Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/3133382e3131372e382e302f32322d3234203d3e20323633373534.roa
File: 3133382e3131372e382e302f32322d3234203d3e20323633373534.roa (raw, json)
Hash identifier: 244XroH2TeyTVpQuJhB0wZO+Bl9Faapk0u3iyKJSNRo=
Subject key identifier: 86:5D:4A:3B:47:E2:C3:E8:EF:07:39:E3:34:23:53:00:70:7A:95:55
Certificate issuer: /CN=57696D227BF558822356A541E87E2F70E2A214E2
Certificate serial: 556CF52126BBE8B1D0430B0517E9158773BEA262
Authority key identifier: 57:69:6D:22:7B:F5:58:82:23:56:A5:41:E8:7E:2F:70:E2:A2:14:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/3133382e3131372e382e302f32322d3234203d3e20323633373534.roa
Signing time: Tue 04 Feb 2025 18:50:01 +0000
ROA not before: Tue 04 Feb 2025 18:45:01 +0000
ROA not after: Tue 03 Feb 2026 18:50:01 +0000
asID: 263754
IP address blocks: 138.117.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6c:f5:21:26:bb:e8:b1:d0:43:0b:05:17:e9:15:87:73:be:a2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57696D227BF558822356A541E87E2F70E2A214E2
Validity
Not Before: Feb 4 18:45:01 2025 GMT
Not After : Feb 3 18:50:01 2026 GMT
Subject: CN=865D4A3B47E2C3E8EF0739E334235300707A9555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d0:0f:e8:33:da:a0:f8:10:2a:50:67:c9:70:
14:f4:bf:e0:ef:68:50:f2:53:9e:38:aa:4b:c6:df:
75:f9:0d:2d:f7:f2:df:6e:db:f4:67:3e:bb:16:f4:
1d:23:3f:63:3d:6d:d3:2f:a7:b0:96:11:d9:72:86:
7c:a2:e6:16:4e:06:a6:43:7c:29:d0:0b:7d:62:26:
32:89:e2:b1:89:ad:4b:04:48:4c:e8:00:52:f8:5b:
46:61:55:f1:6d:bb:3d:69:d2:a5:f2:c0:81:c5:74:
e1:9a:fe:16:8f:77:6e:ee:83:a2:43:30:17:aa:94:
51:6a:e8:d0:88:d3:ea:79:45:d2:af:3e:6d:10:65:
44:b6:ab:c8:1f:cf:2d:50:b8:48:89:75:cf:c2:0e:
db:b3:30:9f:d8:56:4e:17:3f:41:c7:7f:27:6a:0c:
f5:3f:5e:a5:08:30:78:91:e0:b6:c9:e8:5d:47:9f:
08:42:06:6e:0f:01:7c:de:61:25:70:61:e3:ac:2c:
ed:8e:e4:e6:6a:eb:31:cf:8c:cf:70:93:f4:85:4b:
95:7e:70:05:8a:11:76:55:d8:41:25:67:7f:7a:4b:
40:ae:bf:5b:36:50:9d:99:0b:59:1b:0f:0d:ab:cb:
3b:03:bc:76:ef:35:a5:a3:06:7b:ba:24:78:91:04:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:4A:3B:47:E2:C3:E8:EF:07:39:E3:34:23:53:00:70:7A:95:55
X509v3 Authority Key Identifier:
keyid:57:69:6D:22:7B:F5:58:82:23:56:A5:41:E8:7E:2F:70:E2:A2:14:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/57696D227BF558822356A541E87E2F70E2A214E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/3133382e3131372e382e302f32322d3234203d3e20323633373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.8.0/22
Signature Algorithm: sha256WithRSAEncryption
72:65:51:f8:fc:75:50:1d:2d:03:94:9c:ba:19:f0:0a:35:67:
c4:99:4d:c5:f4:ff:31:65:a8:36:65:7b:cc:7d:b8:df:1b:03:
d3:f7:a4:86:fa:ad:97:e7:1c:6f:10:03:4a:a0:df:26:4f:e9:
aa:a4:ff:0e:2c:67:cc:8b:ce:9c:a3:b2:25:43:bf:23:a8:e8:
ea:e2:9f:95:57:33:1f:a9:55:54:f7:46:88:f4:3f:6e:03:be:
94:4a:f5:d9:df:f6:fd:21:67:ef:88:f4:c2:fb:f9:83:77:61:
b4:3b:26:4d:71:ec:5b:7f:5c:f6:72:4d:a6:57:28:51:3e:1f:
69:fa:96:49:c0:f1:47:a9:4e:15:93:6b:9c:cc:d7:e3:1f:5e:
01:b0:f7:59:ed:9a:a8:0c:2f:73:d5:95:09:0e:c5:6a:55:ba:
be:af:94:ce:67:b4:f8:47:64:fd:29:81:87:31:d7:ca:f2:77:
7f:13:35:d8:e1:38:4b:74:07:b0:6d:76:16:9e:6d:a9:46:34:
49:66:12:70:53:4b:84:14:b6:7b:24:8b:5e:77:d6:72:90:1f:
20:99:62:76:eb:4e:e5:a6:d7:9e:72:c3:b2:cf:2e:cb:ac:3a:
9b:70:33:be:fa:ed:be:43:24:5d:da:77:ac:10:76:49:5f:d4:
9c:29:4f:a0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVWz1ISa76LHQQwsFF+kVh3O+omIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc2OTZEMjI3QkY1NTg4MjIzNTZBNTQxRTg3RTJGNzBF
MkEyMTRFMjAeFw0yNTAyMDQxODQ1MDFaFw0yNjAyMDMxODUwMDFaMDMxMTAvBgNV
BAMTKDg2NUQ0QTNCNDdFMkMzRThFRjA3MzlFMzM0MjM1MzAwNzA3QTk1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr0A/oM9qg+BAqUGfJcBT0v+Dv
aFDyU544qkvG33X5DS338t9u2/RnPrsW9B0jP2M9bdMvp7CWEdlyhnyi5hZOBqZD
fCnQC31iJjKJ4rGJrUsESEzoAFL4W0ZhVfFtuz1p0qXywIHFdOGa/haPd27ug6JD
MBeqlFFq6NCI0+p5RdKvPm0QZUS2q8gfzy1QuEiJdc/CDtuzMJ/YVk4XP0HHfydq
DPU/XqUIMHiR4LbJ6F1HnwhCBm4PAXzeYSVwYeOsLO2O5OZq6zHPjM9wk/SFS5V+
cAWKEXZV2EElZ396S0Cuv1s2UJ2ZC1kbDw2ryzsDvHbvNaWjBnu6JHiRBKdnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhl1KO0fiw+jvBznjNCNTAHB6lVUwHwYDVR0j
BBgwFoAUV2ltInv1WIIjVqVB6H4vcOKiFOIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDREMTNCM0YzNUM2RkREQ0UxRjg0RkZGOTExQzc3QTRD
MTM3NUJFNERDODhEMkY5RTU5MzIwMzRBQkU0NDE4LzAvNTc2OTZEMjI3QkY1NTg4
MjIzNTZBNTQxRTg3RTJGNzBFMkEyMTRFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NzY5NkQyMjdCRjU1ODgyMjM1
NkE1NDFFODdFMkY3MEUyQTIxNEUyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ0RDEzQjNGMzVDNkZERENFMUY4NEZGRjkxMUM3N0E0QzEzNzVCRTRE
Qzg4RDJGOUU1OTMyMDM0QUJFNDQxOC8wLzMxMzMzODJlMzEzMTM3MmUzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMzM3MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAop1CDAN
BgkqhkiG9w0BAQsFAAOCAQEAcmVR+Px1UB0tA5ScuhnwCjVnxJlNxfT/MWWoNmV7
zH243xsD0/ekhvqtl+ccbxADSqDfJk/pqqT/DixnzIvOnKOyJUO/I6jo6uKflVcz
H6lVVPdGiPQ/bgO+lEr12d/2/SFn74j0wvv5g3dhtDsmTXHsW39c9nJNplcoUT4f
afqWScDxR6lOFZNrnMzX4x9eAbD3We2aqAwvc9WVCQ7FalW6vq+Uzme0+Edk/SmB
hzHXyvJ3fxM12OE4S3QHsG12Fp5tqUY0SWYScFNLhBS2eySLXnfWcpAfIJlidutO
5abXnnLDss8uy6w6m3AzvvrtvkMkXdp3rBB2SV/UnClPoA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:06 2025 by rpki-client