Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3138362e38382e302e302f31332d3234203d3e2038303438.roa
File: 3138362e38382e302e302f31332d3234203d3e2038303438.roa (raw, json)
Hash identifier: nzSdF9IgkvZtXHd7sEPnyYcewXw8H/JN6wBjzxxYXgw=
Subject key identifier: 33:26:A6:41:07:03:94:3F:DF:AB:4D:C6:CE:B2:48:D6:DB:A6:B6:CE
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 703B3D68C692515C3704E3D17803FB8798568665
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3138362e38382e302e302f31332d3234203d3e2038303438.roa
Signing time: Tue 04 Feb 2025 18:55:37 +0000
ROA not before: Tue 04 Feb 2025 18:50:37 +0000
ROA not after: Tue 03 Feb 2026 18:55:37 +0000
asID: 8048
IP address blocks: 186.88.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:3b:3d:68:c6:92:51:5c:37:04:e3:d1:78:03:fb:87:98:56:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Feb 4 18:50:37 2025 GMT
Not After : Feb 3 18:55:37 2026 GMT
Subject: CN=3326A6410703943FDFAB4DC6CEB248D6DBA6B6CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:cc:d9:75:f6:a1:52:3c:5f:54:1f:e2:ad:
52:cf:34:52:ba:64:28:52:ac:93:23:ac:d1:03:dc:
8b:73:d3:57:c1:5f:7c:93:57:91:01:2d:75:9e:b7:
68:dd:9c:38:0d:c0:5a:74:4b:0c:56:46:88:3e:9e:
6c:ac:32:d5:f9:f2:94:43:b4:f4:85:50:12:bf:23:
01:c7:dc:eb:60:fd:ea:2e:f5:e3:a9:c1:16:96:1b:
2a:71:65:b7:a8:fb:8f:ac:77:41:60:ce:0b:fa:d3:
46:14:ab:66:a1:0a:bf:2a:70:e3:72:a7:bb:7a:6a:
64:93:a4:37:ba:7e:ba:1c:9c:c5:8c:bf:43:f1:17:
bd:2b:9e:60:47:f3:ac:e8:5f:63:71:92:c5:db:1d:
54:2a:c8:2a:19:6e:94:ad:34:90:6e:91:49:76:21:
75:16:43:2a:44:be:c0:9f:5c:c2:77:54:cc:a5:cd:
3c:b5:37:e1:f2:7b:ee:47:bd:07:bb:d3:72:dc:f3:
54:77:4d:4e:5d:86:9a:bc:70:3e:00:c4:3f:98:37:
ae:78:b5:51:4b:da:f7:b9:96:70:76:f0:6f:62:de:
65:0a:49:ba:b0:0d:6d:be:97:19:ad:c6:c0:6e:fe:
49:a3:ed:98:c2:de:f2:3c:9c:8d:2f:f5:3c:92:a9:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:26:A6:41:07:03:94:3F:DF:AB:4D:C6:CE:B2:48:D6:DB:A6:B6:CE
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3138362e38382e302e302f31332d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.88.0.0/13
Signature Algorithm: sha256WithRSAEncryption
b0:1a:42:71:5b:1a:34:b9:60:be:9a:66:08:19:f1:a5:24:93:
42:41:3a:4f:0f:40:e2:ed:30:da:f9:c0:d2:ba:09:99:e2:87:
12:8f:0b:d1:d2:14:c3:93:c0:0a:2e:bc:01:a5:3a:b8:43:96:
7a:27:e6:04:f6:0f:db:43:a7:3c:80:98:73:c6:f7:25:53:c0:
ce:ca:f4:c2:7b:55:6d:db:bb:86:0a:80:ee:7f:c7:38:97:b2:
74:f3:bd:77:69:c4:57:9a:04:a0:41:3b:cd:40:ee:4c:a5:08:
ea:18:68:89:a4:56:ab:29:d3:16:b3:b9:42:1d:9c:bc:0c:11:
69:61:23:bd:2e:fb:09:a2:34:5b:c9:ac:63:fa:a8:a7:a5:d5:
88:c5:95:83:44:0a:ff:42:85:64:13:ef:d7:db:56:80:24:83:
2b:ca:7a:46:0d:92:72:e8:b3:5a:45:57:3c:34:f0:d3:b6:1d:
32:0c:5e:de:09:03:95:d8:65:83:63:c5:bd:af:dd:1c:29:cb:
96:38:37:ce:74:e4:a4:c5:d5:4c:07:39:6e:40:eb:a1:c1:fb:
20:5f:2c:e1:e2:c1:56:fa:a2:5e:30:76:b8:31:17:a5:7e:63:
52:2c:9d:4e:9b:d3:f5:9e:95:c3:8c:58:f3:56:2f:66:72:f1:
c4:cf:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:44 2025 by rpki-client