Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3230382e302f32312d3234203d3e203532323238.roa
File: 3138362e3135392e3230382e302f32312d3234203d3e203532323238.roa (raw, json)
Hash identifier: e+l+yfNowOphnV1vkHVBO9VSDLWeST5hmvk105cL7ZQ=
Subject key identifier: 55:B4:0B:74:A9:63:93:5B:15:B1:10:6C:16:49:2E:76:1C:E5:EB:BA
Certificate issuer: /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial: 6C78DDC99BE14BDACE995C5C046638A4A4B31D6A
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3230382e302f32312d3234203d3e203532323238.roa
Signing time: Tue 04 Feb 2025 18:01:47 +0000
ROA not before: Tue 04 Feb 2025 17:56:47 +0000
ROA not after: Tue 03 Feb 2026 18:01:47 +0000
asID: 52228
IP address blocks: 186.159.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:78:dd:c9:9b:e1:4b:da:ce:99:5c:5c:04:66:38:a4:a4:b3:1d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Validity
Not Before: Feb 4 17:56:47 2025 GMT
Not After : Feb 3 18:01:47 2026 GMT
Subject: CN=55B40B74A963935B15B1106C16492E761CE5EBBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:e7:ed:11:fd:24:f9:9d:a5:f7:f4:06:12:
c8:f4:1f:40:71:85:9a:59:6c:30:99:f8:35:96:6b:
1a:2a:b1:5a:43:1a:03:21:d1:eb:da:86:0f:e6:56:
0b:33:49:55:d0:8b:58:ab:85:b1:b6:b9:05:65:ba:
fe:2b:da:18:d5:1d:9c:82:06:c7:42:b4:7b:5a:f2:
19:b5:7c:8c:a3:5b:ed:cf:d2:9c:76:7f:87:63:da:
13:25:f5:78:f8:fd:88:6b:cd:4d:d3:14:1e:0b:0e:
3d:5c:63:a7:41:bd:ce:28:d1:61:72:70:36:50:93:
fe:1d:12:f9:cd:00:a3:c1:d9:91:d6:b5:2f:82:07:
85:92:4b:65:0e:9d:3f:c2:64:eb:4c:fd:c4:29:de:
1d:a0:92:42:e9:1c:ec:b6:c3:30:f0:2d:cc:8d:9a:
54:f8:bf:7d:bf:99:f3:a9:9f:9c:be:fd:63:4a:3d:
f6:f9:13:3a:72:8e:01:c7:6a:ff:b8:60:0c:e9:a4:
28:a6:24:31:fd:7d:22:8b:9d:6c:2e:ec:d6:f3:44:
90:b9:fc:8b:99:59:ec:6d:0a:78:14:70:94:6d:1f:
81:b3:62:cf:cb:ad:25:9c:17:0a:66:c4:4c:4a:ce:
6b:28:cc:1c:0e:e6:c5:95:60:6e:10:d2:26:7e:95:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B4:0B:74:A9:63:93:5B:15:B1:10:6C:16:49:2E:76:1C:E5:EB:BA
X509v3 Authority Key Identifier:
keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3230382e302f32312d3234203d3e203532323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.159.208.0/21
Signature Algorithm: sha256WithRSAEncryption
34:bd:c1:b2:44:f9:04:7e:99:fc:37:94:55:60:8c:34:e4:e8:
2f:86:3a:82:a9:b8:31:bb:32:e3:14:95:b9:b7:6a:bd:33:bc:
79:51:52:2b:cd:c5:01:fa:7d:90:b6:c3:c3:ce:81:57:f6:32:
da:43:24:2f:59:f1:66:60:0d:31:9a:d5:1d:0d:5f:82:c2:25:
02:6a:7b:b7:28:55:f1:97:5d:a7:28:c6:43:dc:44:ec:0e:e3:
48:26:8b:b7:3f:f1:8d:ae:ae:a2:20:71:9f:dd:09:c4:d4:86:
62:ed:76:ee:36:34:39:36:30:2e:c1:96:a7:70:3e:50:bd:a1:
6c:6b:a4:73:08:60:84:d3:83:d3:78:2d:59:34:24:1b:5f:bf:
a9:b3:4c:78:53:67:e9:7e:6e:f4:5c:90:4d:2d:a2:7e:20:55:
07:83:9f:75:63:d8:e4:03:4c:fd:db:18:d3:1b:db:09:b6:63:
25:9f:5c:26:7c:64:ad:92:45:77:03:18:1b:7b:19:6f:a5:a4:
b3:44:19:d5:88:6e:2a:13:59:cc:d9:f2:b7:bb:7e:bd:70:fc:
cb:fb:94:ba:ca:3e:8e:42:31:cd:b4:99:d0:e3:ab:ec:6d:dd:
85:7b:e2:32:08:3d:2f:65:f2:de:57:48:bf:e8:fc:db:cf:ab:
24:c8:2a:6e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbHjdyZvhS9rOmVxcBGY4pKSzHWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxMUFDQkE3MkU4MEMwMEZFQzEzRDMwQUM2NzYxMzhB
N0FDNDhDNzAeFw0yNTAyMDQxNzU2NDdaFw0yNjAyMDMxODAxNDdaMDMxMTAvBgNV
BAMTKDU1QjQwQjc0QTk2MzkzNUIxNUIxMTA2QzE2NDkyRTc2MUNFNUVCQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwm+ftEf0k+Z2l9/QGEsj0H0Bx
hZpZbDCZ+DWWaxoqsVpDGgMh0evahg/mVgszSVXQi1irhbG2uQVluv4r2hjVHZyC
BsdCtHta8hm1fIyjW+3P0px2f4dj2hMl9Xj4/YhrzU3TFB4LDj1cY6dBvc4o0WFy
cDZQk/4dEvnNAKPB2ZHWtS+CB4WSS2UOnT/CZOtM/cQp3h2gkkLpHOy2wzDwLcyN
mlT4v32/mfOpn5y+/WNKPfb5EzpyjgHHav+4YAzppCimJDH9fSKLnWwu7NbzRJC5
/IuZWextCngUcJRtH4GzYs/LrSWcFwpmxExKzmsozBwO5sWVYG4Q0iZ+lSVHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUVbQLdKljk1sVsRBsFkkudhzl67owHwYDVR0j
BBgwFoAU9RGsunLoDAD+wT0wrGdhOKesSMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQz
MzZDMEMzQkU3RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvRjUxMUFDQkE3MkU4MEMw
MEZFQzEzRDMwQUM2NzYxMzhBN0FDNDhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTExQUNCQTcyRTgwQzAwRkVD
MTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVBMUE0N0M4MkU1NDQzNTNFNEJEMzY3OUQyNTUyOEREMzM2QzBDM0JF
N0Y5QzhCODg0NTRFN0M0MTdCNjlGRi8wLzMxMzgzNjJlMzEzNTM5MmUzMjMwMzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMyMzIzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDup/Q
MA0GCSqGSIb3DQEBCwUAA4IBAQA0vcGyRPkEfpn8N5RVYIw05OgvhjqCqbgxuzLj
FJW5t2q9M7x5UVIrzcUB+n2QtsPDzoFX9jLaQyQvWfFmYA0xmtUdDV+CwiUCanu3
KFXxl12nKMZD3ETsDuNIJou3P/GNrq6iIHGf3QnE1IZi7XbuNjQ5NjAuwZancD5Q
vaFsa6RzCGCE04PTeC1ZNCQbX7+ps0x4U2fpfm70XJBNLaJ+IFUHg591Y9jkA0z9
2xjTG9sJtmMln1wmfGStkkV3AxgbexlvpaSzRBnViG4qE1nM2fK3u369cPzL+5S6
yj6OQjHNtJnQ46vsbd2Fe+IyCD0vZfLeV0i/6Pzbz6skyCpu
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:45 2025 by rpki-client