Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3231392e302e302f32342d3234203d3e203631343935.roa
File: 3133382e3231392e302e302f32342d3234203d3e203631343935.roa (raw, json)
Hash identifier: lGVlYCxJYV0L7+zm/4B3jXoKwNH4YgeDBCkIuJBRnvY=
Subject key identifier: A1:64:A2:55:22:09:74:D3:97:F8:7C:04:69:60:06:C6:F9:5C:6D:70
Certificate issuer: /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial: 1E21699C76E694E14C2F95AA484229507CB579D0
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3231392e302e302f32342d3234203d3e203631343935.roa
Signing time: Tue 04 Feb 2025 18:35:19 +0000
ROA not before: Tue 04 Feb 2025 18:30:19 +0000
ROA not after: Tue 03 Feb 2026 18:35:19 +0000
asID: 61495
IP address blocks: 138.219.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:21:69:9c:76:e6:94:e1:4c:2f:95:aa:48:42:29:50:7c:b5:79:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Validity
Not Before: Feb 4 18:30:19 2025 GMT
Not After : Feb 3 18:35:19 2026 GMT
Subject: CN=A164A255220974D397F87C04696006C6F95C6D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:5b:1f:ee:3a:31:b9:c3:ad:2b:49:05:32:
da:1f:af:b5:81:97:11:23:8f:a1:56:58:cf:18:93:
38:66:4d:de:b9:b5:38:70:31:96:80:ce:59:e6:44:
bd:f8:0d:27:22:4a:e5:89:8b:ed:1e:cd:ab:92:ec:
07:a5:85:b2:b1:df:05:a4:01:35:03:6f:ad:89:6a:
53:2b:3c:9f:23:d3:88:c2:02:1e:f3:b6:8d:a1:c0:
04:0c:12:09:02:9f:28:ca:2f:0b:73:b7:f5:9f:58:
10:04:af:69:39:7f:09:ff:2f:d4:59:b1:df:f5:7b:
c3:89:7f:e2:c2:fa:15:cf:dc:1e:7e:0f:8b:fd:6f:
33:b1:4c:c0:a9:52:7e:d5:3f:33:24:2e:d7:b9:be:
c0:63:55:f3:ad:c8:61:9f:8c:26:d7:c2:a4:17:00:
84:ea:e9:81:d9:51:6f:26:9f:9a:29:63:de:18:56:
fb:1c:d6:bf:27:4f:19:8b:45:62:ef:8d:30:51:b1:
9d:f7:02:95:ac:90:8f:6f:47:5a:14:82:38:70:1c:
f8:c3:3d:24:2f:d1:6a:64:6b:7e:9f:51:90:6d:e7:
31:62:8d:5f:e0:a8:8c:9c:f0:8b:81:ec:06:29:8e:
24:92:7f:0b:39:7b:2e:d7:28:9d:90:6b:e8:b4:4c:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:A2:55:22:09:74:D3:97:F8:7C:04:69:60:06:C6:F9:5C:6D:70
X509v3 Authority Key Identifier:
keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3231392e302e302f32342d3234203d3e203631343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:36:21:bf:aa:69:32:6e:93:e1:69:34:f1:16:13:d1:48:cd:
c4:c4:87:8c:ad:25:1f:ac:16:cf:5e:b5:7d:be:11:8b:da:dc:
b4:a9:c2:e8:7f:31:a9:00:f1:25:53:d5:47:d3:db:a1:70:31:
d1:08:c6:f9:22:07:77:4b:23:5e:8e:61:29:a1:af:0c:c5:f1:
90:3f:c0:90:6d:0b:81:12:4a:38:a7:3d:43:b1:ff:88:08:5d:
5b:a9:57:33:7b:52:fc:da:41:74:f7:f1:a1:7d:0c:93:f0:63:
57:7d:a6:95:9a:f5:d7:92:c0:d2:89:e2:39:6d:c3:b7:f9:83:
34:af:29:0f:47:66:d4:48:1a:fd:36:21:8e:80:31:e7:65:dc:
4f:64:bf:f6:c7:3f:63:ce:98:56:67:fd:55:1d:c9:87:0c:24:
29:4c:57:3d:67:36:3e:aa:14:3c:5a:c1:dc:e8:6e:e7:d2:5c:
d7:59:1d:d8:20:12:cb:c3:4c:b5:76:bb:a3:50:47:4d:10:28:
f7:f1:d0:ee:f3:e2:41:a4:11:93:fc:43:ba:86:69:dc:12:6f:
d4:59:16:02:f2:5b:4e:06:cd:d3:9a:d3:5c:60:45:3d:57:28:
3c:93:c9:19:27:11:06:6e:18:ae:ac:e0:d2:0a:bc:2a:03:5d:
6d:54:e3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:05 2025 by rpki-client