Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38382e302f32322d3233203d3e203232313232.roa
File: 3134382e3230392e38382e302f32322d3233203d3e203232313232.roa (raw, json)
Hash identifier: B+UBuHzqR/DiZQhNXME6Nqg6L6pNVybT7/QeTZvQyd8=
Subject key identifier: 72:5C:8F:D4:10:93:0D:D8:72:70:FC:0C:CB:97:2D:3F:AE:23:37:12
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 7E4065F65EACA027AE2C968F840433C6B069C7C8
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38382e302f32322d3233203d3e203232313232.roa
Signing time: Tue 04 Feb 2025 18:38:56 +0000
ROA not before: Tue 04 Feb 2025 18:33:56 +0000
ROA not after: Tue 03 Feb 2026 18:38:56 +0000
asID: 22122
IP address blocks: 148.209.88.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:40:65:f6:5e:ac:a0:27:ae:2c:96:8f:84:04:33:c6:b0:69:c7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Feb 4 18:33:56 2025 GMT
Not After : Feb 3 18:38:56 2026 GMT
Subject: CN=725C8FD410930DD87270FC0CCB972D3FAE233712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:6c:38:7a:2c:10:8b:3c:77:8c:b3:33:f0:
53:f0:7f:7b:22:ed:fa:d1:8c:89:75:b5:f7:e9:86:
b9:87:83:ec:f6:39:f9:75:a4:d1:9f:69:73:f7:5f:
a8:1c:12:a9:e1:d7:b6:65:19:2e:e0:61:1a:be:86:
bb:34:ae:5e:ff:38:28:91:24:27:0a:ba:ab:5e:b7:
ab:bc:db:5d:3c:32:61:6c:0d:09:77:b7:e6:7e:74:
62:69:ad:b4:fc:59:f8:e3:d1:eb:d4:4b:0c:1b:4a:
cf:80:50:c5:f3:35:de:09:24:be:24:f6:0e:fb:d8:
c1:47:89:64:75:c7:cc:b7:f4:fa:e7:05:10:5d:b7:
54:44:80:17:ef:8d:a0:1e:15:fd:a0:66:d9:0f:97:
84:b4:35:05:fc:f8:41:f4:22:be:ba:c4:e2:1b:c8:
74:16:2f:cc:ce:af:0d:9f:dc:c3:7b:ae:5a:6c:a3:
0b:22:41:03:44:c7:c9:ec:a5:ff:0e:d4:6f:cd:6a:
58:d0:2f:a3:7f:fd:97:dd:eb:59:0e:56:b8:9b:7d:
42:fd:78:36:ba:af:8d:b4:5c:0b:de:cb:a6:9e:72:
63:bd:b1:55:42:30:10:7a:5b:bc:17:d0:b5:70:43:
63:78:12:22:e6:30:85:6f:0e:ef:f9:59:28:35:2c:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5C:8F:D4:10:93:0D:D8:72:70:FC:0C:CB:97:2D:3F:AE:23:37:12
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38382e302f32322d3233203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.88.0/22
Signature Algorithm: sha256WithRSAEncryption
48:e8:57:02:13:59:dc:64:63:c3:74:6a:e3:d9:b7:f3:4d:66:
80:69:26:ef:6d:e4:69:52:70:e9:95:8c:76:0f:67:77:f9:65:
37:c8:6f:2b:d9:cf:59:3b:46:57:2c:d6:04:b2:47:e7:f3:a6:
2e:58:03:00:10:66:b5:54:7f:66:82:58:11:a2:c9:99:5a:9b:
ed:93:98:fc:36:79:9f:56:d0:5f:4f:c7:6b:50:d4:e7:03:89:
0b:9e:8b:0d:b9:6c:da:01:80:75:16:02:ef:93:54:82:82:57:
64:50:1b:12:fc:f8:2f:08:d2:f3:b9:a8:b3:b8:07:e1:a7:42:
57:7f:05:4c:21:ec:6b:ff:1b:77:56:c4:36:69:8d:6c:4c:63:
5e:37:18:a5:b9:27:88:d0:46:a6:b7:fb:b4:bd:00:1b:63:c1:
a8:7c:6a:29:02:7f:ea:7c:7f:0e:2e:67:63:e3:2b:db:1d:29:
40:25:71:ea:0a:9c:89:85:37:06:77:72:21:31:fe:05:a4:6c:
f0:66:9c:7f:9c:15:97:2b:7b:fd:6e:63:d6:c7:f4:7e:0e:9c:
a9:18:99:87:51:3a:f5:86:17:a6:ab:1e:83:20:83:dd:b1:86:
dc:48:41:51:d0:39:7f:11:07:4c:db:cc:c8:6b:da:e1:fe:ec:
a4:49:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:09:49 2025 by rpki-client