Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231302e302f32342d3234203d3e20323732383033.roa
File: 3138362e352e3231302e302f32342d3234203d3e20323732383033.roa (raw, json)
Hash identifier: ROuNrx48ZarxQqZSo14QmPoODjr/RxIhp+KC9OBI3Bk=
Subject key identifier: EA:69:7D:D6:1C:C8:0D:1D:F4:A6:F7:F1:79:EA:91:BF:23:31:57:27
Certificate issuer: /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial: 4D29B4F5FC15DF8A2E360810E43AC8004EBE7B71
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231302e302f32342d3234203d3e20323732383033.roa
Signing time: Mon 16 Dec 2024 20:05:00 +0000
ROA not before: Mon 16 Dec 2024 20:00:00 +0000
ROA not after: Mon 15 Dec 2025 20:05:00 +0000
asID: 272803
IP address blocks: 186.5.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:29:b4:f5:fc:15:df:8a:2e:36:08:10:e4:3a:c8:00:4e:be:7b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Validity
Not Before: Dec 16 20:00:00 2024 GMT
Not After : Dec 15 20:05:00 2025 GMT
Subject: CN=EA697DD61CC80D1DF4A6F7F179EA91BF23315727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:be:45:47:1e:f4:8a:e0:03:4c:2c:e2:d9:
e5:21:9f:c7:80:36:b4:9a:c9:73:e3:45:e1:ab:6e:
ee:70:00:6c:0b:1d:36:c2:7d:b8:87:ec:97:fa:bc:
d9:af:ca:a4:8c:68:45:44:78:ad:c7:c3:6a:62:d7:
24:43:67:5f:3b:4d:3c:60:4a:c6:ea:bf:0b:aa:a8:
01:fa:a5:df:0e:de:7f:50:a8:cc:12:8c:11:dd:af:
b7:d1:92:2c:ee:ba:4f:ab:dd:79:30:83:91:7c:c7:
9f:18:90:f6:61:6a:4b:22:bc:a3:86:d8:ec:71:a1:
d1:f6:88:2d:a1:42:00:de:a7:93:e5:d5:28:d2:e1:
aa:f6:a1:1b:cb:9e:ea:ef:39:12:57:46:4f:05:c8:
d0:99:3f:e9:ea:c4:fb:5c:41:80:26:a8:e1:71:ae:
d5:e9:38:af:84:f8:dd:83:7a:ed:9c:a7:f0:9a:6f:
83:99:1f:91:4a:3c:68:f4:07:55:35:89:58:31:97:
ee:62:ad:3b:ec:7b:9d:01:ed:9f:1f:81:28:e0:c6:
14:0e:8a:aa:e9:af:e5:18:f8:30:d1:91:d9:be:b7:
49:de:f3:1c:2e:1b:c5:9e:e0:23:c1:d0:39:4c:df:
7a:5f:d1:5f:44:4b:b8:4e:4b:d5:1f:9f:65:2c:33:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:69:7D:D6:1C:C8:0D:1D:F4:A6:F7:F1:79:EA:91:BF:23:31:57:27
X509v3 Authority Key Identifier:
keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231302e302f32342d3234203d3e20323732383033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.5.210.0/24
Signature Algorithm: sha256WithRSAEncryption
56:af:5c:d3:55:e4:81:86:48:c6:f3:5c:40:fe:91:d3:b1:9e:
d8:9a:35:81:06:91:9f:38:81:8d:26:69:cf:f4:5a:d6:7d:b1:
ca:0c:5b:35:c7:cd:42:50:d1:e8:3e:ad:66:0d:5a:08:ae:82:
61:3e:e5:3b:9d:31:c4:25:1c:24:99:11:48:34:d2:49:bb:97:
b3:7f:91:37:c4:10:b0:d4:bc:2d:f9:21:bb:b1:e1:78:8d:cb:
33:cd:67:c5:bc:5b:0e:3a:0a:f5:c6:21:40:c0:6d:22:c4:81:
c2:53:00:d5:46:8e:ca:0a:7f:49:03:ec:d2:11:ab:33:a4:b7:
8b:9c:b7:cf:58:c8:4b:b5:d9:3f:35:c6:19:17:14:74:43:ba:
dc:c4:a4:b9:2c:5d:31:d5:68:93:e6:2d:2c:a6:7b:0c:e8:71:
69:8e:0b:f8:8d:47:8a:f9:74:aa:c1:9c:5d:9a:92:78:84:bb:
81:0a:17:55:7a:2a:ef:12:45:d3:2b:53:5a:84:c0:c8:6f:ce:
14:e5:18:56:f5:c7:f8:09:c9:62:08:f9:30:19:0c:9c:7c:8b:
9f:15:1b:b0:3c:70:c6:16:5b:5c:03:4d:10:e5:76:f0:8a:47:
15:53:29:f6:d5:66:53:4a:78:7a:93:bb:d5:d5:25:0d:82:1b:
db:34:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:59:10 2025 by rpki-client