Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e37322e302f32332d3234203d3e203232313232.roa
File: 3134382e3230392e37322e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier: 17fyN52OeYEpbu5ie1VcXig/O7YzqwxMcdtdUlaNhso=
Subject key identifier: 58:65:6C:18:9D:43:92:55:5C:65:27:79:D8:41:81:42:64:CD:79:CE
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 3F0E6A6184E3192A5E1A4B4DD197322DE86F94BD
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e37322e302f32332d3234203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:58 +0000
ROA not before: Tue 04 Feb 2025 18:33:58 +0000
ROA not after: Tue 03 Feb 2026 18:38:58 +0000
asID: 22122
IP address blocks: 148.209.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0e:6a:61:84:e3:19:2a:5e:1a:4b:4d:d1:97:32:2d:e8:6f:94:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:58 2025 GMT
Not After : Feb 3 18:38:58 2026 GMT
Subject: CN=58656C189D4392555C652779D841814264CD79CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:6c:0b:c7:c1:b5:e9:85:85:42:3d:06:ea:
77:84:27:10:12:ef:c1:43:f1:e2:63:a8:e7:11:50:
6e:09:f2:73:18:db:15:d5:f1:35:2b:c5:cd:f0:a1:
ac:f8:4b:1b:96:d0:25:93:ff:72:99:30:20:f0:a8:
c2:02:22:e0:0d:ac:8a:3f:9d:0c:52:22:d3:ca:79:
80:39:b0:fc:b2:0c:0b:6f:89:f9:61:1c:b7:c4:e6:
52:73:a2:b1:4c:c4:0f:25:7e:a5:65:af:27:2d:d6:
31:9c:4b:b5:60:35:20:68:58:79:15:09:f5:9f:eb:
31:d2:93:31:d9:5c:9e:1a:ca:48:a2:1a:5c:4b:d1:
0c:8e:49:0d:c0:a5:03:98:cb:20:ae:ce:13:e5:22:
ea:e1:4d:86:49:a7:86:1c:9a:cb:88:53:3b:7a:01:
f7:7a:d6:f4:ea:04:aa:27:18:04:54:5d:1d:9c:63:
a2:30:8a:cd:68:8d:11:7e:0e:3d:84:4a:78:d5:c0:
43:2e:15:b9:50:f3:15:db:82:24:f1:ea:1b:ac:76:
b0:40:34:a1:96:cc:46:15:ea:2f:f1:16:82:d4:a2:
7b:3f:2e:5b:94:4e:46:dd:8c:91:e9:42:13:61:9b:
e5:38:fb:9e:23:46:0a:da:ce:9c:4d:59:0f:89:b1:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:65:6C:18:9D:43:92:55:5C:65:27:79:D8:41:81:42:64:CD:79:CE
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e37322e302f32332d3234203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.72.0/23
Signature Algorithm: sha256WithRSAEncryption
91:82:90:88:b5:c4:f4:fb:11:a2:39:e6:2c:83:0b:7d:e1:8c:
9e:09:e6:22:98:1d:b7:fe:be:23:f8:0c:50:5a:5b:75:b6:fc:
76:bf:e5:ec:2b:55:e0:1f:ce:1e:74:b8:46:52:7c:44:23:a4:
f5:16:e7:0a:e3:3a:22:90:14:86:e1:3d:0a:0f:08:c6:06:65:
7b:a3:d8:aa:b8:b6:98:61:c1:42:18:b5:09:99:5a:2e:b0:99:
e6:f6:ae:4a:13:85:07:3e:9e:d9:db:d6:0f:fc:44:58:38:f1:
80:da:26:91:ba:78:9e:85:5c:ca:8a:5a:d6:27:96:55:30:ae:
b4:50:5a:76:b9:a9:29:4b:73:f1:d2:95:25:11:d2:87:1a:ec:
2e:2f:1a:20:6c:ba:94:e6:1c:e6:df:6d:49:4f:ed:0c:54:a5:
dc:f6:31:20:4e:ab:44:8f:85:54:b6:4b:4d:18:d0:ff:7c:f7:
bc:eb:27:40:50:6b:16:fd:03:33:c6:f0:64:6f:c9:b8:a7:1d:
0c:da:1a:2a:58:9d:48:f7:dc:98:94:3f:cc:e5:35:c1:7b:80:
f9:90:41:f1:ff:1a:e4:d7:13:73:5b:07:28:bb:74:37:2c:8f:
5e:ef:8c:e7:7a:6b:08:3c:f4:62:b9:36:74:39:7c:0c:d1:ce:
b5:39:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:23 2025 by rpki-client