Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3132332e302f32342d3234203d3e203232313232.roa
File: 3134382e3230392e3132332e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier: oZ8PI+0otak8m1MYBwdOJyDtFjPHa//1TQX+5wtLOJA=
Subject key identifier: 02:DD:A0:FC:85:D9:9B:E4:9C:65:87:10:DF:0D:07:F4:25:33:79:85
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 2338AD22A4CE60A3E42B474FAE0A3F6F3DC00946
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3132332e302f32342d3234203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:54 +0000
ROA not before: Tue 04 Feb 2025 18:33:54 +0000
ROA not after: Tue 03 Feb 2026 18:38:54 +0000
asID: 22122
IP address blocks: 148.209.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:38:ad:22:a4:ce:60:a3:e4:2b:47:4f:ae:0a:3f:6f:3d:c0:09:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:54 2025 GMT
Not After : Feb 3 18:38:54 2026 GMT
Subject: CN=02DDA0FC85D99BE49C658710DF0D07F425337985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:b3:c4:de:7e:7f:66:38:58:c5:1e:c1:bf:
f6:a7:43:ca:06:dd:c5:00:9b:6c:4e:04:f7:c8:27:
b7:2e:15:f3:2a:7a:9b:89:a4:08:61:41:00:3e:2d:
8b:ef:31:15:ad:17:74:cf:d1:1d:09:be:00:c5:61:
8a:75:07:8b:b5:6e:9a:d3:61:63:f0:82:60:43:3e:
2e:5b:fb:fb:35:1f:f1:d2:5a:95:d8:4e:59:75:81:
3b:ce:d0:f6:29:8e:d7:d6:71:2a:0d:e7:c1:10:49:
35:64:ae:2c:fa:b1:68:b9:9c:b5:80:36:4e:4b:5a:
6f:a1:c8:1e:c4:94:4a:af:fd:b1:e0:0c:c4:ef:77:
08:c2:b5:9b:c2:14:65:4c:70:9e:32:53:62:48:3c:
ed:59:8b:1e:a2:9a:8f:ae:1e:61:87:f8:bc:b3:1b:
b2:44:e0:e3:d6:13:c3:a6:62:2a:13:14:c7:98:a9:
84:18:e3:38:a9:ad:30:f3:9e:97:08:03:43:bf:5d:
43:90:de:8e:92:64:6e:43:5f:7f:49:78:97:b2:14:
58:70:ca:3d:44:13:8d:ea:fd:1c:98:2d:1e:63:73:
0d:73:22:c3:1a:6a:3b:11:f4:bb:b6:c7:c2:5e:1b:
01:04:ef:75:2f:8f:2f:f7:a6:fc:10:cf:8f:c0:5e:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DD:A0:FC:85:D9:9B:E4:9C:65:87:10:DF:0D:07:F4:25:33:79:85
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3132332e302f32342d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.123.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2f:ef:47:7c:e3:01:6f:f6:a8:4f:88:b3:84:56:49:bb:bd:
e0:82:45:aa:67:e9:e2:66:6e:77:e2:6f:6f:30:b5:f6:38:1e:
de:81:3c:fc:68:88:92:d3:d3:c6:25:2c:57:6c:2c:87:97:3f:
36:13:6c:52:a3:83:14:aa:9a:02:2e:61:17:6d:ea:07:7e:a0:
db:29:e7:93:85:cb:2e:fb:a7:a3:44:8b:ae:01:fe:e0:79:51:
2d:c7:02:82:9b:88:de:aa:b9:fe:d3:37:2d:a5:d0:39:9b:83:
4c:f1:70:93:42:74:5e:9d:76:d6:47:e2:de:57:70:8c:44:b7:
bc:af:1c:c3:1a:f5:94:86:ea:ed:35:75:f0:f9:8b:16:a1:54:
b4:94:72:91:a9:17:12:5b:3a:3f:61:e6:8d:e5:a5:41:91:8e:
4b:8f:6e:dd:9c:4e:bf:6e:d4:c2:b9:c9:9c:a8:34:09:e7:1a:
2b:c1:74:42:39:f7:05:00:1a:3b:f2:7e:57:88:19:58:b7:87:
df:7d:f3:8e:1b:e3:0d:eb:5d:4a:e9:45:bf:f3:c1:d1:96:72:
d4:f4:e4:b7:18:a9:32:2c:42:3f:70:f4:60:13:1a:54:50:a7:
cb:bb:7d:36:75:45:47:c5:58:46:22:a8:37:56:8e:63:40:da:
3d:3d:48:98
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIzitIqTOYKPkK0dPrgo/bz3ACUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNTAyMDQxODMzNTRaFw0yNjAyMDMxODM4NTRaMDMxMTAvBgNV
BAMTKDAyRERBMEZDODVEOTlCRTQ5QzY1ODcxMERGMEQwN0Y0MjUzMzc5ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+rPE3n5/ZjhYxR7Bv/anQ8oG
3cUAm2xOBPfIJ7cuFfMqepuJpAhhQQA+LYvvMRWtF3TP0R0JvgDFYYp1B4u1bprT
YWPwgmBDPi5b+/s1H/HSWpXYTll1gTvO0PYpjtfWcSoN58EQSTVkriz6sWi5nLWA
Nk5LWm+hyB7ElEqv/bHgDMTvdwjCtZvCFGVMcJ4yU2JIPO1Zix6imo+uHmGH+Lyz
G7JE4OPWE8OmYioTFMeYqYQY4ziprTDznpcIA0O/XUOQ3o6SZG5DX39JeJeyFFhw
yj1EE43q/RyYLR5jcw1zIsMaajsR9Lu2x8JeGwEE73Uvjy/3pvwQz4/AXso9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUAt2g/IXZm+ScZYcQ3w0H9CUzeYUwHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMTMyMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlNF7
MA0GCSqGSIb3DQEBCwUAA4IBAQCBL+9HfOMBb/aoT4izhFZJu73ggkWqZ+niZm53
4m9vMLX2OB7egTz8aIiS09PGJSxXbCyHlz82E2xSo4MUqpoCLmEXbeoHfqDbKeeT
hcsu+6ejRIuuAf7geVEtxwKCm4jeqrn+0zctpdA5m4NM8XCTQnRenXbWR+LeV3CM
RLe8rxzDGvWUhurtNXXw+YsWoVS0lHKRqRcSWzo/YeaN5aVBkY5Lj27dnE6/btTC
ucmcqDQJ5xorwXRCOfcFABo78n5XiBlYt4ffffOOG+MN611K6UW/88HRlnLU9OS3
GKkyLEI/cPRgExpUUKfLu302dUVHxVhGIqg3Vo5jQNo9PUiY
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:34 2025 by rpki-client