Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7092EE91DC7AB712FD761F0FC0451D652D116FADCBF0EF64D686E26A8F8B0A1C/0/3133312e3139362e31322e302f32322d3234203d3e203532343638.roa
File: 3133312e3139362e31322e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: k8Ltxm69Hj6fW+bGmykgKQcpwq9lhGLZxWN6JyUOT1E=
Subject key identifier: 7F:D9:75:2C:E1:B7:AD:A8:11:F6:E4:07:54:E2:12:C0:E2:F5:BF:87
Certificate issuer: /CN=71C4B0679C5C21E2338B4C11642FC0BDAF007624
Certificate serial: 3822E463801EBE380F2C8033FEA81767C1309A75
Authority key identifier: 71:C4:B0:67:9C:5C:21:E2:33:8B:4C:11:64:2F:C0:BD:AF:00:76:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71C4B0679C5C21E2338B4C11642FC0BDAF007624.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7092EE91DC7AB712FD761F0FC0451D652D116FADCBF0EF64D686E26A8F8B0A1C/0/3133312e3139362e31322e302f32322d3234203d3e203532343638.roa
Signing time: Tue 04 Feb 2025 18:47:19 +0000
ROA not before: Tue 04 Feb 2025 18:42:19 +0000
ROA not after: Tue 03 Feb 2026 18:47:19 +0000
asID: 52468
IP address blocks: 131.196.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:22:e4:63:80:1e:be:38:0f:2c:80:33:fe:a8:17:67:c1:30:9a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C4B0679C5C21E2338B4C11642FC0BDAF007624
Validity
Not Before: Feb 4 18:42:19 2025 GMT
Not After : Feb 3 18:47:19 2026 GMT
Subject: CN=7FD9752CE1B7ADA811F6E40754E212C0E2F5BF87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a6:86:7f:2d:9c:4e:31:df:2b:70:ab:1f:89:
ef:07:84:6a:d6:24:0c:1a:b4:43:01:14:7c:54:4e:
95:6a:33:66:67:f1:dd:7c:60:69:e8:33:16:df:df:
ef:c6:da:d6:78:6d:ee:6a:72:86:42:fb:e7:b1:c5:
29:91:2e:de:5e:c4:ff:16:b6:39:4b:b6:40:4b:9b:
aa:c0:59:13:f2:15:d0:d9:65:aa:49:e0:ed:c5:5d:
cb:f4:e9:3a:f9:a9:b2:7f:e6:0f:ba:b6:80:72:ef:
90:7e:53:61:a8:a2:f7:4c:4d:06:45:4e:8a:fe:68:
52:70:62:a3:70:12:87:df:20:b1:fa:44:75:5d:10:
d6:3a:7f:16:23:4f:0e:ec:f2:07:b3:55:ff:a7:27:
4b:e2:9b:30:ff:90:53:2e:50:95:eb:f3:3b:36:9f:
27:24:05:5a:1a:d8:97:98:97:6b:ea:dc:5a:74:2b:
1c:53:88:01:b4:90:15:9d:03:79:1e:92:b3:1d:e5:
75:d9:2b:53:53:b4:50:95:a8:57:7c:8e:e1:92:6b:
5a:f0:2e:29:a1:8e:11:8a:5b:30:8a:3b:d5:f2:5c:
1f:6e:f7:d2:0d:18:56:8d:36:a6:06:43:fd:8f:b7:
b6:89:4e:a2:c5:74:07:c0:37:9a:ac:94:6b:bb:10:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D9:75:2C:E1:B7:AD:A8:11:F6:E4:07:54:E2:12:C0:E2:F5:BF:87
X509v3 Authority Key Identifier:
keyid:71:C4:B0:67:9C:5C:21:E2:33:8B:4C:11:64:2F:C0:BD:AF:00:76:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7092EE91DC7AB712FD761F0FC0451D652D116FADCBF0EF64D686E26A8F8B0A1C/0/71C4B0679C5C21E2338B4C11642FC0BDAF007624.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71C4B0679C5C21E2338B4C11642FC0BDAF007624.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7092EE91DC7AB712FD761F0FC0451D652D116FADCBF0EF64D686E26A8F8B0A1C/0/3133312e3139362e31322e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.12.0/22
Signature Algorithm: sha256WithRSAEncryption
17:e2:b9:d6:2f:82:fe:ec:85:f7:90:72:c5:65:b1:99:41:6b:
15:c8:95:10:44:3e:fc:d5:6c:61:06:fb:f8:66:bd:5d:0a:9d:
7e:26:76:4b:46:bc:80:9a:b6:9c:2a:7b:a8:ce:82:3e:0c:ef:
cd:d8:0c:a5:39:eb:bf:8b:55:8c:57:4f:05:57:b5:f3:01:b0:
07:e7:86:27:ea:64:7d:03:96:bf:ee:80:c1:a4:98:91:62:f7:
cf:f8:d1:7c:af:99:02:83:54:4b:23:a0:81:bd:e3:9c:d5:35:
1d:20:ff:e8:c1:29:f8:f2:cd:64:3e:cb:32:0d:df:b3:9c:51:
40:19:18:2c:a5:ba:62:91:c6:f6:8d:c0:9f:c7:a3:f1:03:bd:
05:16:ea:06:87:55:4d:36:1c:20:2b:d6:59:ee:55:d6:91:59:
37:71:a6:ce:f2:7d:eb:34:ed:3c:4c:a8:a8:9d:9c:6f:d4:fd:
46:21:d0:65:4a:c7:ac:5e:b6:ab:f0:c2:64:1f:94:f6:c5:2c:
d9:37:9a:1e:cb:00:72:0a:1c:69:f8:73:8c:06:1d:8a:da:65:
f0:77:5a:a4:d6:be:10:ea:41:91:d2:b2:32:0f:96:27:ea:10:
df:af:b0:d9:b8:bc:9d:c5:f5:04:3e:6a:49:0a:28:f0:35:60:
19:14:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:20 2025 by rpki-client