Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/3133382e39372e3134302e302f32322d3234203d3e203237373239.roa
File: 3133382e39372e3134302e302f32322d3234203d3e203237373239.roa (raw, json)
Hash identifier: NCTR09p6byZCshwLENfYUF8BC4lFErOVDp4k85booWM=
Subject key identifier: 4F:93:23:8F:E7:74:A4:3C:20:81:9B:03:81:63:01:05:36:49:8F:7A
Certificate issuer: /CN=CB8CD2550789B77DC4B972AE0BBC01A92255500D
Certificate serial: 3E4ABA26C398801429773E2C917B6769A65411DF
Authority key identifier: CB:8C:D2:55:07:89:B7:7D:C4:B9:72:AE:0B:BC:01:A9:22:55:50:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/3133382e39372e3134302e302f32322d3234203d3e203237373239.roa
Signing time: Tue 04 Feb 2025 18:11:05 +0000
ROA not before: Tue 04 Feb 2025 18:06:05 +0000
ROA not after: Tue 03 Feb 2026 18:11:05 +0000
asID: 27729
IP address blocks: 138.97.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:4a:ba:26:c3:98:80:14:29:77:3e:2c:91:7b:67:69:a6:54:11:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB8CD2550789B77DC4B972AE0BBC01A92255500D
Validity
Not Before: Feb 4 18:06:05 2025 GMT
Not After : Feb 3 18:11:05 2026 GMT
Subject: CN=4F93238FE774A43C20819B038163010536498F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:d9:37:61:a6:60:bc:71:d1:1c:3f:4e:8e:
c6:e6:2f:a9:d0:52:d0:0b:8a:4f:a1:81:27:b3:7e:
f2:3b:9c:46:37:b6:73:0a:49:3a:ac:38:98:64:bd:
bf:38:e9:bc:8c:9e:5a:d6:cd:1e:6c:6f:f2:1b:dd:
31:51:8c:4e:3b:a9:c5:60:48:47:df:ac:7f:b3:f5:
e4:6a:46:17:32:34:e8:1e:54:d9:18:08:ba:1c:3c:
f6:e8:78:ba:53:7f:0b:56:af:ed:50:07:1c:ca:8d:
a2:47:75:f3:f2:77:86:74:b5:37:df:43:21:45:60:
97:72:0d:ac:6d:e4:26:96:49:74:97:be:27:a7:02:
fa:7e:97:9d:33:1a:23:98:9e:47:3c:77:2b:86:46:
8b:1c:5f:ef:38:19:f5:c2:bf:7b:e6:21:95:bd:2d:
e6:8d:bc:f5:a2:83:4a:40:fa:a7:d7:c5:97:b6:71:
1d:74:d8:97:cd:85:d8:3d:79:af:13:bf:04:67:f7:
6b:63:d0:93:4a:f7:e5:44:d7:e4:42:87:1c:71:03:
f0:80:a5:41:f7:c3:27:ca:9b:57:96:40:83:e5:c3:
62:b3:ba:2b:c6:55:d8:47:79:a7:61:09:fe:dd:a7:
97:04:31:89:35:71:3e:30:be:43:a5:f5:c6:fb:9f:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:93:23:8F:E7:74:A4:3C:20:81:9B:03:81:63:01:05:36:49:8F:7A
X509v3 Authority Key Identifier:
keyid:CB:8C:D2:55:07:89:B7:7D:C4:B9:72:AE:0B:BC:01:A9:22:55:50:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/3133382e39372e3134302e302f32322d3234203d3e203237373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:f1:38:f0:df:3a:84:99:8b:1f:33:d6:f3:61:1b:94:ce:b1:
1f:13:f2:7c:2c:ab:ad:8a:1d:7d:4d:5c:ee:7d:44:9c:14:e9:
e8:51:c0:20:5a:bc:67:d9:25:23:d9:bc:a0:23:7e:38:ab:e7:
c1:bc:fa:45:a9:68:9c:09:7a:7b:5d:a2:b1:cd:18:03:1a:32:
4f:1f:bd:f9:2c:7f:6f:37:e2:f5:e9:cb:a6:ea:79:a5:f3:05:
03:46:46:75:8a:b0:03:65:c5:56:5c:73:fb:ec:0a:7c:64:12:
4a:98:e1:7b:7f:c5:2d:d3:d4:fb:be:61:3a:d8:11:e0:02:4a:
c3:58:59:40:12:b8:f5:4f:46:74:33:cc:b6:71:bc:eb:26:86:
f5:06:83:28:7f:91:60:9b:f8:70:a7:d4:02:2e:38:cb:90:d7:
98:a4:eb:ca:52:fc:bd:2d:01:77:e3:51:10:63:87:86:4d:2e:
96:fc:aa:c3:01:c5:9a:83:16:ca:55:93:a1:0e:95:4d:78:1c:
67:0a:66:e5:31:d4:de:ed:d7:11:19:04:de:d1:85:72:7a:8a:
40:4a:49:86:07:05:cd:99:a3:9f:66:75:ce:72:e9:a3:98:c2:
96:d0:36:09:3e:47:fb:6b:42:2a:a3:2f:d5:be:87:15:a5:59:
b5:ba:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:10 2025 by rpki-client