Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303430.roa
File: 3133382e39392e3134342e302f32342d3234203d3e20343030303430.roa (raw, json)
Hash identifier: Ppmyf3BOeYy4WB1y3HBGXPLC1K9RqwYZH0EsshmO/ww=
Subject key identifier: A4:3D:D2:B6:E8:2C:C8:AD:43:53:9D:72:B9:CD:2D:BF:39:66:73:57
Certificate issuer: /CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Certificate serial: 43BF4B478D1F8A69C13995C5759F95F41452A3B3
Authority key identifier: EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303430.roa
Signing time: Tue 04 Feb 2025 18:44:19 +0000
ROA not before: Tue 04 Feb 2025 18:39:19 +0000
ROA not after: Tue 03 Feb 2026 18:44:19 +0000
asID: 400040
IP address blocks: 138.99.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:bf:4b:47:8d:1f:8a:69:c1:39:95:c5:75:9f:95:f4:14:52:a3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Validity
Not Before: Feb 4 18:39:19 2025 GMT
Not After : Feb 3 18:44:19 2026 GMT
Subject: CN=A43DD2B6E82CC8AD43539D72B9CD2DBF39667357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:48:fa:23:2b:e1:c6:1b:d2:ba:e0:69:48:
29:95:9f:45:ea:d1:78:8c:cb:fa:90:33:7d:b2:7e:
c0:96:15:1c:a4:6c:49:a6:2b:01:1f:b4:09:7b:92:
21:46:7b:f8:d3:a9:eb:26:95:2b:71:57:83:8e:91:
1e:fc:00:a8:6f:7c:41:d1:68:9d:b9:8b:03:ef:41:
7c:22:0f:03:3f:bb:fd:a5:85:48:0d:a2:17:d5:7e:
36:50:85:08:68:96:3e:13:45:02:c4:2c:e1:84:20:
29:c8:5e:11:00:84:cd:37:ae:65:44:b9:01:6d:59:
a1:65:d4:c8:99:a5:0d:55:6c:80:dc:36:e1:09:ee:
41:aa:28:1a:b5:65:04:92:86:6f:8b:ab:ee:cc:62:
16:03:9e:0c:45:cc:31:37:0b:6a:07:6b:56:cc:d8:
29:1f:4f:87:82:58:d1:84:f7:f3:93:cf:53:f1:cb:
4e:c7:d0:c5:09:b9:a4:49:c4:0b:8c:75:da:b0:d6:
0d:cb:87:56:6f:ba:79:ab:dd:13:23:02:c5:cd:19:
77:ca:99:26:a8:1e:bc:e8:7d:77:a1:ac:19:b9:c4:
db:84:5e:65:3f:b4:da:7d:42:66:05:18:f8:be:55:
a8:1c:a7:3b:7b:a9:34:cf:3c:6e:32:65:5a:30:12:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3D:D2:B6:E8:2C:C8:AD:43:53:9D:72:B9:CD:2D:BF:39:66:73:57
X509v3 Authority Key Identifier:
keyid:EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.144.0/24
Signature Algorithm: sha256WithRSAEncryption
77:03:71:bb:30:73:e6:2d:2f:c8:f5:a7:58:d2:14:79:f4:b4:
d0:1e:82:0c:3f:46:4e:41:4b:97:62:d0:cb:b2:7a:58:dd:b6:
86:46:a4:11:9a:09:fe:58:8b:a3:6c:9f:4f:10:dc:d3:33:ab:
34:fe:91:93:c6:2d:af:1e:cb:ad:47:bb:f1:89:dd:56:43:54:
02:b1:f1:06:fc:35:a0:6a:d3:b7:ba:e1:1a:a7:a7:a2:af:72:
9f:06:45:13:9f:5f:21:bd:ff:86:13:c4:18:cc:d0:7f:c8:fa:
30:de:0d:70:04:9d:b9:94:15:92:55:54:c1:39:42:a2:b4:0c:
68:52:34:ea:2a:c3:71:f9:aa:c6:2f:7e:7b:bf:d2:95:03:12:
08:c3:6e:c9:e1:66:b8:33:ef:c5:18:48:62:40:67:17:dc:cb:
d5:6a:c2:f5:f1:23:3a:96:ef:a1:f2:94:bf:6c:7d:f0:c0:65:
7b:6d:97:a4:58:9a:5a:31:a3:ae:85:5c:a5:63:d7:b8:44:39:
04:a7:3d:10:8d:28:f3:fa:83:ef:ea:24:69:b8:e9:7b:59:78:
61:89:34:15:05:5d:37:b8:60:a8:0a:21:bf:22:94:e9:14:90:
53:a7:40:5d:8a:54:f2:4d:e8:06:2b:fa:03:f8:21:ec:14:bb:
a1:49:d4:84
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQ79LR40fimnBOZXFdZ+V9BRSo7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJDNzcwMTg1ODhEN0MzQzg3QzNFMTNENzEyOTMxNzc0
NTVFRTU3RDAeFw0yNTAyMDQxODM5MTlaFw0yNjAyMDMxODQ0MTlaMDMxMTAvBgNV
BAMTKEE0M0REMkI2RTgyQ0M4QUQ0MzUzOUQ3MkI5Q0QyREJGMzk2NjczNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf0kj6IyvhxhvSuuBpSCmVn0Xq
0XiMy/qQM32yfsCWFRykbEmmKwEftAl7kiFGe/jTqesmlStxV4OOkR78AKhvfEHR
aJ25iwPvQXwiDwM/u/2lhUgNohfVfjZQhQholj4TRQLELOGEICnIXhEAhM03rmVE
uQFtWaFl1MiZpQ1VbIDcNuEJ7kGqKBq1ZQSShm+Lq+7MYhYDngxFzDE3C2oHa1bM
2CkfT4eCWNGE9/OTz1Pxy07H0MUJuaRJxAuMddqw1g3Lh1Zvunmr3RMjAsXNGXfK
mSaoHrzofXehrBm5xNuEXmU/tNp9QmYFGPi+Vagcpzt7qTTPPG4yZVowEi7nAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUpD3StugsyK1DU51yuc0tvzlmc1cwHwYDVR0j
BBgwFoAU68dwGFiNfDyHw+E9cSkxd0Ve5X0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83M0ExQUI0NzFDMDlDNzM1NjhCRUY5QTMwNjE5MjZEQjkz
QUQ1RUMyRTBDNjk0ODM0QzA0NzRDRkM1NjE3NDZBLzAvRUJDNzcwMTg1ODhEN0Mz
Qzg3QzNFMTNENzEyOTMxNzc0NTVFRTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQkM3NzAxODU4OEQ3QzNDODdD
M0UxM0Q3MTI5MzE3NzQ1NUVFNTdELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzNBMUFCNDcxQzA5QzczNTY4QkVGOUEzMDYxOTI2REI5M0FENUVDMkUw
QzY5NDgzNEMwNDc0Q0ZDNTYxNzQ2QS8wLzMxMzMzODJlMzkzOTJlMzEzNDM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMwMzAzNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAimOQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB3A3G7MHPmLS/I9adY0hR59LTQHoIMP0ZOQUuX
YtDLsnpY3baGRqQRmgn+WIujbJ9PENzTM6s0/pGTxi2vHsutR7vxid1WQ1QCsfEG
/DWgatO3uuEap6eir3KfBkUTn18hvf+GE8QYzNB/yPow3g1wBJ25lBWSVVTBOUKi
tAxoUjTqKsNx+arGL357v9KVAxIIw27J4Wa4M+/FGEhiQGcX3MvVasL18SM6lu+h
8pS/bH3wwGV7bZekWJpaMaOuhVylY9e4RDkEpz0QjSjz+oPv6iRpuOl7WXhhiTQV
BV03uGCoCiG/IpTpFJBTp0BdilTyTegGK/oD+CHsFLuhSdSE
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:17 2025 by rpki-client