Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3137362e302f32302d3230203d3e203232313232.roa
File: 3134382e3230392e3137362e302f32302d3230203d3e203232313232.roa (raw, json)
Hash identifier: bOHG6Y4bM3L+OQ6p9GJKYME3x+zGVg+qFOR5GtY58xg=
Subject key identifier: 4F:66:0F:A6:8E:61:E3:23:1E:17:E2:3D:96:10:49:2D:4B:5A:1D:C5
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 4C3F049F7AA47B8ECB03D471444EC57A93A6104A
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3137362e302f32302d3230203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:56 +0000
ROA not before: Tue 04 Feb 2025 18:33:56 +0000
ROA not after: Tue 03 Feb 2026 18:38:56 +0000
asID: 22122
IP address blocks: 148.209.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3f:04:9f:7a:a4:7b:8e:cb:03:d4:71:44:4e:c5:7a:93:a6:10:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:56 2025 GMT
Not After : Feb 3 18:38:56 2026 GMT
Subject: CN=4F660FA68E61E3231E17E23D9610492D4B5A1DC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:08:7c:10:af:85:34:e2:70:12:be:72:6f:
7f:34:b1:09:08:da:8f:a8:01:8c:b3:50:92:87:66:
15:4d:69:f1:b9:39:97:b4:54:b1:20:10:81:dc:9d:
6f:57:0a:3e:9e:fb:d2:a5:7d:f4:1d:e3:80:f6:36:
93:6a:a4:7f:a6:34:31:82:2b:58:66:96:e8:df:36:
51:b8:26:7a:c4:c2:90:1a:72:22:ca:73:ed:e3:bf:
a6:29:f8:62:f5:cd:32:30:16:1d:6a:fb:54:40:1c:
ef:1d:57:c9:8e:bf:6e:10:bf:0c:90:dc:ca:01:d2:
b0:0b:55:74:81:a8:9f:67:84:ee:e9:32:95:79:7c:
70:9c:9d:64:bd:10:13:e7:03:1b:59:50:5f:7e:45:
b1:cb:01:e3:b4:85:14:39:d9:67:31:fe:3c:a1:7b:
6b:a4:66:6a:49:45:24:68:91:40:cd:b3:91:89:44:
16:a3:39:39:b9:8a:ef:c9:2c:f6:18:01:be:87:d9:
da:64:82:bb:df:8f:88:7e:be:12:a7:c0:89:2b:a5:
1c:70:07:d4:0e:62:c9:c3:03:21:76:49:28:b8:bf:
31:e3:15:ae:5a:d6:84:e5:75:9b:aa:f2:89:e5:84:
9f:3d:f5:73:34:91:b5:d3:0e:1a:13:30:05:3a:81:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:0F:A6:8E:61:E3:23:1E:17:E2:3D:96:10:49:2D:4B:5A:1D:C5
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3137362e302f32302d3230203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.176.0/20
Signature Algorithm: sha256WithRSAEncryption
33:29:3f:db:81:46:60:1e:59:71:74:ba:92:22:70:47:ae:c3:
e8:a8:d6:05:1f:2b:47:45:46:b5:61:8e:a9:be:4c:1a:84:49:
40:77:a2:d1:bb:0c:4d:a5:63:43:72:b4:6c:ee:b3:3b:40:75:
4f:14:e3:43:2b:ff:13:05:99:de:cf:c7:24:cb:90:10:e8:6c:
b2:9c:27:1f:8b:0f:6a:4e:55:38:0f:ef:41:65:a0:32:f3:21:
a1:b2:3e:35:c3:0a:2c:4b:d4:22:11:97:5f:a4:48:3e:d1:8a:
4a:87:7f:55:aa:e1:1a:2d:18:48:78:b9:9c:aa:2b:18:49:22:
15:a6:9b:9f:81:e8:79:12:84:8f:99:70:4f:74:fb:29:e0:d0:
83:de:7e:58:f8:be:fc:67:e3:65:bd:44:e9:5d:6b:ce:35:14:
ff:d2:ed:03:7b:75:58:bc:b4:f9:9d:eb:c1:b4:5d:82:8c:a5:
73:f1:a3:17:75:7f:1a:5a:ab:0e:1a:b5:51:26:ea:e7:4a:12:
4f:73:04:a0:4e:32:fe:8f:78:88:4a:6c:cb:78:e1:58:6b:ae:
dc:98:1a:8a:95:68:9b:b5:3f:b1:47:e9:ea:fd:bb:ec:5d:6f:
75:cc:6f:4a:6e:13:e1:33:df:54:1b:23:fa:02:d6:5b:ce:67:
48:0f:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:27:55 2025 by rpki-client