Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e38302e302f32312d3234203d3e203134373534.roa
File: 3138362e3135312e38302e302f32312d3234203d3e203134373534.roa (raw, json)
Hash identifier: 2n2bVV63wAAG51Rq/vUYLh5Q9d77S+8zGJsCG21hZWM=
Subject key identifier: 0C:33:55:FC:12:B8:CE:E2:BA:82:0B:8B:E6:AA:17:A9:1F:5C:0C:4D
Certificate issuer: /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial: 4C497C2F764A49CC315D91BEC7686A7D98413BC9
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e38302e302f32312d3234203d3e203134373534.roa
Signing time: Tue 04 Feb 2025 18:55:14 +0000
ROA not before: Tue 04 Feb 2025 18:50:14 +0000
ROA not after: Tue 03 Feb 2026 18:55:14 +0000
asID: 14754
IP address blocks: 186.151.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:49:7c:2f:76:4a:49:cc:31:5d:91:be:c7:68:6a:7d:98:41:3b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Validity
Not Before: Feb 4 18:50:14 2025 GMT
Not After : Feb 3 18:55:14 2026 GMT
Subject: CN=0C3355FC12B8CEE2BA820B8BE6AA17A91F5C0C4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:b6:15:ad:de:12:bf:93:bb:6e:35:a8:5b:
ec:b6:cc:cf:8b:c9:a1:a9:6f:df:f3:f9:d5:0c:74:
59:61:05:d2:f5:ed:1a:3a:e1:ae:aa:e7:9c:ed:c9:
55:5b:0f:ef:26:6c:55:07:36:f7:1c:01:5c:97:6f:
61:77:67:6b:88:04:5a:a8:c5:71:42:62:c9:64:5b:
e2:1f:1c:43:0f:ed:6c:d9:19:0e:57:03:06:87:5f:
ca:bc:74:f1:b7:84:4e:c9:4b:c6:c0:dc:4f:c7:4f:
e9:b3:ad:e6:03:46:11:4a:4e:7a:a6:a8:37:0b:7b:
41:c3:62:6a:ca:9e:06:d6:4d:52:11:80:10:03:04:
99:90:4a:15:ab:aa:df:6d:ef:7f:73:8b:58:e0:1d:
62:e4:6b:cd:40:ab:98:17:fb:d9:6a:df:56:79:74:
6a:04:2a:bf:1c:a8:db:6f:8c:9e:b5:d9:5d:06:35:
af:e4:bd:08:78:14:a1:1f:8e:72:77:0d:c7:f9:66:
d0:a5:0c:b9:b6:d9:2d:61:4f:aa:cc:e0:33:2e:bb:
62:6b:b6:89:92:8c:4d:d5:97:82:78:4d:f0:7a:26:
b1:b1:7e:ea:be:ab:37:38:43:01:de:b8:cd:c5:3d:
b9:fc:4d:8d:c2:bf:49:72:f9:b4:1d:b5:2c:08:c6:
04:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:55:FC:12:B8:CE:E2:BA:82:0B:8B:E6:AA:17:A9:1F:5C:0C:4D
X509v3 Authority Key Identifier:
keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e38302e302f32312d3234203d3e203134373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.151.80.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:26:aa:84:62:51:10:04:e2:f9:5c:b9:a8:55:9b:4b:e7:c1:
85:a4:ed:a9:82:6a:4b:9d:b8:3b:4c:54:34:7d:3a:f4:bd:e4:
62:2f:c9:2a:9d:0f:68:e8:ca:95:5a:1f:b6:c7:64:fb:e6:be:
fd:35:8d:cb:6a:93:96:eb:0d:57:3e:bd:e2:84:ee:65:1f:36:
50:34:b2:db:f4:e0:35:6c:7d:81:bc:46:d2:fc:6d:bf:37:f3:
83:62:d5:c4:4c:b4:41:79:01:c6:0e:fa:3a:03:e9:a1:b4:61:
a9:a4:41:9c:21:90:10:e0:47:61:01:e7:77:56:10:c4:9b:c8:
a3:78:c8:35:ee:7a:06:a2:e5:a7:69:df:31:74:d4:aa:30:f0:
b0:18:28:c4:72:ff:5f:60:2a:54:76:0a:a1:59:bd:60:bb:dc:
31:35:b0:68:6a:56:54:cd:be:11:7b:b9:19:ac:99:82:0b:06:
29:17:57:f5:3b:6b:32:aa:9b:bd:56:58:81:58:dd:83:63:dd:
6d:20:9a:d3:b3:16:7d:ff:c2:f5:58:41:1b:54:b5:d4:05:b7:
dd:36:be:69:65:b3:87:30:44:12:89:24:36:e2:78:e3:08:63:
2f:57:d9:aa:f8:b9:d6:d0:12:48:41:63:11:2b:ee:bf:e0:5d:
c5:d9:9a:a7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTEl8L3ZKScwxXZG+x2hqfZhBO8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNTAyMDQxODUwMTRaFw0yNjAyMDMxODU1MTRaMDMxMTAvBgNV
BAMTKDBDMzM1NUZDMTJCOENFRTJCQTgyMEI4QkU2QUExN0E5MUY1QzBDNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CbYVrd4Sv5O7bjWoW+y2zM+L
yaGpb9/z+dUMdFlhBdL17Ro64a6q55ztyVVbD+8mbFUHNvccAVyXb2F3Z2uIBFqo
xXFCYslkW+IfHEMP7WzZGQ5XAwaHX8q8dPG3hE7JS8bA3E/HT+mzreYDRhFKTnqm
qDcLe0HDYmrKngbWTVIRgBADBJmQShWrqt9t739zi1jgHWLka81Aq5gX+9lq31Z5
dGoEKr8cqNtvjJ612V0GNa/kvQh4FKEfjnJ3Dcf5ZtClDLm22S1hT6rM4DMuu2Jr
tomSjE3Vl4J4TfB6JrGxfuq+qzc4QwHeuM3FPbn8TY3Cv0ly+bQdtSwIxgR7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDDNV/BK4zuK6gguL5qoXqR9cDE0wHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzgzNjJlMzEzNTMxMmUzODMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzNDM3MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7qXUDAN
BgkqhkiG9w0BAQsFAAOCAQEAiiaqhGJREATi+Vy5qFWbS+fBhaTtqYJqS524O0xU
NH069L3kYi/JKp0PaOjKlVoftsdk++a+/TWNy2qTlusNVz694oTuZR82UDSy2/Tg
NWx9gbxG0vxtvzfzg2LVxEy0QXkBxg76OgPpobRhqaRBnCGQEOBHYQHnd1YQxJvI
o3jINe56BqLlp2nfMXTUqjDwsBgoxHL/X2AqVHYKoVm9YLvcMTWwaGpWVM2+EXu5
GayZggsGKRdX9TtrMqqbvVZYgVjdg2PdbSCa07MWff/C9VhBG1S11AW33Ta+aWWz
hzBEEokkNuJ44whjL1fZqvi51tASSEFjESvuv+Bdxdmapw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:30:19 2025 by rpki-client