Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31342e302f32342d3234203d3e20323635373938.roa
File: 3133382e3131372e31342e302f32342d3234203d3e20323635373938.roa (raw, json)
Hash identifier: XHxglRsIznH2oL3Cu9yOSaX8apE6OvGRr2VSqRl+ywM=
Subject key identifier: 42:E1:C9:DA:AD:92:70:3B:67:06:06:2F:D6:29:BC:54:BD:EE:F9:48
Certificate issuer: /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial: 7675B79D6CAC5EDC37733F996C8F92CF01C04565
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31342e302f32342d3234203d3e20323635373938.roa
Signing time: Tue 14 Jan 2025 10:15:00 +0000
ROA not before: Tue 14 Jan 2025 10:10:00 +0000
ROA not after: Tue 13 Jan 2026 10:15:00 +0000
asID: 265798
IP address blocks: 138.117.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:75:b7:9d:6c:ac:5e:dc:37:73:3f:99:6c:8f:92:cf:01:c0:45:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Validity
Not Before: Jan 14 10:10:00 2025 GMT
Not After : Jan 13 10:15:00 2026 GMT
Subject: CN=42E1C9DAAD92703B6706062FD629BC54BDEEF948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:95:a4:76:a8:21:b7:9c:7a:c6:74:8c:35:
c0:81:2d:1a:e4:89:d8:57:4d:a7:3f:52:ad:e5:27:
a2:14:a0:09:2a:62:22:9a:c8:1b:20:be:97:e9:b0:
2a:da:6b:72:36:05:90:ed:bb:7d:f9:af:7f:67:8c:
78:09:46:b0:f3:9d:57:09:c3:ca:a6:a2:e6:32:96:
ca:f9:b2:9e:ae:ad:c6:78:54:7d:9a:62:c9:94:83:
2c:17:8b:8a:6c:5a:89:ff:fc:25:a9:b9:18:2c:6c:
3a:d3:6b:e5:91:f4:a8:30:aa:ac:e4:b2:db:f4:ad:
df:31:f2:e7:17:50:0f:4b:47:96:26:ac:d5:9f:8c:
7b:c6:3d:31:f4:c9:75:11:f8:7c:d0:a7:e2:9c:1c:
6d:cf:5d:4c:93:09:c0:c5:7c:aa:5b:c7:28:af:2a:
37:af:eb:e9:fa:bc:e7:40:ce:c8:1e:c7:d4:64:d2:
37:d1:08:b2:40:4f:17:df:53:00:2f:60:ca:5f:33:
1d:04:0b:f6:e7:94:4e:f0:ba:15:c7:55:61:31:32:
be:2e:47:38:64:ed:ab:17:15:23:4f:0e:38:18:e9:
33:0a:ff:b7:b4:a8:23:af:80:6b:30:50:e1:43:82:
54:6b:2a:b2:75:b2:49:05:bf:39:f4:45:68:98:ca:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E1:C9:DA:AD:92:70:3B:67:06:06:2F:D6:29:BC:54:BD:EE:F9:48
X509v3 Authority Key Identifier:
keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31342e302f32342d3234203d3e20323635373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.14.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c1:93:59:ff:9a:fa:49:8f:1b:71:68:d5:de:99:c3:4f:47:
89:2d:51:f2:8c:11:d1:29:5b:22:73:cf:f1:bb:0a:64:f4:1a:
d6:b2:d1:36:0d:00:96:c5:4d:2e:7f:ed:9a:8a:29:36:06:cf:
8e:4f:c4:4c:12:51:ed:b4:42:8b:03:9d:ca:ab:e0:9c:7e:11:
2f:9c:9b:ed:97:b7:c9:d1:7d:77:fd:92:a1:f9:a3:22:39:56:
a2:e8:96:c8:f8:d8:2b:00:b0:39:6f:bc:3b:fb:b6:f7:37:ad:
5f:f9:4e:4f:8b:b3:98:7b:37:1c:9a:ca:02:e5:52:49:8f:3a:
62:85:5f:25:51:22:7f:8a:95:8f:06:06:27:89:ec:e9:aa:2f:
0c:ec:ed:1e:0a:97:57:50:dd:75:a6:15:70:0a:8c:25:4c:c2:
e5:ec:75:f2:d0:5c:af:84:99:07:ea:9a:98:59:50:af:23:b5:
93:d5:04:99:54:84:cf:42:84:81:80:36:3c:3f:c3:c1:bc:d5:
65:28:33:46:cb:96:76:58:f8:d9:54:9e:38:c8:a0:94:94:14:
98:28:3b:47:83:52:19:ae:60:ae:a8:94:5d:d1:f1:bf:4e:f5:
d8:12:15:f6:49:54:a9:ee:3a:39:b1:a1:ae:06:2e:b7:16:c2:
95:aa:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:06:25 2025 by rpki-client