Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323635383635.roa
File: 3133382e3131372e31332e302f32342d3234203d3e20323635383635.roa (raw, json)
Hash identifier: iOrp1TY9okxlEMEv0TktHJtolSjUOp8L6mFM7QjZmiw=
Subject key identifier: D9:42:41:AE:13:B1:76:B0:22:21:B0:A1:7C:1A:19:3D:FE:0A:C0:83
Certificate issuer: /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial: 1BA15B5ED6E6F89D8C7ED7C870A5E6367F41391E
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323635383635.roa
Signing time: Tue 04 Feb 2025 20:08:01 +0000
ROA not before: Tue 04 Feb 2025 20:03:01 +0000
ROA not after: Tue 03 Feb 2026 20:08:01 +0000
asID: 265865
IP address blocks: 138.117.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a1:5b:5e:d6:e6:f8:9d:8c:7e:d7:c8:70:a5:e6:36:7f:41:39:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Validity
Not Before: Feb 4 20:03:01 2025 GMT
Not After : Feb 3 20:08:01 2026 GMT
Subject: CN=D94241AE13B176B02221B0A17C1A193DFE0AC083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:81:31:c5:97:e1:ff:f3:53:57:94:89:4f:
49:74:a8:2c:9d:a7:a0:57:26:28:1f:28:13:7b:62:
de:7b:d4:b1:00:fb:27:82:dc:0e:c8:ae:a8:68:8b:
13:e7:3c:06:68:3f:07:e5:99:31:c7:56:f5:c0:7b:
a6:fd:a3:82:ea:9c:30:96:18:e7:1a:c8:1c:9d:61:
fc:60:73:31:d1:0b:52:9d:df:dc:ef:f5:64:0f:2f:
1d:36:31:42:37:0f:b2:14:5c:c8:74:f3:3f:34:97:
94:7a:19:21:0b:ae:9d:36:4c:51:51:ea:25:2e:4b:
c5:93:99:02:e4:8c:58:a3:db:67:68:07:7c:43:69:
97:f5:51:68:d1:38:9a:f2:ba:a3:07:67:8c:16:99:
35:92:8d:d8:5b:7a:4d:cd:b6:1d:4e:d4:cf:61:e5:
ce:3f:61:28:45:6c:22:f9:0e:aa:79:4b:da:55:87:
31:6f:fc:d0:bf:ed:b5:88:99:63:ef:63:2d:d0:95:
46:96:8f:42:49:b9:5f:08:9c:12:21:58:6c:12:31:
45:73:1f:9f:85:87:49:6c:c1:56:fe:46:b9:44:63:
b8:2c:4d:b2:30:97:19:08:15:9a:ee:20:22:6a:47:
e5:a8:de:28:80:d8:3a:b8:b4:0d:26:4e:8e:95:38:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:42:41:AE:13:B1:76:B0:22:21:B0:A1:7C:1A:19:3D:FE:0A:C0:83
X509v3 Authority Key Identifier:
keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323635383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.13.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:81:1a:4b:b2:c7:64:92:d6:c4:d3:47:32:60:f9:f0:0f:db:
6c:e8:dc:5b:a9:f8:29:71:02:02:c9:a9:6f:00:cd:f0:43:b6:
8b:b8:81:23:fc:64:7d:08:ae:15:60:01:5a:ba:24:15:6d:73:
b7:11:a8:3b:56:c5:26:f5:02:74:be:46:b0:56:5d:9b:ce:21:
66:ef:2b:1a:18:5e:cb:da:a0:9e:64:f1:c1:1a:ad:80:d3:d9:
1c:e5:b4:54:23:f3:cf:03:fe:5a:69:62:26:d2:fa:ac:aa:6d:
95:7a:ef:65:30:60:69:8d:4f:fd:59:78:62:3b:dd:3e:98:46:
5d:03:8a:86:e6:26:ab:4b:9e:cb:88:b1:68:f0:df:7d:71:dc:
93:c5:d5:18:ea:23:65:43:de:a8:ca:f3:6a:34:87:8e:b8:32:
1b:82:42:0d:d0:01:f9:b5:00:31:1a:bb:3e:03:02:bb:96:a0:
bc:99:2c:20:bf:22:13:db:ab:17:35:6a:7c:b8:8d:2f:a0:d0:
9c:ed:3c:ca:29:e8:e9:81:ba:7a:dd:fb:08:5e:13:d7:62:12:
c3:96:81:29:19:ae:3a:b5:a2:47:1e:41:f3:19:98:19:be:f3:
ed:33:ef:c7:7f:ac:86:d1:bc:43:d2:36:ec:b4:b6:59:5f:8f:
f0:15:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:54 2025 by rpki-client