Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231322e302f32322d3232203d3e203232313232.roa
File: 3134382e3230392e3231322e302f32322d3232203d3e203232313232.roa (raw, json)
Hash identifier: 2PVMdxUbUwvXHIR4rs7/kf/tSlFlQ9EBgg//yYw3jhA=
Subject key identifier: F2:D9:49:6D:5F:9E:35:ED:9C:24:0F:E0:87:6F:D5:DD:CB:63:99:97
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 5EA87837F5EF1D907DC6623BDAB107AC0999C336
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231322e302f32322d3232203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:47 +0000
ROA not before: Tue 04 Feb 2025 18:33:47 +0000
ROA not after: Tue 03 Feb 2026 18:38:47 +0000
asID: 22122
IP address blocks: 148.209.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a8:78:37:f5:ef:1d:90:7d:c6:62:3b:da:b1:07:ac:09:99:c3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:47 2025 GMT
Not After : Feb 3 18:38:47 2026 GMT
Subject: CN=F2D9496D5F9E35ED9C240FE0876FD5DDCB639997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:4d:39:7a:0e:77:87:b6:d6:e6:c4:04:c0:
f4:62:52:c6:ad:68:87:fb:e1:e5:0f:70:c1:ce:ce:
b4:af:ac:c4:79:87:75:64:f3:f3:4d:79:c7:52:ec:
4e:2b:27:c8:36:70:9c:b2:c3:d5:4e:0b:86:86:77:
9e:02:fb:7c:03:c3:a7:a3:0f:5a:af:6c:be:f0:62:
1b:8e:fe:b6:1a:9d:cf:94:c5:14:64:25:61:b0:7a:
61:7e:51:49:14:69:00:74:7b:7a:16:32:74:34:d9:
1c:6f:d0:98:59:33:a8:8c:ea:e9:bb:36:d7:80:93:
62:07:2e:f9:95:88:1d:4b:92:17:ec:f1:1e:40:9f:
89:91:86:44:d9:34:50:de:d6:2e:9e:2b:44:14:89:
cf:03:e4:8d:df:45:7d:87:b0:3b:e2:8d:fc:9d:61:
00:e9:af:1f:fd:43:dc:80:0b:83:5d:94:7e:67:9b:
87:3b:81:8f:de:86:f2:2b:88:0f:6f:36:87:2b:0d:
a2:51:e8:d1:b7:12:be:f6:a4:3e:b0:b7:b0:6b:0b:
48:b9:8b:60:fe:36:28:30:98:f1:2a:fa:c5:0e:e3:
b6:9a:8f:cb:ef:cf:93:bc:83:83:69:9f:32:7f:5a:
69:03:33:95:a1:28:3e:2f:33:55:ce:6a:4a:a2:34:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:49:6D:5F:9E:35:ED:9C:24:0F:E0:87:6F:D5:DD:CB:63:99:97
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231322e302f32322d3232203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.212.0/22
Signature Algorithm: sha256WithRSAEncryption
48:dd:dd:50:75:53:0b:08:c4:e2:a5:9b:98:d9:87:3a:27:23:
cf:a0:6f:54:bb:8d:8d:16:83:ed:e4:e3:cb:4e:32:4d:a0:46:
f7:b0:21:21:ad:85:88:91:89:9d:c1:6c:7b:2a:32:69:e5:e4:
cd:60:5a:2f:85:aa:e8:be:d3:33:e6:d7:03:88:75:06:33:23:
e0:57:12:55:20:d9:64:0c:89:fa:d6:f0:41:fa:d8:df:3e:12:
47:fc:b8:71:1d:e9:4c:8a:99:ec:e4:b3:05:dc:85:50:0e:9e:
8d:69:db:96:ad:f8:11:98:38:4b:0f:88:b7:89:39:15:9c:b4:
de:ab:3b:39:4b:66:68:0e:46:2b:b4:0f:df:cc:5a:7c:d5:19:
dd:55:fe:a3:78:f8:51:ed:cc:40:8d:cd:ed:af:79:d6:d7:95:
6c:c3:84:57:40:b9:17:37:42:7d:16:89:1e:25:0f:44:f6:fe:
ca:e2:db:c8:48:16:a0:9e:14:ec:12:97:c5:37:4f:3f:da:4a:
39:df:fe:6e:33:03:5a:43:bd:5f:03:bb:7b:e2:a8:5a:0e:8b:
a6:83:2d:72:29:65:56:7a:27:cb:ff:a6:2c:e5:c3:60:83:bf:
70:46:8a:fc:9e:ba:a8:2f:f2:d2:c6:65:bb:6a:6f:55:07:0a:
fb:11:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:09:38 2025 by rpki-client