Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3132362e302f32342d3234203d3e203232313232.roa
File: 3134382e3230392e3132362e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier: HgW0RIrc1K+25JyKassybHaQPIj2ppuEnvKYlcUh6Kk=
Subject key identifier: 68:E2:9E:5D:33:08:EA:65:CC:80:A5:0B:C0:2F:1E:7B:8A:BD:52:6E
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 2A1B1C83C2B084A55503A823861063E55C5CBF7E
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3132362e302f32342d3234203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:55 +0000
ROA not before: Tue 04 Feb 2025 18:33:55 +0000
ROA not after: Tue 03 Feb 2026 18:38:55 +0000
asID: 22122
IP address blocks: 148.209.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1b:1c:83:c2:b0:84:a5:55:03:a8:23:86:10:63:e5:5c:5c:bf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:55 2025 GMT
Not After : Feb 3 18:38:55 2026 GMT
Subject: CN=68E29E5D3308EA65CC80A50BC02F1E7B8ABD526E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:ec:4a:61:13:c1:0f:7c:22:e8:ae:cf:15:
82:4e:78:1f:50:be:88:75:27:19:7a:c9:ad:38:f9:
db:2c:91:0f:65:e3:9d:e2:5f:a8:b6:5a:de:40:ff:
71:df:b3:fd:e5:4e:2e:89:a1:60:32:df:d9:95:f9:
e9:11:8e:e9:61:b2:f4:84:a2:6e:5d:08:68:25:a8:
bf:5a:e7:1b:a1:c8:77:f8:f2:72:1e:b7:b5:a3:2f:
bf:e3:60:f6:5c:b0:52:e0:21:49:a3:3a:0e:d1:5c:
29:3a:1e:81:d2:3b:38:6d:3d:e0:66:05:6d:fd:3d:
a8:2e:2c:48:26:e4:a9:d2:36:b7:8f:1c:dd:17:93:
cf:45:f1:4c:f5:a1:3b:db:e5:f0:12:7f:62:d7:60:
ef:61:4b:70:2a:02:6d:a4:59:c1:57:a1:dc:b0:47:
7f:10:56:a1:6d:22:bd:85:75:81:71:96:c7:88:da:
33:c8:87:3a:9b:de:c4:d7:f4:8e:c6:b6:dc:03:62:
4b:b8:f1:b0:df:05:ba:a7:75:07:cb:a3:3c:55:b1:
cd:3d:59:b8:19:14:ad:f2:45:93:b3:fd:ee:41:c4:
5d:b4:f9:ad:b3:71:ca:a7:6e:17:22:ed:76:8a:80:
ae:29:86:36:2e:0e:12:9c:fa:17:13:11:32:65:a6:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E2:9E:5D:33:08:EA:65:CC:80:A5:0B:C0:2F:1E:7B:8A:BD:52:6E
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3132362e302f32342d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.126.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d6:51:fa:1a:40:da:4a:4e:50:b6:f8:8c:b4:a6:54:ee:8d:
ad:e9:62:c9:e2:f8:d3:13:94:6f:a1:05:76:7d:a7:e7:ff:87:
f7:56:6f:3d:87:7d:9b:97:c5:62:78:91:77:dc:79:fd:0a:57:
ff:68:d3:9e:f9:57:31:18:98:f6:5e:72:3e:01:9d:53:85:94:
65:ca:26:67:4d:ca:97:42:3b:4c:5c:b7:ee:ae:e7:90:0a:17:
11:5a:c7:30:85:92:c4:26:68:b0:ae:b4:ea:7d:5f:73:a8:3c:
96:ad:12:77:74:f9:b6:85:da:98:da:be:e0:c6:ab:e5:fd:2a:
2c:f4:33:54:ea:5a:31:20:dc:54:71:98:fa:72:bb:8e:8c:5d:
55:45:8f:0e:f8:2d:07:37:4d:f1:5d:6e:15:10:d6:46:53:c5:
3f:a2:3a:4d:9b:8d:c7:66:01:b0:8e:ea:f2:0c:4f:0a:a4:e3:
27:03:5d:42:09:b6:01:46:f3:43:bd:92:c4:fb:09:f6:33:ec:
27:28:4c:56:b3:3b:e3:29:71:dd:2a:bc:62:85:af:97:29:fd:
f5:4b:a7:b7:fd:6c:a5:ad:f5:28:f6:77:e6:a3:7d:d5:4b:36:
1a:76:cc:a7:32:6c:26:35:13:2a:d4:94:f1:c7:11:bd:f0:00:
44:97:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:35 2025 by rpki-client