Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa
File: 3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa (raw, json)
Hash identifier: 7fAe1qbyOumcmOpQovxuE+kQ7+8dr746UEhl6uT49eg=
Subject key identifier: F9:D5:23:71:30:49:32:B6:43:9B:5D:F3:D9:4B:87:A3:1C:5C:8D:48
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 1B0EBB196F3C45026FC089A83ED82E3185674F54
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:48 +0000
ROA not before: Tue 04 Feb 2025 18:33:48 +0000
ROA not after: Tue 03 Feb 2026 18:38:48 +0000
asID: 22122
IP address blocks: 148.209.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:0e:bb:19:6f:3c:45:02:6f:c0:89:a8:3e:d8:2e:31:85:67:4f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:48 2025 GMT
Not After : Feb 3 18:38:48 2026 GMT
Subject: CN=F9D52371304932B6439B5DF3D94B87A31C5C8D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:55:ba:ec:84:ac:d0:a8:f9:b4:11:cf:66:
09:96:d5:46:ce:8c:af:1e:aa:1a:2a:4e:20:59:a8:
ab:89:5d:1f:40:46:81:58:0f:a1:31:33:27:c5:1c:
22:53:7c:1d:5c:88:96:37:29:af:ab:3c:ac:9b:8c:
c6:e9:c0:6c:3d:76:56:43:4e:eb:03:95:75:d3:96:
9a:c4:86:42:8b:69:52:6e:e4:55:0d:4b:24:53:06:
12:ac:aa:3c:ef:27:66:3b:66:53:82:2a:ec:71:cc:
31:67:23:a4:0e:50:4a:b6:9f:47:5f:07:09:5b:d7:
8b:6d:df:dc:8e:aa:a8:2b:f2:97:97:bb:97:e1:eb:
31:36:8c:0f:39:f2:d4:f4:c9:60:01:f0:50:14:91:
77:0a:92:cb:da:81:ec:c7:43:55:8e:0e:9a:5a:d6:
4b:97:90:62:ef:b6:35:62:b5:ae:19:ae:cd:66:1f:
66:04:f9:77:6e:97:2a:a7:91:1e:c7:fb:d1:15:15:
ed:0f:bf:ec:85:3c:73:5f:7b:5a:d4:5e:b8:fc:de:
2a:aa:4e:06:5e:5c:06:0a:91:79:22:08:d1:75:d9:
d5:20:2b:b7:13:ac:fd:21:74:06:35:4e:1e:20:e9:
1f:ef:a5:46:0a:37:b0:95:ff:0b:a3:6f:91:fb:6a:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D5:23:71:30:49:32:B6:43:9B:5D:F3:D9:4B:87:A3:1C:5C:8D:48
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.142.0/23
Signature Algorithm: sha256WithRSAEncryption
55:12:6a:aa:91:0c:50:95:26:c2:a1:91:f3:ef:f0:07:85:cb:
31:88:f8:0a:00:12:ed:a7:b6:c9:92:d8:99:1e:0c:a9:11:9d:
88:0e:24:50:2c:1f:b5:da:28:de:4d:29:ac:bb:08:d2:f1:eb:
fa:d1:d3:e9:0f:75:dd:ff:21:83:91:34:3a:14:50:eb:cb:8b:
cc:29:9d:c9:50:f2:65:39:74:dd:2f:17:a0:71:39:09:17:3f:
fe:c4:58:01:5c:91:3b:72:08:de:47:59:19:24:11:8b:30:57:
3f:54:c0:2f:07:a1:20:c6:b6:64:b7:1b:5b:1f:ac:8c:b6:17:
f3:2b:c7:e7:9b:9b:a8:a1:51:ac:a5:61:15:49:92:fc:83:6b:
45:05:bf:4d:ed:3a:8d:fb:a8:03:43:7d:77:43:ff:0a:46:8e:
8f:6f:55:15:fe:70:a1:ab:a1:ff:0f:00:9f:a6:d7:0d:14:44:
b4:f9:00:bf:81:c1:e6:63:07:01:8e:82:5c:7a:0d:89:0b:bd:
bb:79:80:6c:6a:14:81:5f:33:93:87:fb:0c:10:2f:aa:58:49:
2d:8f:d1:07:86:ff:4e:49:74:65:a7:5b:46:bc:01:ee:c3:30:
df:b6:a8:9c:9e:65:ab:21:90:ee:d4:fb:0e:15:f8:8e:cd:c5:
67:cc:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:42 2025 by rpki-client