Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3133312e3139362e302e302f32322d3234203d3e20323634373538.roa
File: 3133312e3139362e302e302f32322d3234203d3e20323634373538.roa (raw, json)
Hash identifier: SEpe41Zl2oHuvp1mDP36+qK+yPofC0TEA4YNw3m+ALA=
Subject key identifier: 68:E9:52:E3:28:60:56:64:3D:C2:56:8D:3C:B4:BA:E2:3F:C7:2E:EE
Certificate issuer: /CN=3927FF3B5B92C88A2841A61BED02284FDFE90814
Certificate serial: 72FFD7B755918FCF6AB5CF2DBDEA9C54F80EEC23
Authority key identifier: 39:27:FF:3B:5B:92:C8:8A:28:41:A6:1B:ED:02:28:4F:DF:E9:08:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3133312e3139362e302e302f32322d3234203d3e20323634373538.roa
Signing time: Tue 04 Feb 2025 18:18:18 +0000
ROA not before: Tue 04 Feb 2025 18:13:18 +0000
ROA not after: Tue 03 Feb 2026 18:18:18 +0000
asID: 264758
IP address blocks: 131.196.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ff:d7:b7:55:91:8f:cf:6a:b5:cf:2d:bd:ea:9c:54:f8:0e:ec:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3927FF3B5B92C88A2841A61BED02284FDFE90814
Validity
Not Before: Feb 4 18:13:18 2025 GMT
Not After : Feb 3 18:18:18 2026 GMT
Subject: CN=68E952E3286056643DC2568D3CB4BAE23FC72EEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:fd:e1:fe:79:86:e7:3f:57:49:61:60:74:
96:81:e6:98:c0:b7:9a:34:87:60:71:15:3a:16:cf:
78:3a:4f:51:58:c3:c8:7b:bb:08:28:a3:ed:19:4f:
45:9e:a1:9f:be:db:82:b3:d2:fd:56:43:00:ec:2a:
ba:d1:03:53:6d:dc:08:c1:5b:98:07:56:7e:d5:76:
e5:ea:3e:b6:8a:5b:20:a3:f8:6b:ae:78:7b:36:41:
37:77:33:f2:e5:1e:f8:ef:3a:18:5a:c5:4f:21:14:
5f:ee:9d:ad:0c:bd:2a:0a:75:06:0d:4b:a7:d0:9e:
d9:6d:54:c3:86:ab:ff:7d:8e:07:14:d1:b3:3b:5c:
b3:16:ed:82:c8:51:c7:fe:28:10:cf:7e:5f:56:97:
15:4f:1b:76:63:7f:69:ad:f3:8e:c3:2c:7c:34:a5:
54:3c:30:d1:a7:7e:48:20:60:7d:51:77:8a:3b:bb:
88:5a:bf:05:88:52:fb:29:1c:00:c5:8c:c4:71:8d:
66:f2:ed:6e:fc:98:04:8e:d9:da:bf:64:94:87:a7:
84:83:21:12:52:d7:44:63:c4:32:99:a0:8c:76:ba:
54:e4:c4:d9:40:be:3f:78:0d:1b:32:4b:99:cb:12:
76:fa:eb:4a:dd:82:c3:9f:e0:1a:8f:0d:a5:cd:46:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:52:E3:28:60:56:64:3D:C2:56:8D:3C:B4:BA:E2:3F:C7:2E:EE
X509v3 Authority Key Identifier:
keyid:39:27:FF:3B:5B:92:C8:8A:28:41:A6:1B:ED:02:28:4F:DF:E9:08:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3927FF3B5B92C88A2841A61BED02284FDFE90814.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E5C8BB1C960715B62CEF2F80625BD655F7D65F55CAD6162EDCCD363D9862E57/0/3133312e3139362e302e302f32322d3234203d3e20323634373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:d6:5b:89:02:96:6d:c8:ad:d1:25:3a:07:e7:43:09:7b:c0:
82:75:e2:d2:89:b4:9d:90:69:2c:c1:40:a5:33:ca:cd:03:3e:
ca:49:f9:11:74:a6:be:cb:9e:de:c1:9c:67:9a:99:8f:df:34:
24:32:11:53:8a:86:51:fa:ee:2e:2c:4c:8f:c4:70:d3:7a:de:
97:c8:7e:4d:6c:17:90:6c:f7:c1:77:81:fe:3a:6b:a7:0c:16:
1c:10:3e:82:35:ea:dd:17:20:a8:67:31:cd:1c:f8:b2:a8:b3:
94:ff:09:20:b8:06:9c:8a:14:3a:cd:62:35:2f:05:60:47:da:
f2:42:f5:17:2d:b5:cf:ab:e3:9d:cf:14:fc:9c:26:5d:0e:fc:
a3:b0:d5:36:f3:e3:c7:ba:e5:23:1a:97:a7:e5:33:ab:73:6b:
a2:93:69:8d:1e:db:b5:25:4a:22:d7:bc:70:ce:29:cb:d7:1c:
66:8d:b3:37:10:69:d9:be:6f:eb:91:b7:61:92:9e:ef:32:bb:
a3:85:d9:ff:dd:4e:07:60:ab:69:cf:43:17:71:0c:6f:00:da:
f4:0e:ba:17:f3:c9:37:d9:b0:bf:1d:57:93:f7:da:66:e6:88:
86:6b:1f:1a:b6:eb:c3:01:9f:83:32:ad:63:af:e7:45:25:33:
5a:90:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:15 2025 by rpki-client