Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3132382e302f32332d3234203d3e203232313232.roa
File: 3134382e3230392e3132382e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier: qkiF9Yv0KtlyuRHj3c2l9xtMHWvUR2uIg1YuY+frq4U=
Subject key identifier: B9:C4:18:AE:85:AB:B0:CE:6B:6E:61:01:72:35:0B:08:7F:C7:8F:30
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 01D963BE98D797E8C82C418B3E6E0400A1E11673
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3132382e302f32332d3234203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:45 +0000
ROA not before: Tue 04 Feb 2025 18:33:45 +0000
ROA not after: Tue 03 Feb 2026 18:38:45 +0000
asID: 22122
IP address blocks: 148.209.128.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d9:63:be:98:d7:97:e8:c8:2c:41:8b:3e:6e:04:00:a1:e1:16:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:45 2025 GMT
Not After : Feb 3 18:38:45 2026 GMT
Subject: CN=B9C418AE85ABB0CE6B6E610172350B087FC78F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:14:71:c5:ae:d1:09:c5:6f:e6:86:7f:15:
dd:52:a3:04:a1:ec:b3:97:8b:be:51:b4:6b:22:f0:
97:bf:35:c6:60:80:51:b5:a6:9f:f4:7f:7a:8e:b9:
2a:53:62:ee:90:fa:8f:0d:6a:06:55:e4:2d:28:69:
60:3b:c6:ae:ed:a6:3e:fa:a4:05:ca:6b:e2:86:08:
85:1f:df:3d:a6:85:ea:9c:04:a2:90:8a:98:f1:bc:
e0:18:a2:96:56:31:c5:7e:57:c6:e9:52:bd:88:18:
06:e9:f9:8e:24:a1:d4:c2:ad:04:de:e9:0e:8e:ca:
a1:b9:7a:8e:86:96:21:c7:ce:2b:c6:19:73:90:30:
72:86:30:cb:3f:c8:e5:d6:bd:38:18:7c:98:e8:8d:
db:1b:5a:2c:dd:9c:9a:66:38:d4:8b:74:f0:72:86:
5d:ba:be:92:2f:24:f0:f9:d5:16:8e:43:c5:bd:1a:
47:87:fb:3d:0b:87:b8:ad:5c:d9:30:74:61:24:59:
8a:c8:2a:2a:ec:f8:a1:6a:df:d3:57:28:d7:1b:99:
bc:71:80:c9:91:8e:b8:6c:f6:9d:db:0b:16:6a:88:
b7:f7:5e:27:97:e8:77:14:ab:2b:42:07:65:05:2a:
74:8a:1f:3a:69:4c:03:ac:35:05:76:0a:00:c5:83:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:18:AE:85:AB:B0:CE:6B:6E:61:01:72:35:0B:08:7F:C7:8F:30
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3132382e302f32332d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.128.0/23
Signature Algorithm: sha256WithRSAEncryption
69:c4:70:08:7e:77:46:b5:43:7b:8f:76:cb:72:97:f7:e1:05:
1c:98:a2:8e:4d:ba:eb:b7:c4:98:7f:8b:08:fb:d6:61:c8:36:
c4:3b:80:06:31:fc:d3:f8:10:30:c5:75:0a:3c:59:66:00:21:
26:61:b1:d8:0b:40:77:a8:52:9f:a1:14:90:3b:09:91:21:b4:
49:35:99:22:7f:22:57:bd:ad:f6:e0:17:dd:9e:8e:75:ac:2d:
d2:6a:e1:9b:a6:b5:f8:bd:d3:ef:d0:04:96:99:f7:ba:0e:bb:
25:44:0c:a7:7e:e5:0a:bb:98:a1:b8:88:94:83:07:a1:a8:ed:
34:74:e1:47:19:bd:b8:fa:4e:45:82:42:7e:a4:7a:22:49:d4:
d1:83:b4:dd:c2:5f:05:9b:44:3f:a1:83:63:6d:32:1c:6b:26:
36:e3:38:ff:8f:e4:40:8f:ae:0c:3c:41:77:ba:16:fb:e6:4e:
6e:81:20:4a:a3:19:c0:a2:c5:8d:ba:d6:25:62:a1:a6:16:49:
e0:89:1c:6c:90:88:ec:5d:9e:5d:bf:f4:9d:2a:82:b9:b2:09:
1e:35:af:b6:22:6f:f1:ba:d7:ed:ea:93:42:ab:a7:41:89:66:
83:e3:3f:dd:f3:ef:34:34:cf:b5:ef:fc:9d:42:85:4f:cb:70:
2c:55:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:14 2025 by rpki-client