Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa
File: 3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier: fcdnr6Y0Dl+HSGf13sGpxBsTdrw3pZneE/KaaIMlVik=
Subject key identifier: 04:37:84:CA:28:39:17:7F:A1:99:83:E0:8B:69:EB:A7:37:B0:35:45
Certificate issuer: /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial: 4D7CAFE3DFEB40E7E83C9D28A2D1C7BA02205C42
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa
Signing time: Tue 04 Feb 2025 18:06:48 +0000
ROA not before: Tue 04 Feb 2025 18:01:48 +0000
ROA not after: Tue 03 Feb 2026 18:06:48 +0000
asID: 18734
IP address blocks: 189.202.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:7c:af:e3:df:eb:40:e7:e8:3c:9d:28:a2:d1:c7:ba:02:20:5c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Validity
Not Before: Feb 4 18:01:48 2025 GMT
Not After : Feb 3 18:06:48 2026 GMT
Subject: CN=043784CA2839177FA19983E08B69EBA737B03545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:41:84:64:6f:36:e2:a6:b1:eb:6e:76:76:
57:91:19:93:c4:9f:fd:f9:30:b2:9d:6b:da:a1:36:
4d:64:d2:49:0c:73:44:ff:a0:fa:d1:f2:b3:e1:01:
1b:8b:25:e0:4d:32:3d:37:30:59:8a:a9:7e:be:59:
40:3a:65:9e:a3:78:3c:d2:9a:77:0b:f9:3c:78:17:
2b:8f:44:5c:50:a6:02:98:73:46:25:95:cb:9c:57:
b7:a5:45:f5:8d:ed:b4:3a:47:34:f3:ff:b4:fe:06:
c9:b8:a2:1e:b6:6e:ba:9c:55:2b:b8:7a:df:7f:a8:
fd:a1:b7:45:5f:34:d4:c2:0f:14:39:93:42:08:84:
a8:5b:0a:f9:0e:61:bb:94:4e:4b:d2:b4:cc:45:ff:
8f:04:91:69:62:74:ce:2f:7c:64:e2:21:fa:47:6e:
01:55:16:50:a1:c7:72:16:84:c9:7c:2c:90:36:37:
c2:72:46:79:4a:07:66:4c:bb:76:e8:21:e6:a5:a6:
f7:e9:f8:6c:e7:a8:75:38:36:c3:71:07:77:c9:5a:
a4:29:0c:6c:e1:79:ae:cd:4b:46:bf:ee:2c:49:15:
1c:e7:05:61:4a:ba:ed:58:25:c4:61:46:f9:a3:87:
9f:f6:f3:30:0a:85:eb:93:29:01:4d:ea:fd:89:f9:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:84:CA:28:39:17:7F:A1:99:83:E0:8B:69:EB:A7:37:B0:35:45
X509v3 Authority Key Identifier:
keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.202.211.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:73:c6:76:72:dc:dd:ba:00:00:7f:a8:fe:29:a2:36:50:af:
0e:9b:54:ef:0f:0c:99:d8:72:86:ce:dd:09:f9:af:78:26:15:
85:db:83:2e:f5:81:db:d9:23:63:a3:9f:f9:13:48:4c:d1:b3:
b6:43:1e:02:dd:62:97:d1:4c:61:b6:54:79:fd:5e:03:db:5d:
f1:c2:88:b4:d1:66:76:fb:3d:08:c7:c9:26:de:14:f6:be:d2:
fc:2e:a3:f2:16:d1:41:ac:58:1d:19:f6:ed:ad:a2:73:68:f0:
07:bb:71:e5:25:6d:75:ec:0b:0b:52:55:3d:d0:44:29:ca:88:
38:41:1d:37:40:ea:bf:d6:d0:f0:a0:e2:f8:7d:8f:de:3f:ed:
74:aa:1b:e0:e7:c5:ba:14:e0:3f:ef:e4:d4:c0:d4:81:f7:a3:
3f:23:5c:95:1c:91:f7:ff:bf:95:3f:c2:00:95:c0:37:eb:fb:
18:31:1d:e1:f7:ef:d8:96:a6:a1:21:08:9c:6b:07:f7:77:16:
b5:75:3b:9c:0d:8f:71:e8:9a:8b:58:cf:e7:40:59:84:7a:5e:
e5:24:e9:d7:d5:ee:bc:eb:d9:42:72:77:4d:e4:c5:c0:57:68:
6d:c3:f3:c5:a3:22:8f:37:2b:8f:89:b6:42:9e:be:d3:98:24:
c8:41:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:48 2025 by rpki-client