1c
ArYftt2P9Xj3Adb/T8Vhsu1sLgsz3/l85dpqiv3Ojb71KFwQKr6GdLNZC237AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNRIo6T/vXTXloE52w2pX8Gtb2L4wHwYDVR0j
BBgwFoAUpcMdykBi+6j/QXXFGO8iRs9XDYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkIxQjU3QjE5Qjc0M0MxRTBCNjdEQzUwMjBFNzY5RkY2
OTdENUQ4RkU2NzY0NTQ0M0MwMTcwQTU5QTYyOEY0LzAvQTVDMzFEQ0E0MDYyRkJB
OEZGNDE3NUM1MThFRjIyNDZDRjU3MEQ4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUMzMURDQTQwNjJGQkE4RkY0
MTc1QzUxOEVGMjI0NkNGNTcwRDgwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZCMUI1N0IxOUI3NDNDMUUwQjY3REM1MDIwRTc2OUZGNjk3RDVEOEZF
Njc2NDU0NDNDMDE3MEE1OUE2MjhGNC8wLzMxMzMzODJlMzIzMTM5MmUzNDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrbKjAN
BgkqhkiG9w0BAQsFAAOCAQEAyOne5tsy2GsTOOMknyo2gzAvFS9l0CgpJMXiRdtv
wqRcunSZLLfMTzkMazIfrLXqklSNHdk+tRs+gIFxbpDZDVudN9DcD+QIVFVOCoSg
XrCccf+sT8yMLglADs7ZPETqDMSU1QEpvoMc5hh9EQZGPcmn2HRgbF078F7ZUs8I
oSm+TtBjxf6jrIUwk0RvZkoEf6JbVnr5uxITVliUGGcqWKSnYjXWneccctS6Fnn9
Ahac5ikiQaqrxFaqewtDOZ3ypG+Go4YlmtM5KPuKzA06qQFi+iz1qcDat3vqV2RI
9lT0niFdu0Nk+D2sITChQwzZ61UzBGXZaRm82/yAGbcYFg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:50:50 2025 by rpki-client