Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232362e302f32342d3234203d3e203532343731.roa
File: 3138312e3138392e3232362e302f32342d3234203d3e203532343731.roa (raw, json)
Hash identifier: HC4j66Ud+j+4wd8UCuY0uvGIAVCmngkJAy44Isp+A4k=
Subject key identifier: BF:10:CB:E6:FB:B3:86:17:93:93:C4:88:11:2B:F1:A9:FE:5F:09:05
Certificate issuer: /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial: 40C42FD665E1D80FE7CC67EF092934903BA8CBC8
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232362e302f32342d3234203d3e203532343731.roa
Signing time: Fri 07 Feb 2025 17:09:16 +0000
ROA not before: Fri 07 Feb 2025 17:04:16 +0000
ROA not after: Fri 06 Feb 2026 17:09:16 +0000
asID: 52471
IP address blocks: 181.189.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c4:2f:d6:65:e1:d8:0f:e7:cc:67:ef:09:29:34:90:3b:a8:cb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Validity
Not Before: Feb 7 17:04:16 2025 GMT
Not After : Feb 6 17:09:16 2026 GMT
Subject: CN=BF10CBE6FBB386179393C488112BF1A9FE5F0905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:68:eb:87:ca:29:8a:33:02:22:6a:8c:84:
d7:29:a9:dd:79:ee:7b:7b:5a:95:6b:ab:5f:37:74:
64:79:ec:45:d5:60:4e:ba:72:21:81:87:82:5f:ba:
08:0e:de:3c:53:82:70:0b:88:6e:e2:fb:35:a1:fa:
89:c1:cb:6c:85:6e:4f:67:3f:88:73:af:3b:c5:6e:
08:ee:e9:2c:2f:ea:c2:1c:d3:3d:68:69:96:c2:56:
27:89:86:8e:03:c2:88:09:98:6a:69:f0:59:36:42:
37:ac:dc:fd:ce:30:9e:ec:fb:42:e9:6e:cf:e1:60:
a9:bf:53:3b:e7:b2:f2:3a:f2:06:32:b2:39:c5:37:
8f:23:af:f1:c3:80:5b:38:7f:96:ce:ff:8a:4e:6b:
77:6b:07:5f:85:1f:df:f4:63:c7:fb:a7:97:d3:29:
d7:18:6f:19:22:80:31:67:91:8d:e9:bb:3f:d9:42:
9e:2b:bb:20:e3:b8:76:7b:3b:9f:b8:f2:40:c9:59:
8f:a4:76:c9:72:30:70:d7:a2:9d:35:fa:87:53:9a:
48:c0:22:9b:97:2b:9b:2c:49:33:d3:c3:fe:09:77:
f2:58:4f:cb:f8:ca:28:9b:b3:95:c7:ed:5f:26:e6:
ee:ec:d3:2d:37:6a:55:4b:ff:a0:25:27:db:ef:43:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:10:CB:E6:FB:B3:86:17:93:93:C4:88:11:2B:F1:A9:FE:5F:09:05
X509v3 Authority Key Identifier:
keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232362e302f32342d3234203d3e203532343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.226.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:4c:1f:87:37:92:0c:5b:a0:4c:2f:eb:63:b9:70:11:e4:21:
f0:d8:78:2e:66:0b:eb:20:17:f8:48:5e:1c:12:cc:86:87:94:
85:c3:3a:68:d9:17:a7:a3:3c:a1:fd:af:96:1a:d8:63:d2:2a:
fc:62:8b:96:42:a3:e5:3b:0a:3a:66:c7:43:0a:ac:c3:a0:2b:
c0:32:ce:d3:1c:ea:ac:24:97:6a:31:31:f7:02:4d:86:e6:b0:
45:1f:ee:2a:a0:6c:6a:64:04:63:5f:3d:8b:7a:20:16:69:97:
d8:91:ec:0f:cc:ac:73:55:4f:c3:3e:0d:cd:3b:c5:06:cd:ea:
bf:18:86:15:f6:a5:16:a8:19:75:ba:53:2f:4a:a6:ef:3c:8d:
f7:80:55:b2:69:4b:85:e5:82:82:ca:81:74:54:22:2f:ce:cf:
08:ee:65:92:48:85:82:bc:7c:09:8c:fb:fa:8e:7a:14:31:2b:
bf:2b:d9:f3:c2:56:68:57:b3:85:5e:8d:66:3c:65:c6:8b:18:
29:52:d3:8a:57:73:02:89:c0:52:7b:bf:d2:db:3e:16:1c:11:
a0:55:ce:95:75:79:59:43:35:43:d9:5d:9f:ea:21:d0:4e:da:
f7:bf:58:5f:9f:e4:c6:98:49:81:e0:a6:fd:81:84:d7:06:6a:
6c:ff:0a:c6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQMQv1mXh2A/nzGfvCSk0kDuoy8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk1NTc3RDg1RTMyNDUxRDk2OTU5NTVDRkFDRjgzRUEw
Q0I2RjJBODAeFw0yNTAyMDcxNzA0MTZaFw0yNjAyMDYxNzA5MTZaMDMxMTAvBgNV
BAMTKEJGMTBDQkU2RkJCMzg2MTc5MzkzQzQ4ODExMkJGMUE5RkU1RjA5MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCidGjrh8opijMCImqMhNcpqd15
7nt7WpVrq183dGR57EXVYE66ciGBh4JfuggO3jxTgnALiG7i+zWh+onBy2yFbk9n
P4hzrzvFbgju6Swv6sIc0z1oaZbCVieJho4DwogJmGpp8Fk2Qjes3P3OMJ7s+0Lp
bs/hYKm/UzvnsvI68gYysjnFN48jr/HDgFs4f5bO/4pOa3drB1+FH9/0Y8f7p5fT
KdcYbxkigDFnkY3puz/ZQp4ruyDjuHZ7O5+48kDJWY+kdslyMHDXop01+odTmkjA
IpuXK5ssSTPTw/4Jd/JYT8v4yiibs5XH7V8m5u7s0y03alVL/6AlJ9vvQ2R5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvxDL5vuzhheTk8SIESvxqf5fCQUwHwYDVR0j
BBgwFoAUmVV32F4yRR2WlZVc+s+D6gy28qgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MDY3RjUwRTJFQjQ5QTg0MjY2MTA3NjUyMjlCRTk5ODMw
QUUzQjdEQkYxQzBCRTA5QUY0MkExMjlFRDNGOEZFLzAvOTk1NTc3RDg1RTMyNDUx
RDk2OTU5NTVDRkFDRjgzRUEwQ0I2RjJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTU1NzdEODVFMzI0NTFEOTY5
NTk1NUNGQUNGODNFQTBDQjZGMkE4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzA2N0Y1MEUyRUI0OUE4NDI2NjEwNzY1MjI5QkU5OTgzMEFFM0I3REJG
MUMwQkUwOUFGNDJBMTI5RUQzRjhGRS8wLzMxMzgzMTJlMzEzODM5MmUzMjMyMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtb3i
MA0GCSqGSIb3DQEBCwUAA4IBAQDDTB+HN5IMW6BML+tjuXAR5CHw2HguZgvrIBf4
SF4cEsyGh5SFwzpo2Renozyh/a+WGthj0ir8YouWQqPlOwo6ZsdDCqzDoCvAMs7T
HOqsJJdqMTH3Ak2G5rBFH+4qoGxqZARjXz2LeiAWaZfYkewPzKxzVU/DPg3NO8UG
zeq/GIYV9qUWqBl1ulMvSqbvPI33gFWyaUuF5YKCyoF0VCIvzs8I7mWSSIWCvHwJ
jPv6jnoUMSu/K9nzwlZoV7OFXo1mPGXGixgpUtOKV3MCicBSe7/S2z4WHBGgVc6V
dXlZQzVD2V2f6iHQTtr3v1hfn+TGmEmB4Kb9gYTXBmps/wrG
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:20:39 2025 by rpki-client