Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3133382e3131382e33362e302f32322d3234203d3e203532333038.roa
File: 3133382e3131382e33362e302f32322d3234203d3e203532333038.roa (raw, json)
Hash identifier: kXnaR1Ov0S9SRbYrnIUmNoB65AGOwZ6RCv++/ZybFo4=
Subject key identifier: 2F:35:F7:52:C0:03:A3:C1:4A:FF:62:92:92:4F:8F:9C:F0:07:CD:18
Certificate issuer: /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial: 72464F6D92AA3EE199221D96AC6935B52E21BC78
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3133382e3131382e33362e302f32322d3234203d3e203532333038.roa
Signing time: Tue 04 Feb 2025 18:26:35 +0000
ROA not before: Tue 04 Feb 2025 18:21:35 +0000
ROA not after: Tue 03 Feb 2026 18:26:35 +0000
asID: 52308
IP address blocks: 138.118.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:46:4f:6d:92:aa:3e:e1:99:22:1d:96:ac:69:35:b5:2e:21:bc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Validity
Not Before: Feb 4 18:21:35 2025 GMT
Not After : Feb 3 18:26:35 2026 GMT
Subject: CN=2F35F752C003A3C14AFF6292924F8F9CF007CD18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:ad:96:39:95:36:41:d7:4f:5b:eb:4e:34:
94:f5:f4:0f:12:a8:22:38:d1:2c:79:60:83:a9:e7:
68:ca:70:01:ae:e4:20:0a:68:6a:37:14:32:40:a0:
8d:67:1c:21:1c:b1:10:d4:a8:c9:4b:aa:39:9c:30:
3d:51:5f:3a:c1:9d:91:d4:b2:10:b7:06:59:70:cc:
4b:93:73:c1:43:98:04:66:4d:d1:3b:29:44:71:1f:
26:b1:e3:87:10:13:e5:c6:8f:7e:71:11:c8:4f:94:
40:b4:00:00:6b:63:f2:7f:db:7b:f3:c8:8d:2a:12:
1d:69:65:68:a6:3a:b0:46:dc:74:f5:db:b6:95:4b:
b5:07:28:5c:6a:1b:cf:77:e8:39:79:a4:5e:fc:27:
45:61:85:72:e9:c3:24:6e:b9:4b:cb:b1:72:d2:fd:
22:44:c0:c6:0b:37:0a:e9:70:86:f2:74:7f:f2:35:
6d:f1:84:b4:4d:f4:0e:9d:08:fc:08:9b:93:89:e3:
70:a4:18:52:69:cf:76:0c:0e:01:12:e3:6b:68:28:
b1:25:02:50:61:06:3a:d4:1b:05:9e:83:82:5c:fe:
24:ae:50:87:65:00:05:c3:1c:3c:52:53:e3:a9:d0:
bb:73:24:b2:08:40:55:e8:68:08:fe:a3:3a:23:24:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:35:F7:52:C0:03:A3:C1:4A:FF:62:92:92:4F:8F:9C:F0:07:CD:18
X509v3 Authority Key Identifier:
keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3133382e3131382e33362e302f32322d3234203d3e203532333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.36.0/22
Signature Algorithm: sha256WithRSAEncryption
22:8c:e1:c9:39:62:c7:cf:21:3f:b5:08:71:be:7f:85:79:69:
b3:5d:83:fb:60:f0:e0:6b:9d:34:25:11:47:2c:c8:5a:d1:08:
9d:8f:a1:52:fd:71:9f:f9:27:e1:c1:e2:41:03:ca:ff:c7:ff:
14:9d:4e:89:2e:e2:ee:df:3a:e8:d8:c0:fd:71:0e:d2:d9:3d:
53:c8:53:4f:f1:72:af:5a:a5:ae:32:46:40:e1:cc:6b:85:5a:
6a:47:d1:e4:30:15:2a:93:9d:28:4f:9a:8c:ee:fd:ee:48:d8:
79:69:dc:4a:f2:87:c1:b3:b1:36:8f:1f:dc:f9:06:ac:ce:b5:
2a:3e:54:c0:20:87:87:60:13:1a:47:d2:f4:49:6e:18:78:68:
e6:51:b2:db:e7:0f:9f:ff:09:f8:c9:a5:7f:e1:70:fc:20:10:
1d:b4:f3:f6:f2:be:b1:b4:15:e6:fd:0b:9c:e2:4b:48:32:6b:
91:58:3f:18:b3:f6:c0:ef:a8:3b:ce:38:15:11:d2:2d:51:bb:
0c:70:05:17:af:d8:af:b1:8d:b9:4c:09:c7:47:97:78:f0:e1:
aa:f5:64:26:6c:9b:25:f4:37:94:53:26:4e:2d:81:92:da:10:
c1:f5:73:5d:7f:9a:9b:f0:b8:ea:f9:60:0a:11:bb:76:2d:21:
7a:ae:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:13 2025 by rpki-client