Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3137352e302f32342d3234203d3e203232313232.roa
File: 3134382e3230392e3137352e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier: fwpsWK75p90V3p6DPJLUa45dqt55j1PilDuFwhe0YMw=
Subject key identifier: 09:66:A0:48:72:6E:71:6D:88:2E:79:6E:69:FB:56:1C:84:99:7B:DF
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 51472DDC2C44F211CD3AB81A85410D51B6605C07
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3137352e302f32342d3234203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:39:01 +0000
ROA not before: Tue 04 Feb 2025 18:34:01 +0000
ROA not after: Tue 03 Feb 2026 18:39:01 +0000
asID: 22122
IP address blocks: 148.209.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:47:2d:dc:2c:44:f2:11:cd:3a:b8:1a:85:41:0d:51:b6:60:5c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:34:01 2025 GMT
Not After : Feb 3 18:39:01 2026 GMT
Subject: CN=0966A048726E716D882E796E69FB561C84997BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:56:b9:28:62:f7:21:cc:93:20:74:c0:47:
4e:40:a7:8a:96:38:23:07:90:0f:de:1a:d1:95:5a:
fc:67:fb:9c:63:cf:41:64:37:aa:23:a3:e2:34:5a:
81:08:98:69:73:3c:5b:8b:32:25:df:82:76:50:98:
38:cc:5f:35:11:90:38:4f:06:8c:11:ae:f3:43:50:
cf:a6:70:b3:12:85:1c:f8:5b:47:f6:4a:0a:02:53:
a2:80:77:55:5d:6b:37:70:a2:30:2b:e0:48:47:79:
5b:df:14:9f:3f:d0:94:54:fc:7e:79:ca:75:27:d4:
89:ea:4e:a9:93:dd:a6:81:ae:e7:23:87:80:85:69:
50:8d:82:c0:f0:ec:a5:6b:79:af:ae:2e:a0:5a:c5:
f6:4a:2f:88:48:b7:4b:35:73:a3:03:84:b9:e5:94:
de:73:d9:7e:97:d2:7f:53:d4:2b:cd:c6:34:82:39:
79:1c:da:09:a0:db:e8:a7:66:60:53:1b:70:44:8a:
24:0a:05:f6:36:d4:15:3f:5b:88:70:60:fa:90:64:
f9:27:62:ed:83:cb:69:c2:15:75:68:97:d8:ba:36:
9a:0c:f3:bf:fd:e2:53:89:d5:e7:cd:63:95:ff:4a:
bf:76:c5:14:fb:33:5c:7d:52:aa:c1:c8:d1:e5:d9:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:A0:48:72:6E:71:6D:88:2E:79:6E:69:FB:56:1C:84:99:7B:DF
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3137352e302f32342d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.175.0/24
Signature Algorithm: sha256WithRSAEncryption
35:30:bb:65:1e:ee:5b:3d:27:eb:02:95:68:32:a3:77:a0:ef:
8b:3e:98:24:fa:8c:3f:d2:3b:d8:9e:8b:21:59:59:64:30:69:
34:a0:c0:65:bb:8b:22:ca:5f:ee:b1:af:8f:92:1d:b1:fd:46:
89:ac:19:1f:c2:9c:cd:4e:3c:e2:bc:97:15:b9:d1:74:50:ff:
52:b8:5d:4a:89:52:4a:94:27:5e:36:92:df:05:bc:36:4f:8e:
62:d8:82:3f:26:f9:77:ad:97:f4:18:53:41:52:17:3c:14:03:
30:62:e8:f4:05:7b:bc:8c:42:47:29:b2:96:0f:1b:77:9e:1d:
c1:59:c9:0d:fe:9b:d2:88:40:07:6d:9e:6c:6e:76:a6:d8:eb:
74:ba:e2:65:d2:6e:88:86:ee:67:11:89:73:f5:17:2f:e5:f0:
01:60:30:0c:a8:25:31:e0:fc:f4:14:de:68:21:47:f1:0f:9f:
1e:cf:7a:64:07:27:ec:ba:17:11:3f:1c:2c:46:14:5b:44:89:
2b:75:f8:41:89:13:dc:79:a1:49:9b:02:85:67:c2:d5:30:7f:
43:ee:2b:83:14:53:b9:c1:58:eb:d4:40:4e:79:9a:f6:8d:11:
bc:8d:e1:1a:f0:85:81:be:39:d6:e3:6f:6e:9c:00:e4:04:da:
34:b3:56:3e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUUct3CxE8hHNOrgahUENUbZgXAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNTAyMDQxODM0MDFaFw0yNjAyMDMxODM5MDFaMDMxMTAvBgNV
BAMTKDA5NjZBMDQ4NzI2RTcxNkQ4ODJFNzk2RTY5RkI1NjFDODQ5OTdCREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnV1a5KGL3IcyTIHTAR05Ap4qW
OCMHkA/eGtGVWvxn+5xjz0FkN6ojo+I0WoEImGlzPFuLMiXfgnZQmDjMXzURkDhP
BowRrvNDUM+mcLMShRz4W0f2SgoCU6KAd1VdazdwojAr4EhHeVvfFJ8/0JRU/H55
ynUn1InqTqmT3aaBrucjh4CFaVCNgsDw7KVrea+uLqBaxfZKL4hIt0s1c6MDhLnl
lN5z2X6X0n9T1CvNxjSCOXkc2gmg2+inZmBTG3BEiiQKBfY21BU/W4hwYPqQZPkn
Yu2Dy2nCFXVol9i6NpoM87/94lOJ1efNY5X/Sr92xRT7M1x9UqrByNHl2QQxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCWagSHJucW2ILnluaftWHISZe98wHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMTM3MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlNGv
MA0GCSqGSIb3DQEBCwUAA4IBAQA1MLtlHu5bPSfrApVoMqN3oO+LPpgk+ow/0jvY
noshWVlkMGk0oMBlu4siyl/usa+Pkh2x/UaJrBkfwpzNTjzivJcVudF0UP9SuF1K
iVJKlCdeNpLfBbw2T45i2II/Jvl3rZf0GFNBUhc8FAMwYuj0BXu8jEJHKbKWDxt3
nh3BWckN/pvSiEAHbZ5sbnam2Ot0uuJl0m6Ihu5nEYlz9Rcv5fABYDAMqCUx4Pz0
FN5oIUfxD58ez3pkByfsuhcRPxwsRhRbRIkrdfhBiRPceaFJmwKFZ8LVMH9D7iuD
FFO5wVjr1EBOeZr2jRG8jeEa8IWBvjnW429unADkBNo0s1Y+
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:27:51 2025 by rpki-client