Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230382e302f32332d3234203d3e203232313232.roa
File: 3134382e3230392e3230382e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier: jbLdLjHmyf8hSCzgnYFWoSNwZOJPlb9+W1jNWUqo1f4=
Subject key identifier: 70:33:20:B5:EA:E6:EF:4D:D0:9D:3E:D5:1C:ED:16:33:63:EC:30:DB
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 43DB25F2F20DD0D39BEBA2B9E4266A0030BF22AB
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230382e302f32332d3234203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:59 +0000
ROA not before: Tue 04 Feb 2025 18:33:59 +0000
ROA not after: Tue 03 Feb 2026 18:38:59 +0000
asID: 22122
IP address blocks: 148.209.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:db:25:f2:f2:0d:d0:d3:9b:eb:a2:b9:e4:26:6a:00:30:bf:22:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:59 2025 GMT
Not After : Feb 3 18:38:59 2026 GMT
Subject: CN=703320B5EAE6EF4DD09D3ED51CED163363EC30DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:e0:2e:27:80:c6:cd:c4:b2:57:3a:2b:f6:
5c:08:7b:95:35:71:6a:41:43:09:16:6d:3e:06:72:
7b:2b:f3:9a:a8:bd:52:0b:74:1f:8e:d7:72:cb:0c:
2a:06:9e:b1:1a:b7:d8:42:ce:69:ab:2d:16:66:50:
6e:e9:25:99:2d:8c:aa:3f:01:71:18:95:6c:91:dd:
a4:f3:21:4e:e9:ba:5f:4a:1c:b2:30:ac:d4:8a:3a:
01:0b:05:dd:f1:e5:6c:74:c9:86:c6:c0:1b:84:61:
01:3a:a3:a1:f9:1a:09:97:05:86:fc:70:eb:33:d6:
0d:d4:37:d5:3c:e5:77:10:66:62:70:e9:9c:03:06:
01:1b:4e:0c:39:9a:ec:a0:59:fb:c8:d8:35:b3:86:
ed:01:be:8b:6b:8d:73:e2:48:3c:60:6b:48:d8:f1:
13:9b:f7:ae:bd:81:8a:a8:fc:f6:0e:13:fb:44:82:
ba:be:71:31:a3:e4:ba:da:2c:32:44:c7:bc:d9:7a:
37:96:ea:51:dd:d7:23:47:08:23:dc:0a:b2:c8:2d:
42:9d:9c:c0:36:dd:fd:9c:91:4b:8d:7b:9c:a0:4a:
1f:38:e0:c7:91:e4:6d:25:eb:6e:cf:00:aa:1a:bc:
49:dc:55:6c:6c:e0:9a:d4:67:c9:58:96:92:6d:2a:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:33:20:B5:EA:E6:EF:4D:D0:9D:3E:D5:1C:ED:16:33:63:EC:30:DB
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230382e302f32332d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.208.0/23
Signature Algorithm: sha256WithRSAEncryption
97:35:8c:c9:7c:3a:8a:2b:e6:42:88:9e:2a:b9:e8:fa:1b:ad:
db:24:8d:5a:3a:ef:06:68:60:3d:33:dd:62:5a:c6:d8:86:c7:
c7:f2:97:5e:10:76:fa:59:0d:a3:55:4c:ae:48:15:e4:f5:c6:
e9:78:bc:2e:e8:32:ab:2f:22:b5:4a:7b:8f:19:d2:25:7d:3b:
47:6f:ea:3c:2c:da:49:22:30:67:a2:ef:2b:d5:7a:7c:32:bd:
27:16:87:20:fc:2a:ab:0d:0b:c0:5d:6e:be:9e:be:85:2f:4a:
8f:04:37:d7:a0:67:fc:dc:a4:2d:a0:3e:37:c0:fd:00:3b:41:
35:1b:ac:2d:dc:0d:a7:38:c4:23:7a:b0:2d:77:3b:00:65:8f:
16:76:4f:42:46:98:7a:c4:d2:1c:66:fc:ba:48:22:35:63:24:
42:02:72:4d:db:fd:cb:f1:4f:84:9d:bc:79:5d:5d:d1:6c:43:
a5:1a:ca:17:a5:2b:8d:e1:e9:d7:82:a6:22:47:69:a0:73:e2:
ba:c3:12:ba:70:48:80:18:8c:1e:d0:e6:32:97:2e:71:6e:a9:
68:d7:d3:df:a4:59:a9:66:98:69:9f:4a:ee:d0:65:d2:46:ab:
3e:c0:4a:56:01:0c:ed:b2:d5:fc:67:e3:7a:de:cf:93:e4:52:
4d:1f:23:d6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQ9sl8vIN0NOb66K55CZqADC/IqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNTAyMDQxODMzNTlaFw0yNjAyMDMxODM4NTlaMDMxMTAvBgNV
BAMTKDcwMzMyMEI1RUFFNkVGNEREMDlEM0VENTFDRUQxNjMzNjNFQzMwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zOAuJ4DGzcSyVzor9lwIe5U1
cWpBQwkWbT4Gcnsr85qovVILdB+O13LLDCoGnrEat9hCzmmrLRZmUG7pJZktjKo/
AXEYlWyR3aTzIU7pul9KHLIwrNSKOgELBd3x5Wx0yYbGwBuEYQE6o6H5GgmXBYb8
cOsz1g3UN9U85XcQZmJw6ZwDBgEbTgw5muygWfvI2DWzhu0BvotrjXPiSDxga0jY
8ROb9669gYqo/PYOE/tEgrq+cTGj5LraLDJEx7zZejeW6lHd1yNHCCPcCrLILUKd
nMA23f2ckUuNe5ygSh844MeR5G0l627PAKoavEncVWxs4JrUZ8lYlpJtKg/ZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcDMgterm703QnT7VHO0WM2PsMNswHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMjMwMzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlNHQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCXNYzJfDqKK+ZCiJ4quej6G63bJI1aOu8GaGA9
M91iWsbYhsfH8pdeEHb6WQ2jVUyuSBXk9cbpeLwu6DKrLyK1SnuPGdIlfTtHb+o8
LNpJIjBnou8r1Xp8Mr0nFocg/CqrDQvAXW6+nr6FL0qPBDfXoGf83KQtoD43wP0A
O0E1G6wt3A2nOMQjerAtdzsAZY8Wdk9CRph6xNIcZvy6SCI1YyRCAnJN2/3L8U+E
nbx5XV3RbEOlGsoXpSuN4enXgqYiR2mgc+K6wxK6cEiAGIwe0OYyly5xbqlo19Pf
pFmpZphpn0ru0GXSRqs+wEpWAQztstX8Z+N63s+T5FJNHyPW
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:42:54 2025 by rpki-client