Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39392e302f32342d3234203d3e20323633383037.roa
File: 3133382e3235352e39392e302f32342d3234203d3e20323633383037.roa (raw, json)
Hash identifier: 4NLmZ+eeFxjWyxHy5k7rU0AqTc1BHVOFHMboq6BEEw0=
Subject key identifier: 7B:97:8E:A7:AD:77:5D:85:8D:46:81:C0:B6:56:C6:A7:81:66:45:67
Certificate issuer: /CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F
Certificate serial: 11A48468AD4188B199B615D0BB5B8EDDD8CCB6FC
Authority key identifier: 3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39392e302f32342d3234203d3e20323633383037.roa
Signing time: Tue 04 Feb 2025 18:34:40 +0000
ROA not before: Tue 04 Feb 2025 18:29:40 +0000
ROA not after: Tue 03 Feb 2026 18:34:40 +0000
asID: 263807
IP address blocks: 138.255.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:a4:84:68:ad:41:88:b1:99:b6:15:d0:bb:5b:8e:dd:d8:cc:b6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F
Validity
Not Before: Feb 4 18:29:40 2025 GMT
Not After : Feb 3 18:34:40 2026 GMT
Subject: CN=7B978EA7AD775D858D4681C0B656C6A781664567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:71:79:2c:aa:b7:f0:71:85:27:02:90:59:
73:0a:d0:20:68:c4:9a:0d:9a:1b:60:f5:f5:1c:d1:
e6:25:9f:5b:f6:ed:09:a4:4c:be:72:2e:fe:fa:1c:
5c:7e:c3:16:45:c3:bc:15:95:20:fd:31:5d:03:ab:
91:8f:e8:cf:c3:d7:c4:43:34:3c:53:c1:bf:eb:1a:
e9:78:2b:fa:c2:b9:f4:c6:03:26:3e:95:87:d3:99:
e8:f6:0e:8b:33:4d:20:30:22:2d:7c:59:71:0c:5c:
b5:90:26:3e:ed:f5:25:7f:c5:2a:71:37:f3:fe:dc:
e7:ea:69:3d:2b:b4:67:4c:bf:3a:4a:e4:25:96:5b:
f8:ec:f3:7c:49:7b:ec:b2:5d:5d:2d:1f:22:b3:88:
1a:0c:fd:85:c0:8a:09:d3:97:84:c3:cd:ab:a2:e6:
41:43:11:ca:d0:73:fd:58:cd:30:30:c4:23:f5:ad:
2c:13:7b:ae:89:b6:13:6d:34:c3:d0:74:af:d7:fc:
83:da:bd:bb:2b:e0:29:bf:70:96:2f:65:3e:a7:ea:
47:39:4a:16:1f:4f:9b:8f:a1:be:c2:47:39:de:28:
92:cb:a6:5f:6f:12:0b:fa:fe:3a:f6:40:5d:5a:62:
ed:1e:b9:6a:e6:f5:0f:1f:2f:03:5b:59:78:ad:94:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:97:8E:A7:AD:77:5D:85:8D:46:81:C0:B6:56:C6:A7:81:66:45:67
X509v3 Authority Key Identifier:
keyid:3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39392e302f32342d3234203d3e20323633383037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.99.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:65:f5:15:67:42:cd:6d:6e:49:c7:45:e2:ed:18:62:07:23:
60:cf:a1:ad:d7:80:7c:41:f0:6b:fb:28:be:01:e0:33:6a:58:
ce:4f:4b:c5:d7:f4:2d:4c:33:b9:fe:03:02:67:61:3f:d5:41:
c9:a8:84:98:7c:41:0c:f2:42:c6:2d:8d:79:e8:c8:db:1a:ec:
f0:9d:1c:e8:32:16:8d:78:ac:c7:a8:b2:71:83:7e:ed:3f:11:
35:46:22:3f:6b:05:5c:8a:45:d8:4a:ef:69:ed:0f:6b:9f:39:
c1:d9:33:38:67:42:2b:89:3e:9a:f5:a8:f6:29:12:41:5d:fd:
63:ec:d7:09:b5:5a:e8:e7:a9:49:85:dc:b6:ab:8b:10:c4:3a:
bc:f4:18:34:1b:9d:9d:88:54:e9:db:fc:b1:d7:e2:f3:2e:11:
7d:27:d4:dc:97:2b:29:b8:b6:19:0c:f0:95:7c:c2:1b:ba:29:
73:46:27:63:d5:03:68:49:7c:cc:79:4e:2b:35:2d:9e:3a:cb:
67:28:0c:1f:3d:9e:ed:af:aa:3f:6e:11:29:96:40:4d:37:90:
b4:20:a9:97:2f:90:e5:24:79:ca:f5:e4:ff:b8:3f:d3:c3:da:
b3:b2:c4:16:5c:d4:e3:d7:0f:f3:d1:61:f2:d0:88:60:44:2d:
36:ab:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:04 2025 by rpki-client