Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133362e302f32322d3234203d3e203232313232.roa
File: 3134382e3230392e3133362e302f32322d3234203d3e203232313232.roa (raw, json)
Hash identifier: bu8tZ8UP1YzoHnpHgg6KKgwrlfRJo5xUtk4GzLLnE3Q=
Subject key identifier: A4:12:4D:6E:8B:B1:C5:8D:D3:47:FD:AF:C1:2B:09:B1:CC:EB:E1:EB
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 7138BD4C4F6F1DA15CA68CCD6354857325D9D807
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133362e302f32322d3234203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:56 +0000
ROA not before: Tue 04 Feb 2025 18:33:56 +0000
ROA not after: Tue 03 Feb 2026 18:38:56 +0000
asID: 22122
IP address blocks: 148.209.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:38:bd:4c:4f:6f:1d:a1:5c:a6:8c:cd:63:54:85:73:25:d9:d8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:56 2025 GMT
Not After : Feb 3 18:38:56 2026 GMT
Subject: CN=A4124D6E8BB1C58DD347FDAFC12B09B1CCEBE1EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0f:b0:55:67:0c:c1:33:78:e3:bd:25:21:9d:
b4:c0:2a:de:1d:22:5a:6b:a1:65:dd:34:db:4d:0d:
1f:f3:36:60:e1:a2:05:bd:1d:d7:7f:e6:cd:d3:75:
b3:4a:b6:4a:a5:1d:18:9e:1e:4c:80:b0:af:8e:2d:
48:cb:9f:91:18:f0:ce:75:bc:68:53:5f:41:04:93:
e8:9b:48:4f:ec:58:d8:a8:32:51:e4:eb:31:88:19:
42:55:c2:d1:bc:16:3b:08:82:bb:50:31:df:f0:16:
b7:18:03:0e:c5:65:e9:b4:00:ca:2f:e1:4a:f3:49:
dc:88:b8:a3:2b:26:11:b3:3a:e1:34:61:bc:09:da:
d0:3e:87:b3:87:57:e3:aa:11:bd:3f:e0:e5:ca:f2:
7a:f5:16:1f:71:02:f6:54:c7:0e:40:fd:99:1b:d7:
e2:d1:b7:34:42:72:3c:81:d1:95:5b:90:7d:b2:d1:
5e:7a:6f:fe:c8:0d:e8:c3:36:51:05:3b:86:6d:18:
25:04:08:e7:73:6f:86:f7:65:a6:56:2e:df:b1:40:
4a:c9:cd:4a:ec:d3:3a:42:c4:f6:e5:58:05:95:93:
a8:48:f2:3a:3f:84:2c:3e:05:24:b7:60:2f:e2:a9:
06:9a:51:08:9d:1c:fd:35:16:9e:6c:fa:c2:4a:23:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:12:4D:6E:8B:B1:C5:8D:D3:47:FD:AF:C1:2B:09:B1:CC:EB:E1:EB
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133362e302f32322d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.136.0/22
Signature Algorithm: sha256WithRSAEncryption
11:9b:cd:6f:69:25:12:74:74:82:b2:5a:dd:f0:29:f6:1c:e8:
27:f8:ac:51:25:77:0f:69:e7:3c:a7:1a:a2:f3:ba:35:3d:cc:
db:07:9f:c0:a1:bd:01:7d:8e:9f:11:7c:a2:87:ed:74:fb:b5:
58:c8:b1:4f:cd:b9:ce:ed:8b:4b:36:13:07:49:66:2e:6d:4c:
bf:71:42:c2:14:79:7e:00:15:c5:b3:b3:77:fb:42:d0:b0:5b:
1c:81:56:ed:0f:88:ba:e1:4c:34:f3:5d:19:06:96:19:6c:20:
88:06:b4:00:33:ca:63:7b:2e:6f:cb:e0:82:7e:f6:c1:30:d1:
a2:ff:e7:dc:64:ab:e2:49:f9:fe:87:96:47:ff:f8:56:e0:d7:
8f:df:20:74:a6:b7:db:90:e1:e4:9a:de:ca:35:39:00:3c:54:
1c:b2:d8:0d:ba:4e:af:46:d8:b1:78:a6:02:54:ce:15:f8:2a:
f5:03:33:d4:5e:ba:34:c4:d9:eb:de:10:9d:bb:1f:1a:63:28:
fd:06:fb:44:44:2a:47:38:ad:67:9c:0a:97:5e:01:05:99:c8:
83:81:4a:ad:95:db:4f:e1:cc:b4:0f:a8:04:b9:47:cb:6c:c3:
35:8a:84:d2:e3:93:73:7e:e2:b6:c9:7e:f9:44:d9:c1:d1:16:
91:e1:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:00 2025 by rpki-client