Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233382e302f32332d3233203d3e203232313232.roa
File: 3134382e3230392e3233382e302f32332d3233203d3e203232313232.roa (raw, json)
Hash identifier: 2MWWlpj/jhUwPhLUx42aB4fIZh4BsrXwh84mo6JXg8A=
Subject key identifier: D7:D2:C5:38:DF:1B:0F:45:A5:22:5C:00:93:F0:F7:39:09:18:2F:C7
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 044B4ECF1799A8B75E5AAE8FD6A5E54BD8B0556D
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233382e302f32332d3233203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:44 +0000
ROA not before: Tue 04 Feb 2025 18:33:44 +0000
ROA not after: Tue 03 Feb 2026 18:38:44 +0000
asID: 22122
IP address blocks: 148.209.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4b:4e:cf:17:99:a8:b7:5e:5a:ae:8f:d6:a5:e5:4b:d8:b0:55:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:44 2025 GMT
Not After : Feb 3 18:38:44 2026 GMT
Subject: CN=D7D2C538DF1B0F45A5225C0093F0F73909182FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:7f:ec:ac:39:b2:db:9e:4a:67:2c:0c:a3:
69:e3:c9:52:78:7b:1c:d7:63:a4:8a:13:3a:08:76:
cf:ea:89:c2:4b:21:c4:e7:e5:8c:70:fa:06:a4:f1:
35:bb:35:a7:de:cb:2d:70:8a:f1:cb:ce:de:83:46:
1a:05:02:12:19:79:28:64:2c:e8:97:7e:a1:f8:06:
4b:7f:12:be:1d:f9:c6:64:72:e4:2d:3a:da:18:d8:
f2:b7:89:93:92:4f:94:00:74:b9:88:e7:01:8b:f2:
85:7e:78:de:92:e4:dc:e4:3c:5e:4d:dd:fa:52:d6:
63:ae:10:52:08:28:c8:13:3e:26:1d:96:dc:21:46:
4a:0a:5f:02:6b:50:24:69:b7:f7:2c:dd:e3:1d:00:
7a:17:f3:48:07:7e:cd:95:2b:88:79:a3:f7:81:72:
e4:31:e8:d5:66:39:52:28:5c:9a:67:f1:46:c4:b5:
c9:1a:c8:f2:82:20:24:a1:6f:db:74:75:02:99:4b:
a2:1d:2c:8e:ce:cd:1f:f4:49:be:0d:86:12:1c:e7:
42:e5:b9:68:6d:3e:90:85:9b:83:a9:b2:55:14:bf:
28:da:ee:c5:40:08:99:fd:77:14:ad:88:03:33:18:
69:dd:cb:f1:65:3d:84:f9:b6:ee:09:61:9a:a6:94:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D2:C5:38:DF:1B:0F:45:A5:22:5C:00:93:F0:F7:39:09:18:2F:C7
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233382e302f32332d3233203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.238.0/23
Signature Algorithm: sha256WithRSAEncryption
52:22:39:60:c5:ad:82:e4:2f:4d:c4:80:4d:44:54:1a:a1:68:
d9:aa:e3:20:a8:31:f9:97:95:80:45:03:d1:ee:60:81:b0:61:
2c:b7:39:12:f7:cc:29:c3:d6:16:9b:95:90:74:0b:77:78:6c:
07:d5:52:e6:3a:bf:f9:42:e1:1a:c7:a7:4e:5a:6e:06:fe:e9:
0e:20:33:c1:67:8d:c9:64:b4:fc:bc:f5:ef:a2:38:61:e0:92:
d6:b7:bf:f0:53:e4:5b:4c:87:2c:26:8d:b0:50:e4:26:45:72:
ed:8f:62:1f:2f:cf:07:92:9d:7d:dd:d0:ab:eb:af:9d:c3:b0:
c9:62:6d:a7:3c:6e:6b:f7:07:e3:aa:be:ea:18:7d:eb:c8:71:
13:0b:4c:c3:54:c0:46:20:f6:9d:8e:b6:6e:f4:56:89:ce:18:
db:4b:d5:9d:84:3d:bb:d4:df:ba:0f:02:02:91:8e:70:fa:4a:
86:bc:c1:80:28:68:d9:e2:12:c5:7b:b3:26:43:63:3a:12:ae:
18:0a:da:e7:ea:4d:8d:3b:26:42:61:15:db:eb:9c:e6:a7:d9:
87:fa:8b:34:3d:d1:30:4f:39:02:50:e3:11:44:dc:cf:a4:7e:
a0:6c:2b:7c:8c:f0:13:71:52:82:cc:ca:4f:da:56:38:a0:98:
15:e9:57:a2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBEtOzxeZqLdeWq6P1qXlS9iwVW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNTAyMDQxODMzNDRaFw0yNjAyMDMxODM4NDRaMDMxMTAvBgNV
BAMTKEQ3RDJDNTM4REYxQjBGNDVBNTIyNUMwMDkzRjBGNzM5MDkxODJGQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClAX/srDmy255KZywMo2njyVJ4
exzXY6SKEzoIds/qicJLIcTn5Yxw+gak8TW7Nafeyy1wivHLzt6DRhoFAhIZeShk
LOiXfqH4Bkt/Er4d+cZkcuQtOtoY2PK3iZOST5QAdLmI5wGL8oV+eN6S5NzkPF5N
3fpS1mOuEFIIKMgTPiYdltwhRkoKXwJrUCRpt/cs3eMdAHoX80gHfs2VK4h5o/eB
cuQx6NVmOVIoXJpn8UbEtckayPKCICShb9t0dQKZS6IdLI7OzR/0Sb4NhhIc50Ll
uWhtPpCFm4OpslUUvyja7sVACJn9dxStiAMzGGndy/FlPYT5tu4JYZqmlLKbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU19LFON8bD0WlIlwAk/D3OQkYL8cwHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMjMzMzgy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlNHu
MA0GCSqGSIb3DQEBCwUAA4IBAQBSIjlgxa2C5C9NxIBNRFQaoWjZquMgqDH5l5WA
RQPR7mCBsGEstzkS98wpw9YWm5WQdAt3eGwH1VLmOr/5QuEax6dOWm4G/ukOIDPB
Z43JZLT8vPXvojhh4JLWt7/wU+RbTIcsJo2wUOQmRXLtj2IfL88Hkp193dCr66+d
w7DJYm2nPG5r9wfjqr7qGH3ryHETC0zDVMBGIPadjrZu9FaJzhjbS9WdhD271N+6
DwICkY5w+kqGvMGAKGjZ4hLFe7MmQ2M6Eq4YCtrn6k2NOyZCYRXb65zmp9mH+os0
PdEwTzkCUOMRRNzPpH6gbCt8jPATcVKCzMpP2lY4oJgV6Vei
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:27:54 2025 by rpki-client