Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e39362e302f32342d3234203d3e203137303739.roa
File: 3138362e33322e39362e302f32342d3234203d3e203137303739.roa (raw, json)
Hash identifier: xUcTf5vISKK5PTE4RrWnlWmO9ud+zugpwIr4lnH2LiA=
Subject key identifier: D8:10:CC:17:AB:46:2E:CB:A5:CC:32:28:03:65:31:F5:56:A9:C0:32
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 2E4ACA3D5A0A858F8118B4403592DEF54530BE15
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e39362e302f32342d3234203d3e203137303739.roa
Signing time: Tue 04 Feb 2025 20:02:11 +0000
ROA not before: Tue 04 Feb 2025 19:57:11 +0000
ROA not after: Tue 03 Feb 2026 20:02:11 +0000
asID: 17079
IP address blocks: 186.32.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4a:ca:3d:5a:0a:85:8f:81:18:b4:40:35:92:de:f5:45:30:be:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Feb 4 19:57:11 2025 GMT
Not After : Feb 3 20:02:11 2026 GMT
Subject: CN=D810CC17AB462ECBA5CC3228036531F556A9C032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:6d:5a:aa:83:a5:8d:af:75:8c:f7:80:b8:
35:a9:fb:f9:0a:7c:39:cf:54:09:c6:89:ec:db:16:
cd:ed:28:bd:41:76:6a:63:a3:55:39:34:0d:83:a5:
ea:d8:ff:b3:88:1c:09:50:6b:ce:db:fa:85:d6:d1:
d8:88:bd:95:6c:28:70:b7:b7:5f:90:6a:5a:de:e1:
fb:ce:29:06:28:38:c5:8b:04:fe:3a:98:58:61:be:
43:eb:15:45:aa:13:a4:de:31:51:05:06:4f:53:8b:
e5:a5:21:3c:55:2d:27:97:4d:33:64:92:68:f9:e0:
1d:c6:ad:ae:e3:1c:c4:7b:5b:f6:59:76:87:1c:ce:
c4:cf:f3:d2:46:5f:0a:c5:b7:8f:42:97:b1:8c:3e:
b0:f1:77:74:5d:af:80:21:6c:06:5d:18:bb:4f:2a:
31:41:2a:10:47:60:05:26:d4:47:8f:c1:89:0c:c0:
99:84:dc:44:f8:a1:a8:90:10:ed:6a:09:17:f2:bf:
d6:40:8e:6a:11:12:fb:5a:36:c3:61:a9:7f:e7:63:
89:14:cb:0a:f2:3d:7e:51:40:49:a0:79:bc:26:18:
2b:b0:c0:f2:20:3b:7e:7e:f0:c5:ba:b8:b9:bd:fc:
7a:40:80:b8:27:c4:46:c0:5d:f5:60:34:56:4c:f5:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:10:CC:17:AB:46:2E:CB:A5:CC:32:28:03:65:31:F5:56:A9:C0:32
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e39362e302f32342d3234203d3e203137303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.32.96.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b0:73:17:b4:85:70:98:86:45:53:34:7e:09:88:64:ec:23:
cf:41:94:0b:79:c6:a0:5b:56:94:4b:75:90:0d:4f:8c:2f:fa:
dd:c7:c0:f1:95:b6:d9:da:8e:46:27:58:4e:7a:7b:26:f6:4a:
49:f6:d9:1a:c7:fb:78:04:bb:c7:52:3a:40:0d:87:0c:0d:9d:
5d:23:8b:23:47:9e:b2:ff:7d:68:f1:fd:c5:38:7e:5e:a5:21:
4a:24:2f:a3:66:bc:8a:76:16:f0:5c:39:f0:26:5d:e6:1f:56:
72:e7:76:5a:c1:55:d9:66:c0:e1:c5:d8:27:03:c7:fd:8c:65:
6b:b3:58:ae:2d:e5:2d:62:53:b0:af:c6:32:e2:e1:71:2c:bf:
1b:6e:71:c6:d1:26:24:ca:d8:f4:dc:e7:74:5f:a3:43:bf:e7:
0f:50:75:86:fe:2a:a1:3a:7b:71:5e:c6:d1:9d:74:f7:50:38:
b8:43:02:a0:bb:87:51:51:09:e6:b1:b6:16:ec:bf:de:0a:99:
32:ad:81:a3:ca:71:8d:98:46:97:aa:69:0c:b9:69:4b:d1:68:
0a:df:e3:c0:68:10:b6:29:32:99:6e:64:0a:36:85:ed:e6:44:
e0:57:33:b3:c8:ae:75:78:39:22:bc:6f:21:3d:b0:8b:23:fe:
5e:80:79:96
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULkrKPVoKhY+BGLRANZLe9UUwvhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNTAyMDQxOTU3MTFaFw0yNjAyMDMyMDAyMTFaMDMxMTAvBgNV
BAMTKEQ4MTBDQzE3QUI0NjJFQ0JBNUNDMzIyODAzNjUzMUY1NTZBOUMwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjW1aqoOlja91jPeAuDWp+/kK
fDnPVAnGiezbFs3tKL1Bdmpjo1U5NA2DperY/7OIHAlQa87b+oXW0diIvZVsKHC3
t1+Qalre4fvOKQYoOMWLBP46mFhhvkPrFUWqE6TeMVEFBk9Ti+WlITxVLSeXTTNk
kmj54B3Gra7jHMR7W/ZZdocczsTP89JGXwrFt49Cl7GMPrDxd3Rdr4AhbAZdGLtP
KjFBKhBHYAUm1EePwYkMwJmE3ET4oaiQEO1qCRfyv9ZAjmoREvtaNsNhqX/nY4kU
ywryPX5RQEmgebwmGCuwwPIgO35+8MW6uLm9/HpAgLgnxEbAXfVgNFZM9S6lAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU2BDMF6tGLsulzDIoA2Ux9VapwDIwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzgzNjJlMzMzMjJlMzkzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6IGAwDQYJ
KoZIhvcNAQELBQADggEBAIGwcxe0hXCYhkVTNH4JiGTsI89BlAt5xqBbVpRLdZAN
T4wv+t3HwPGVttnajkYnWE56eyb2Skn22RrH+3gEu8dSOkANhwwNnV0jiyNHnrL/
fWjx/cU4fl6lIUokL6NmvIp2FvBcOfAmXeYfVnLndlrBVdlmwOHF2CcDx/2MZWuz
WK4t5S1iU7CvxjLi4XEsvxtuccbRJiTK2PTc53Rfo0O/5w9QdYb+KqE6e3FextGd
dPdQOLhDAqC7h1FRCeaxthbsv94KmTKtgaPKcY2YRpeqaQy5aUvRaArf48BoELYp
MpluZAo2he3mROBXM7PIrnV4OSK8byE9sIsj/l6AeZY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:22 2025 by rpki-client