Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3138362e3134382e3131322e302f32312d3234203d3e203532333634.roa
File: 3138362e3134382e3131322e302f32312d3234203d3e203532333634.roa (raw, json)
Hash identifier: EaUAD26nNdTXUoV7cp0IWVUKiOhzX4E+2LBZOqpf1yQ=
Subject key identifier: 20:0B:2A:CD:77:59:94:6D:42:F6:DF:41:08:02:C0:17:95:12:10:7A
Certificate issuer: /CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
Certificate serial: 40FA5654C529AA85F40047535A9F7B235B589627
Authority key identifier: EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3138362e3134382e3131322e302f32312d3234203d3e203532333634.roa
Signing time: Tue 04 Feb 2025 18:54:52 +0000
ROA not before: Tue 04 Feb 2025 18:49:52 +0000
ROA not after: Tue 03 Feb 2026 18:54:52 +0000
asID: 52364
IP address blocks: 186.148.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:fa:56:54:c5:29:aa:85:f4:00:47:53:5a:9f:7b:23:5b:58:96:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
Validity
Not Before: Feb 4 18:49:52 2025 GMT
Not After : Feb 3 18:54:52 2026 GMT
Subject: CN=200B2ACD7759946D42F6DF410802C0179512107A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:fb:40:97:39:58:f6:5a:9a:f3:f0:4f:ba:
e3:4c:27:7e:cc:df:bf:5d:34:a2:5b:42:71:c8:b6:
ea:02:0b:89:07:74:ea:38:01:ba:e5:31:0d:87:b9:
82:cc:1b:c4:d2:8b:9b:69:82:68:87:8a:7d:e4:b6:
1c:d1:66:9f:ab:3f:7b:4b:4f:0a:03:7a:de:88:a9:
04:0f:b6:73:2e:c7:ab:85:37:90:98:f3:c3:cf:88:
64:43:fa:36:99:e7:01:80:90:be:94:f5:c3:9e:31:
37:7a:08:5e:03:cf:03:52:a0:f9:27:47:31:2f:93:
db:7a:f0:d4:11:a2:15:4f:32:9b:51:24:9d:84:d8:
07:90:aa:e2:96:ba:f8:69:aa:b3:b9:ab:e5:c8:99:
be:28:92:a6:3e:87:30:57:af:26:bc:47:b7:22:6a:
a8:80:90:44:49:36:ad:d4:d1:af:92:76:d5:06:e8:
ba:44:47:1a:d3:4e:02:f9:5f:50:91:4c:22:bf:3d:
56:87:b5:14:a4:9e:8f:ca:1b:86:48:00:c2:de:ff:
55:7c:a3:aa:a4:cb:90:a0:11:22:d6:45:b0:a1:15:
03:4b:24:83:dd:53:f5:f9:20:68:fe:8c:23:73:d3:
6c:f8:af:3f:d8:b6:2a:9f:b1:87:54:4a:e7:0e:fe:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:2A:CD:77:59:94:6D:42:F6:DF:41:08:02:C0:17:95:12:10:7A
X509v3 Authority Key Identifier:
keyid:EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3138362e3134382e3131322e302f32312d3234203d3e203532333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.148.112.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:0c:41:d1:bd:d3:88:17:61:b7:ba:e2:54:0b:47:10:11:c9:
e3:3f:71:67:ed:c2:03:94:23:76:05:3c:45:e2:8e:6c:f2:d5:
3e:8f:54:31:69:59:ee:9f:da:d2:8f:15:8d:6a:2e:44:99:ac:
9f:12:3d:07:32:87:81:49:65:37:34:99:57:b3:4b:b4:94:db:
12:fe:74:c9:28:ce:a6:67:8b:7c:82:d1:37:c6:96:35:cc:05:
ce:8f:33:34:ca:4b:01:d0:64:59:40:1d:31:c7:26:0d:31:3a:
6a:34:0b:9a:f0:e1:75:c4:f0:4c:ff:87:48:b7:9f:48:37:45:
1d:b1:f0:9b:eb:55:38:ff:ce:85:bb:13:7a:19:ae:e9:9a:67:
2a:88:1e:11:ad:64:5a:d9:db:0d:98:34:b5:41:83:07:0b:2a:
41:42:31:a7:a9:1c:0b:13:4a:47:2b:af:c5:b2:0f:a1:30:9d:
88:af:f2:aa:f7:b9:32:07:bb:ef:0f:0d:56:ec:4c:fc:b4:c6:
35:9a:cb:e9:dd:69:9d:73:01:32:6d:c3:f9:25:90:c6:25:5c:
fe:a1:f2:52:19:09:59:8c:b4:d7:2f:6f:ab:e2:82:06:ac:0a:
98:90:fb:a4:4f:78:5b:8e:5e:fd:b7:a6:30:bb:75:47:fd:5b:
72:49:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:23 2025 by rpki-client