Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa
File: 3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa (raw, json)
Hash identifier: m940lrXkxfr6hjgwInLsSgm5+wf4t/PD/KXStYoXlkQ=
Subject key identifier: F3:95:AB:B7:2F:EB:14:11:ED:EC:44:CF:CB:AD:49:57:26:1F:F4:0F
Certificate issuer: /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial: 252842F374F921B04CEAF96DF378E6EA9CA3C746
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa
Signing time: Tue 04 Feb 2025 18:35:04 +0000
ROA not before: Tue 04 Feb 2025 18:30:04 +0000
ROA not after: Tue 03 Feb 2026 18:35:04 +0000
asID: 61520
IP address blocks: 138.204.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:28:42:f3:74:f9:21:b0:4c:ea:f9:6d:f3:78:e6:ea:9c:a3:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Validity
Not Before: Feb 4 18:30:04 2025 GMT
Not After : Feb 3 18:35:04 2026 GMT
Subject: CN=F395ABB72FEB1411EDEC44CFCBAD4957261FF40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:27:4d:6e:77:f7:53:9c:75:f5:88:f2:3f:
01:67:6d:de:c2:55:b1:a4:47:5e:e5:55:01:5a:91:
4f:4a:b2:08:8d:07:0a:9f:4e:44:32:cb:6c:5c:0a:
48:63:7e:c4:9f:89:b2:97:62:37:8a:6b:aa:e3:b5:
da:1e:3b:95:c4:97:53:ea:2b:c3:28:90:96:13:b5:
84:eb:18:85:e4:74:95:73:3a:c2:3d:f1:ad:46:b8:
a0:b1:2a:3e:1f:2f:13:86:b9:bc:ec:4f:a5:89:3d:
d6:8d:df:2e:3d:e3:82:f3:0b:62:70:c3:55:4b:bb:
77:8f:25:c4:c1:29:25:d3:33:f7:40:50:b7:3e:00:
a8:cb:89:55:4f:b0:66:0e:b1:d2:e3:f4:7d:2a:2d:
d6:f9:70:4a:11:14:41:73:e6:8f:5d:0d:0c:31:10:
4d:5b:be:88:2a:e6:38:fa:12:b4:01:54:d4:9f:cb:
ce:f1:21:8e:fc:2d:d2:35:85:3b:70:a4:df:f0:62:
70:80:2c:f4:2d:6b:f3:05:92:14:cf:ce:e0:81:bc:
3b:0e:61:c3:81:d1:7e:57:e4:51:e7:44:33:f3:87:
5e:93:f4:14:dc:a1:2d:df:29:e2:17:95:98:87:53:
dd:52:29:66:a8:49:66:80:ab:09:fa:de:94:68:ed:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:95:AB:B7:2F:EB:14:11:ED:EC:44:CF:CB:AD:49:57:26:1F:F4:0F
X509v3 Authority Key Identifier:
keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ee:19:55:b2:36:34:a0:95:0c:61:29:5d:1e:ee:51:57:11:
26:42:1b:df:e4:0b:cf:5d:52:d5:2d:6f:d1:d6:32:38:5b:22:
14:58:54:67:3d:8a:f2:5d:a0:c4:f3:79:84:8a:65:1e:a8:23:
3a:f5:c4:96:1d:0c:20:fb:bd:56:2c:4d:1f:77:6c:e7:8b:33:
0e:b3:15:8f:d1:3f:fb:ec:ed:be:36:89:d2:18:ed:45:01:f7:
31:4c:6e:c3:b0:b3:88:19:09:d6:98:ac:11:d0:87:f7:ce:00:
7b:2f:51:26:a1:ca:75:0d:e7:0a:a8:29:d0:8c:82:a0:07:e8:
c4:46:f2:02:2c:02:e0:23:58:90:b0:f7:af:07:40:e4:7e:26:
41:f5:62:a8:c3:28:b3:c5:8f:b6:56:6f:99:c3:57:92:60:52:
2c:dc:44:f2:34:7c:c9:66:ba:87:3a:d0:99:75:d6:bd:c7:e2:
e5:0e:7e:46:82:89:32:61:8b:4d:ad:ad:9b:fc:a9:fb:eb:df:
38:60:77:2a:4f:93:ac:63:6d:a8:e7:ab:8c:71:28:37:af:ff:
bd:59:af:bd:b2:e5:0a:e4:d2:9d:e7:af:c6:0c:57:a0:79:d4:
86:07:b3:df:1f:86:13:f9:28:36:e4:3b:f5:d0:5d:6e:ac:91:
2c:52:17:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:01 2025 by rpki-client