Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134382e302f32342d3234203d3e203238333938.roa
File: 3133382e39392e3134382e302f32342d3234203d3e203238333938.roa (raw, json)
Hash identifier: yrAfIIvnh+d5bYLZxMhVC8+kav3zYCq/SOaM2s9+U0w=
Subject key identifier: 69:AC:B2:81:57:DB:C9:1E:97:D9:17:44:F1:83:F4:DC:9A:40:9C:05
Certificate issuer: /CN=8190D453933A57C152D409DC05B6F96B6F662E76
Certificate serial: 47B98920D36DAEAFA515ABB0D5CA5ACEE5E3F5E5
Authority key identifier: 81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134382e302f32342d3234203d3e203238333938.roa
Signing time: Tue 04 Feb 2025 18:39:34 +0000
ROA not before: Tue 04 Feb 2025 18:34:34 +0000
ROA not after: Tue 03 Feb 2026 18:39:34 +0000
asID: 28398
IP address blocks: 138.99.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b9:89:20:d3:6d:ae:af:a5:15:ab:b0:d5:ca:5a:ce:e5:e3:f5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8190D453933A57C152D409DC05B6F96B6F662E76
Validity
Not Before: Feb 4 18:34:34 2025 GMT
Not After : Feb 3 18:39:34 2026 GMT
Subject: CN=69ACB28157DBC91E97D91744F183F4DC9A409C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:90:55:d7:76:fe:5e:b9:4d:b8:1b:77:27:
12:b1:6d:cf:67:87:4b:e6:95:71:69:4d:5f:06:b3:
d5:33:d1:a9:99:24:7d:95:64:15:ad:83:9e:69:14:
5c:55:be:b3:03:47:48:d9:85:74:fd:a8:d0:08:17:
63:6f:16:ab:49:cf:69:3a:0f:aa:64:39:2a:d8:d3:
35:57:84:33:e2:a0:06:3a:61:96:4e:52:0b:de:8b:
cb:0f:60:5a:22:9c:af:4b:e6:30:98:b0:d3:24:a6:
cd:91:68:50:17:46:20:ec:cb:a6:5f:26:ae:00:6b:
95:5f:a9:04:3b:52:05:bb:ba:89:52:66:76:ec:3c:
83:1e:a8:3a:b4:49:b1:9b:ec:57:a9:7d:83:8a:60:
b5:00:6b:5d:68:f9:e2:5b:a7:97:7b:c6:0e:4d:cd:
41:2e:47:fb:45:3c:de:f7:13:7d:73:11:f6:ae:a4:
2f:24:81:8e:75:8f:5b:41:f8:f9:c1:2b:97:11:e8:
43:83:58:6f:02:67:44:b8:5e:fe:17:51:fd:2c:54:
94:b1:c1:1c:b7:57:01:36:51:00:ee:ba:12:d1:6f:
60:0c:3b:33:07:09:db:55:47:78:4a:ac:8e:40:7b:
d1:0c:6d:24:d6:d2:7f:fd:5c:e9:a8:72:c1:b6:3d:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AC:B2:81:57:DB:C9:1E:97:D9:17:44:F1:83:F4:DC:9A:40:9C:05
X509v3 Authority Key Identifier:
keyid:81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134382e302f32342d3234203d3e203238333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.148.0/24
Signature Algorithm: sha256WithRSAEncryption
51:69:26:52:3e:c7:05:c5:06:6e:2f:7a:52:43:26:62:af:00:
b1:c8:0b:82:63:fd:81:52:f5:d7:75:20:44:be:1f:40:f8:e8:
e2:9e:16:29:f3:a4:f7:8d:83:b3:e9:a2:67:60:9a:61:30:02:
63:69:c1:7e:26:1a:4d:20:1e:44:96:74:f3:ff:61:88:9c:37:
4e:92:28:6e:1e:27:58:c0:5f:7f:bb:aa:26:cd:90:ee:1c:74:
8a:11:83:da:fa:fe:5f:df:7f:55:3a:e3:9f:57:35:4a:da:bb:
22:c0:45:ef:1f:d9:22:52:76:d5:ca:ae:50:97:d0:d7:bf:b7:
98:db:46:18:ed:e4:9f:f6:85:7b:a5:ce:f9:c8:3c:cf:96:36:
6b:65:65:4f:d7:41:1c:91:aa:61:34:7c:92:ca:d3:04:da:3b:
c2:d0:5c:81:89:f5:40:80:5c:34:9f:c7:73:72:c0:49:7f:8e:
2d:bc:c0:46:76:cc:d1:b9:8e:13:f1:80:3e:c4:b0:64:8d:16:
6b:4e:34:bb:12:2a:b6:91:ad:83:e1:f7:cc:05:c7:a2:14:c3:
48:d0:3a:5d:4c:6e:52:51:b9:b8:61:4a:f3:3e:6a:34:3c:e0:
19:05:f8:61:f5:7d:0c:5f:52:dc:be:9c:37:5d:4b:53:d0:0d:
03:21:b7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:56 2025 by rpki-client