Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234372e302f32342d3234203d3e203532353038.roa
File: 3133382e3230342e3234372e302f32342d3234203d3e203532353038.roa (raw, json)
Hash identifier: Q35xlkWoF7Tbi7JaBWewYy2l5w3oIhWHeJMDiDyEmn4=
Subject key identifier: CF:0A:A7:DC:62:43:5E:A2:61:DA:E3:D0:24:61:F5:B0:E3:EF:BF:62
Certificate issuer: /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial: 7784134A79B48A496DDC774044373CEB796194FB
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234372e302f32342d3234203d3e203532353038.roa
Signing time: Tue 04 Feb 2025 18:35:20 +0000
ROA not before: Tue 04 Feb 2025 18:30:20 +0000
ROA not after: Tue 03 Feb 2026 18:35:20 +0000
asID: 52508
IP address blocks: 138.204.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:84:13:4a:79:b4:8a:49:6d:dc:77:40:44:37:3c:eb:79:61:94:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Validity
Not Before: Feb 4 18:30:20 2025 GMT
Not After : Feb 3 18:35:20 2026 GMT
Subject: CN=CF0AA7DC62435EA261DAE3D02461F5B0E3EFBF62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:6f:8f:b9:9b:65:f9:6b:9b:d4:67:11:dd:
57:7a:03:c3:87:70:e4:fd:a6:e4:06:ba:f3:9e:8f:
76:a1:50:1c:31:bb:5f:42:12:5c:e6:bf:ec:a0:fd:
03:40:20:c1:4e:9e:0a:b0:8e:27:d6:5e:50:d8:0f:
a8:66:79:bc:9a:46:a1:bb:e4:cf:80:24:81:68:d7:
d6:2d:95:cd:5a:a1:3a:bf:70:0a:58:d8:1e:6f:88:
14:b0:cb:1a:19:a3:88:19:da:63:bf:7d:06:20:55:
88:6d:9c:68:d5:f8:6a:9d:a5:01:60:b6:7d:21:8a:
33:a2:5d:d8:be:f2:e5:1c:c2:6e:94:cf:98:04:f5:
d5:18:c9:b9:7a:f7:0e:ac:ad:bc:ee:e2:8a:6b:9a:
f4:da:57:ed:6f:f3:18:d9:a6:ee:4b:f7:ff:64:8e:
67:98:3d:3f:2c:cd:14:61:0e:a3:e4:4e:96:10:85:
ea:94:32:f2:1b:c6:0e:57:5a:c0:11:3c:3f:df:1b:
79:44:67:a1:ed:de:aa:f3:04:e3:95:0a:fc:88:92:
93:46:cd:19:cb:67:76:b8:b2:6c:fe:f0:a9:b0:d0:
23:13:e0:b9:91:6f:41:c4:47:4a:a0:49:61:b0:18:
ed:72:aa:f3:5b:b0:7e:d0:bb:e0:7f:01:96:24:cd:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0A:A7:DC:62:43:5E:A2:61:DA:E3:D0:24:61:F5:B0:E3:EF:BF:62
X509v3 Authority Key Identifier:
keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234372e302f32342d3234203d3e203532353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.247.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:05:0e:63:5c:cf:74:ef:7b:63:11:ee:eb:73:3e:07:2a:60:
cf:83:f5:6a:ab:a0:90:8d:27:ca:d1:d0:0c:ef:e8:96:51:d8:
95:7d:61:d0:5c:df:8a:ad:a6:9e:b3:da:9a:de:a8:6b:b5:0a:
78:e1:a2:bc:f5:bc:97:09:47:2e:08:47:04:d2:10:d2:6b:08:
15:cc:71:41:03:60:5e:e5:66:87:8a:1c:2d:a8:df:59:fc:b0:
72:35:dc:d3:86:91:30:9a:46:5e:66:2f:d8:5d:e2:9b:4e:8b:
fc:8a:c5:e4:d2:eb:d2:1f:7d:11:8d:df:52:01:93:1d:5b:aa:
20:94:be:d2:6e:03:3e:25:56:c5:61:f4:4d:19:65:06:25:e5:
7c:ef:45:8a:9d:38:9a:47:bf:ad:3f:df:15:6e:8b:a9:ed:fb:
c9:31:58:53:e6:5f:c5:c9:24:42:4a:c1:74:49:06:a0:6c:e5:
0e:15:e8:57:62:b9:ed:89:21:d0:b1:b0:96:fa:ee:be:04:8d:
42:8c:cc:ee:3c:e3:62:0a:3c:2c:55:bd:54:37:64:61:78:a1:
c8:65:c4:87:a9:b6:e8:e2:ea:97:6c:28:3b:08:e9:7c:20:96:
60:69:3d:2f:29:25:2a:e5:dc:84:dc:f5:7a:0f:43:3c:02:c6:
4e:5c:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:03 2025 by rpki-client