Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/3136382e3138312e32342e302f32322d3234203d3e20323634363733.roa
File: 3136382e3138312e32342e302f32322d3234203d3e20323634363733.roa (raw, json)
Hash identifier: t1vnzar48dUG5mguvln/70vOvijTVTgJt08US5GO/co=
Subject key identifier: 78:D1:A8:C8:6E:E4:79:0B:14:87:D3:52:A8:B0:69:35:E1:D0:41:C5
Certificate issuer: /CN=39D085FE46F39FFFAAE0D15C8AB7F655D976589F
Certificate serial: 24BB7680B9C894FCFD870B786682B37DAF8B08E2
Authority key identifier: 39:D0:85:FE:46:F3:9F:FF:AA:E0:D1:5C:8A:B7:F6:55:D9:76:58:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/3136382e3138312e32342e302f32322d3234203d3e20323634363733.roa
Signing time: Tue 04 Feb 2025 18:39:27 +0000
ROA not before: Tue 04 Feb 2025 18:34:27 +0000
ROA not after: Tue 03 Feb 2026 18:39:27 +0000
asID: 264673
IP address blocks: 168.181.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:bb:76:80:b9:c8:94:fc:fd:87:0b:78:66:82:b3:7d:af:8b:08:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39D085FE46F39FFFAAE0D15C8AB7F655D976589F
Validity
Not Before: Feb 4 18:34:27 2025 GMT
Not After : Feb 3 18:39:27 2026 GMT
Subject: CN=78D1A8C86EE4790B1487D352A8B06935E1D041C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:eb:07:67:e3:d2:9a:dd:80:f2:a3:12:e6:
e2:46:d4:b2:58:04:b1:58:99:2c:a4:dc:1b:7d:bb:
aa:eb:71:ee:97:b2:dd:ae:5e:e2:fe:12:84:26:0a:
02:06:60:6d:75:d4:dc:c5:90:05:28:08:bf:c5:e2:
2f:1d:77:d8:e1:13:e3:a3:7e:bb:0e:ab:22:e0:9b:
d5:8a:b6:0b:11:62:a6:7e:4f:09:e7:b6:70:46:57:
76:13:76:90:f4:1a:bb:bb:0b:ec:ee:4c:ec:cb:cf:
61:c7:7f:db:c4:b6:bd:6e:60:22:90:c4:d6:3c:80:
c0:1c:5d:69:23:2c:d1:aa:f2:e4:af:07:32:85:76:
c2:d3:85:72:43:aa:5f:b4:f7:e3:c3:88:5f:8a:e0:
05:aa:f6:fa:f2:89:51:da:d8:80:2e:b1:c4:6e:ed:
b3:c6:57:d7:0b:8c:9f:df:e3:f9:9a:f6:07:01:99:
71:4f:ea:07:49:da:15:2e:30:4e:d6:d7:46:fb:6d:
8e:5f:94:79:93:69:e9:14:1a:ce:4f:26:6d:f3:7b:
29:9c:41:92:45:f7:73:38:35:54:96:55:f5:26:16:
b1:76:3f:0c:7d:bc:5e:30:62:e9:c3:7b:04:79:e6:
a7:f3:17:34:e4:53:41:b0:15:7b:df:db:62:f4:3b:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:A8:C8:6E:E4:79:0B:14:87:D3:52:A8:B0:69:35:E1:D0:41:C5
X509v3 Authority Key Identifier:
keyid:39:D0:85:FE:46:F3:9F:FF:AA:E0:D1:5C:8A:B7:F6:55:D9:76:58:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39D085FE46F39FFFAAE0D15C8AB7F655D976589F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63C348F38526BE62D47355C1C22104E4AC94CF39B40FBF1B1CFC25B3AF072381/0/3136382e3138312e32342e302f32322d3234203d3e20323634363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.24.0/22
Signature Algorithm: sha256WithRSAEncryption
87:f9:e7:b9:78:a8:5e:66:81:07:b8:65:38:69:2c:79:0e:83:
59:22:c8:bf:2f:d6:ee:22:61:be:e8:e4:ae:df:de:54:8f:59:
13:3f:e9:49:5f:95:39:79:ff:3f:5b:43:4c:c7:08:c6:27:15:
29:73:2b:75:fa:54:a6:80:4c:bd:7c:6e:7f:85:81:38:96:19:
e0:c7:fe:e4:2e:06:21:bb:24:7c:06:9a:39:eb:99:47:e0:67:
54:5c:da:2f:6c:e1:8b:74:83:de:ed:99:39:15:37:8e:5c:41:
7d:bc:6f:03:2c:64:24:b0:f7:c9:7e:be:41:a3:60:7b:f2:ac:
5f:e4:f7:4e:d9:d9:49:d0:5b:6d:01:6a:7e:cd:87:4d:4f:cf:
3c:a5:98:64:bc:62:bf:c0:f4:0e:36:71:43:95:a7:23:4f:5a:
99:94:0e:2f:26:0e:30:4c:60:d8:4c:1e:5b:bd:34:2a:89:45:
41:4d:cc:40:05:9c:ff:9a:d0:e4:88:c4:bd:ff:11:42:a2:6f:
9b:c6:58:96:9e:b5:8b:c8:4c:41:e4:a3:b4:d5:ce:6c:a2:61:
37:d2:ff:cd:80:2c:86:18:b9:46:82:07:e9:6f:86:9b:4d:f0:
0a:25:1c:23:ef:6e:9a:67:1d:33:ee:94:5f:df:7d:96:23:3f:
47:71:d8:a8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJLt2gLnIlPz9hwt4ZoKzfa+LCOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlEMDg1RkU0NkYzOUZGRkFBRTBEMTVDOEFCN0Y2NTVE
OTc2NTg5RjAeFw0yNTAyMDQxODM0MjdaFw0yNjAyMDMxODM5MjdaMDMxMTAvBgNV
BAMTKDc4RDFBOEM4NkVFNDc5MEIxNDg3RDM1MkE4QjA2OTM1RTFEMDQxQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLtOsHZ+PSmt2A8qMS5uJG1LJY
BLFYmSyk3Bt9u6rrce6Xst2uXuL+EoQmCgIGYG111NzFkAUoCL/F4i8dd9jhE+Oj
frsOqyLgm9WKtgsRYqZ+TwnntnBGV3YTdpD0Gru7C+zuTOzLz2HHf9vEtr1uYCKQ
xNY8gMAcXWkjLNGq8uSvBzKFdsLThXJDql+09+PDiF+K4AWq9vryiVHa2IAuscRu
7bPGV9cLjJ/f4/ma9gcBmXFP6gdJ2hUuME7W10b7bY5flHmTaekUGs5PJm3zeymc
QZJF93M4NVSWVfUmFrF2Pwx9vF4wYunDewR55qfzFzTkU0GwFXvf22L0OzUpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUeNGoyG7keQsUh9NSqLBpNeHQQcUwHwYDVR0j
BBgwFoAUOdCF/kbzn/+q4NFcirf2Vdl2WJ8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82M0MzNDhGMzg1MjZCRTYyRDQ3MzU1QzFDMjIxMDRFNEFD
OTRDRjM5QjQwRkJGMUIxQ0ZDMjVCM0FGMDcyMzgxLzAvMzlEMDg1RkU0NkYzOUZG
RkFBRTBEMTVDOEFCN0Y2NTVEOTc2NTg5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOUQwODVGRTQ2RjM5RkZGQUFF
MEQxNUM4QUI3RjY1NUQ5NzY1ODlGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjNDMzQ4RjM4NTI2QkU2MkQ0NzM1NUMxQzIyMTA0RTRBQzk0Q0YzOUI0
MEZCRjFCMUNGQzI1QjNBRjA3MjM4MS8wLzMxMzYzODJlMzEzODMxMmUzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqLUY
MA0GCSqGSIb3DQEBCwUAA4IBAQCH+ee5eKheZoEHuGU4aSx5DoNZIsi/L9buImG+
6OSu395Uj1kTP+lJX5U5ef8/W0NMxwjGJxUpcyt1+lSmgEy9fG5/hYE4lhngx/7k
LgYhuyR8Bpo565lH4GdUXNovbOGLdIPe7Zk5FTeOXEF9vG8DLGQksPfJfr5Bo2B7
8qxf5PdO2dlJ0FttAWp+zYdNT888pZhkvGK/wPQONnFDlacjT1qZlA4vJg4wTGDY
TB5bvTQqiUVBTcxABZz/mtDkiMS9/xFCom+bxliWnrWLyExB5KO01c5somE30v/N
gCyGGLlGggfpb4abTfAKJRwj726aZx0z7pRf332WIz9Hcdio
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:27 2025 by rpki-client