Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31342e302f32342d3234203d3e20323639383632.roa
File: 3133382e3138352e31342e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier: +l3Fjm2gSo6YWbSt9XCyWyBwhXQjys7bGWyCufqwxng=
Subject key identifier: 53:68:DC:32:21:83:8C:A0:96:94:73:73:4E:33:C4:64:68:BF:ED:53
Certificate issuer: /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial: 71D8A8E7D65603EE2FEEB7D972EDCFA5EFA50B51
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31342e302f32342d3234203d3e20323639383632.roa
Signing time: Tue 04 Feb 2025 18:48:12 +0000
ROA not before: Tue 04 Feb 2025 18:43:12 +0000
ROA not after: Tue 03 Feb 2026 18:48:12 +0000
asID: 269862
IP address blocks: 138.185.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d8:a8:e7:d6:56:03:ee:2f:ee:b7:d9:72:ed:cf:a5:ef:a5:0b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Validity
Not Before: Feb 4 18:43:12 2025 GMT
Not After : Feb 3 18:48:12 2026 GMT
Subject: CN=5368DC3221838CA0969473734E33C46468BFED53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:c7:b3:ff:69:b1:6d:e6:c1:57:50:92:cb:
47:1a:3b:f5:f4:56:c5:fe:34:f3:cc:69:4f:0a:b0:
9b:bc:71:c4:b4:ea:56:e5:ea:27:95:6f:f9:a2:2e:
c2:89:42:ee:b4:2e:24:95:38:14:78:61:18:c2:ee:
fd:97:23:9a:a3:d7:86:83:eb:00:da:7c:ef:93:65:
68:d6:4d:d5:53:c9:39:2e:c3:89:6a:f1:69:b9:0d:
6b:4f:24:89:e0:e1:29:84:2a:38:58:e2:27:36:1b:
28:b4:c9:84:b8:98:8d:44:e2:15:80:15:e7:eb:19:
5c:39:b6:35:28:03:aa:7f:3e:d1:f0:37:75:d2:d1:
ea:c2:c4:cb:81:9f:b6:cf:65:91:f3:be:13:a4:a7:
8d:d8:c2:35:77:4f:ec:9a:a1:b8:d9:73:ce:88:46:
77:d1:ba:47:5a:a2:84:e9:b3:7b:54:35:b5:97:67:
87:61:1b:b4:ec:ee:9e:bb:15:5e:27:7d:87:6d:0a:
6a:93:b4:e1:b1:d9:1b:0f:a3:f3:76:67:e4:07:aa:
96:9c:84:a4:1d:68:b2:59:8d:d9:34:6b:43:30:03:
b4:8f:49:8d:f2:c3:0f:81:4a:1d:87:9f:17:07:7b:
6d:b4:cf:06:8b:d6:7d:0b:9d:30:eb:80:66:b3:74:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:68:DC:32:21:83:8C:A0:96:94:73:73:4E:33:C4:64:68:BF:ED:53
X509v3 Authority Key Identifier:
keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31342e302f32342d3234203d3e20323639383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.14.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9a:ba:2e:8e:09:52:0c:4d:4f:c5:d3:eb:cd:c5:ad:8c:19:
45:a8:c8:a5:87:4c:15:ed:e7:74:d2:e1:30:95:af:e8:c0:ad:
5e:18:db:e7:6f:e9:58:ea:3d:c1:4a:f6:8e:61:ae:b9:8d:26:
54:6e:7b:1e:fa:16:69:8a:f7:95:ed:4a:28:95:9d:62:e2:29:
f8:4b:69:e5:34:77:e0:a4:ba:ac:c2:01:29:18:f6:8a:08:b6:
f2:44:14:94:14:3a:61:fb:5e:a3:b9:56:51:3d:8c:19:fd:71:
ba:c9:98:83:56:29:f8:fa:21:3d:17:76:66:f5:6a:a4:22:67:
f8:0c:be:f1:91:32:53:d2:94:89:5a:4e:66:88:c1:d9:2c:a6:
f1:39:ef:4a:a3:a7:52:dc:e8:3d:31:ac:e9:11:4f:10:0d:c9:
49:a3:ba:2e:af:c0:b8:5d:ae:4d:dd:8a:8b:27:a8:65:b9:a4:
40:3b:c4:7e:d9:3d:a0:5d:73:59:ac:58:57:fe:c9:46:86:4d:
69:32:a8:9b:e5:49:9d:32:76:a3:c5:be:49:37:99:b7:cb:7f:
3e:51:44:8d:38:44:09:79:a2:8f:7c:b3:e9:33:ce:59:3e:b2:
3c:37:7e:52:ea:36:74:3d:35:df:df:56:67:11:de:6f:0e:02:
99:16:0c:02
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcdio59ZWA+4v7rfZcu3Ppe+lC1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVBREE4NDc5NDdGRkNBQUYyOUMyRTQxRjJERUYyM0ZF
ODJCOTRERDAeFw0yNTAyMDQxODQzMTJaFw0yNjAyMDMxODQ4MTJaMDMxMTAvBgNV
BAMTKDUzNjhEQzMyMjE4MzhDQTA5Njk0NzM3MzRFMzNDNDY0NjhCRkVENTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgh8ez/2mxbebBV1CSy0caO/X0
VsX+NPPMaU8KsJu8ccS06lbl6ieVb/miLsKJQu60LiSVOBR4YRjC7v2XI5qj14aD
6wDafO+TZWjWTdVTyTkuw4lq8Wm5DWtPJIng4SmEKjhY4ic2Gyi0yYS4mI1E4hWA
FefrGVw5tjUoA6p/PtHwN3XS0erCxMuBn7bPZZHzvhOkp43YwjV3T+yaobjZc86I
RnfRukdaooTps3tUNbWXZ4dhG7Ts7p67FV4nfYdtCmqTtOGx2RsPo/N2Z+QHqpac
hKQdaLJZjdk0a0MwA7SPSY3yww+BSh2HnxcHe220zwaL1n0LnTDrgGazdO/1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUU2jcMiGDjKCWlHNzTjPEZGi/7VMwHwYDVR0j
BBgwFoAUpa2oR5R//KrynC5B8t7yP+grlN0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTE3MDgwQkYzNDE3MTFCMjdCRTYyN0Q0NjlCQzNGRUM0
QzVERDY2NTg4MjIyRjVFNTU1ODA4M0I2N0EzNkM4LzAvQTVBREE4NDc5NDdGRkNB
QUYyOUMyRTQxRjJERUYyM0ZFODJCOTRERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUFEQTg0Nzk0N0ZGQ0FBRjI5
QzJFNDFGMkRFRjIzRkU4MkI5NERELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUUxNzA4MEJGMzQxNzExQjI3QkU2MjdENDY5QkMzRkVDNEM1REQ2NjU4
ODIyMkY1RTU1NTgwODNCNjdBMzZDOC8wLzMxMzMzODJlMzEzODM1MmUzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzNjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAirkO
MA0GCSqGSIb3DQEBCwUAA4IBAQBwmroujglSDE1PxdPrzcWtjBlFqMilh0wV7ed0
0uEwla/owK1eGNvnb+lY6j3BSvaOYa65jSZUbnse+hZpiveV7UoolZ1i4in4S2nl
NHfgpLqswgEpGPaKCLbyRBSUFDph+16juVZRPYwZ/XG6yZiDVin4+iE9F3Zm9Wqk
Imf4DL7xkTJT0pSJWk5miMHZLKbxOe9Ko6dS3Og9MazpEU8QDclJo7our8C4Xa5N
3YqLJ6hluaRAO8R+2T2gXXNZrFhX/slGhk1pMqib5UmdMnajxb5JN5m3y38+UUSN
OEQJeaKPfLPpM85ZPrI8N35S6jZ0PTXf31ZnEd5vDgKZFgwC
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:56 2025 by rpki-client