Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32332d3233203d3e2037333033.roa
File: 3138362e3135392e3132342e302f32332d3233203d3e2037333033.roa (raw, json)
Hash identifier: lYZWMlYpmfMDp3ju1RIgj30QNsgUeyZ+rCwATmt20c8=
Subject key identifier: F7:73:70:7E:CC:E9:C2:69:D8:12:FD:A7:02:C8:DA:AB:BD:69:DB:49
Certificate issuer: /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial: 5D1F1D864D319E047C6B93153BA5D4F9D4F32D2A
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32332d3233203d3e2037333033.roa
Signing time: Tue 04 Feb 2025 20:06:40 +0000
ROA not before: Tue 04 Feb 2025 20:01:40 +0000
ROA not after: Tue 03 Feb 2026 20:06:40 +0000
asID: 7303
IP address blocks: 186.159.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:1f:1d:86:4d:31:9e:04:7c:6b:93:15:3b:a5:d4:f9:d4:f3:2d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Validity
Not Before: Feb 4 20:01:40 2025 GMT
Not After : Feb 3 20:06:40 2026 GMT
Subject: CN=F773707ECCE9C269D812FDA702C8DAABBD69DB49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:a2:53:ec:24:17:93:d3:de:4f:58:09:fa:
55:59:90:a2:84:c6:ca:fa:88:b3:d7:27:0c:cc:5a:
23:0f:91:a6:e0:11:fe:4e:02:79:13:b8:ab:f6:41:
7a:be:8c:07:5e:8c:c4:fc:f9:7b:09:4b:49:cb:e3:
a9:59:16:1f:02:c9:59:de:86:93:cd:4b:22:48:9a:
85:48:64:83:23:e3:ce:05:81:92:1e:40:57:ff:df:
ef:ca:dc:4f:4a:79:a9:33:f9:a8:39:4f:a3:80:fa:
0b:0b:f1:6a:00:ab:69:61:fb:a7:9c:48:ae:3e:91:
6b:8d:12:1c:c3:b4:10:e2:f6:56:b2:07:c8:59:bb:
12:e5:ea:0e:5c:62:97:87:8a:85:a5:34:2f:63:31:
95:e1:c0:15:7b:0f:82:47:14:dc:3b:d7:93:b0:57:
ca:e6:c6:50:48:54:c6:e0:6b:c4:af:c6:42:9e:04:
bb:8c:be:31:ee:3e:3c:04:28:20:cc:87:50:22:ab:
2b:01:9e:b0:03:4f:f2:1d:e0:03:ab:a4:9d:84:38:
50:4e:b9:1d:96:a1:65:25:fa:24:b5:4f:26:6a:c3:
5b:42:9d:8c:de:f1:a5:be:ae:64:80:e5:bf:e1:35:
f7:f5:81:96:7e:2a:15:ed:1a:06:7e:99:aa:04:9d:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:73:70:7E:CC:E9:C2:69:D8:12:FD:A7:02:C8:DA:AB:BD:69:DB:49
X509v3 Authority Key Identifier:
keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32332d3233203d3e2037333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.159.124.0/23
Signature Algorithm: sha256WithRSAEncryption
16:d0:d6:63:32:18:99:fa:2f:6c:19:4b:d8:ef:0c:a5:9a:07:
ce:73:5d:77:c0:17:f4:bf:8c:30:ba:88:55:4c:16:ff:d0:bc:
8c:0c:da:3d:0e:0f:b7:5e:50:f7:31:86:08:28:a2:f5:95:5e:
4a:8c:48:38:a8:07:4d:8c:bb:b1:b9:8d:c9:aa:08:19:d0:67:
3c:75:18:83:fc:27:d8:16:bf:09:6d:10:c3:ae:4f:62:63:a3:
ff:ad:3b:12:ff:b0:59:0c:b9:c7:80:4c:bd:3f:84:c6:62:ca:
22:e4:15:0d:c2:8a:75:8b:f4:16:9c:22:89:c0:00:8a:97:17:
90:fb:76:ff:62:8c:30:d3:8b:ef:a0:06:cf:07:a5:c4:ae:70:
4c:e2:5f:79:82:17:fd:00:d7:c9:9a:d3:cf:e9:94:54:aa:b3:
cc:78:1b:b7:5a:42:a4:6d:29:c6:d2:c3:40:85:33:60:26:80:
95:05:84:67:28:80:16:0f:35:ab:cb:22:09:a1:2e:01:8c:14:
ec:82:ea:c7:ea:47:d2:32:1a:fa:f1:cd:8a:c6:e2:58:c4:5f:
54:bd:00:fe:67:64:3e:5e:b4:98:59:8b:d0:8a:17:93:45:39:
40:3f:a6:76:2d:e4:7f:bf:22:24:db:9b:98:72:da:35:4a:a4:
88:37:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:12 2025 by rpki-client