Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133332e302f32342d3234203d3e203233323433.roa
File: 3138312e3138392e3133332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier: uUjgFf5VBGNR83DApKElkRIANrkENR72EJzllm5NhM4=
Subject key identifier: F3:D5:B2:20:9B:DC:95:AC:6A:F6:CD:85:13:CC:DF:2A:E1:06:B3:75
Certificate issuer: /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial: 1444B8A337B40281AEB76DCD52366EDF86C94C7A
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133332e302f32342d3234203d3e203233323433.roa
Signing time: Tue 04 Feb 2025 18:25:48 +0000
ROA not before: Tue 04 Feb 2025 18:20:48 +0000
ROA not after: Tue 03 Feb 2026 18:25:48 +0000
asID: 23243
IP address blocks: 181.189.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:44:b8:a3:37:b4:02:81:ae:b7:6d:cd:52:36:6e:df:86:c9:4c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Validity
Not Before: Feb 4 18:20:48 2025 GMT
Not After : Feb 3 18:25:48 2026 GMT
Subject: CN=F3D5B2209BDC95AC6AF6CD8513CCDF2AE106B375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:48:3b:32:13:e5:69:1d:0f:f8:7b:1b:a0:
5e:98:0b:da:7d:51:62:61:71:01:23:6e:fc:0b:b4:
d9:ea:7f:95:fa:7e:cf:b4:94:a1:54:c5:88:fc:38:
76:2b:be:43:f1:ef:2d:49:5f:8c:de:af:0a:72:31:
6f:34:e3:8c:77:0b:ba:6e:e4:1b:2a:13:aa:12:08:
58:5b:9a:d2:47:77:70:cb:02:5e:76:a1:5f:e4:2e:
6b:ad:bb:c1:c5:8c:35:de:44:61:4f:26:a3:cf:a6:
ab:04:e4:83:82:f5:e6:66:13:a5:3f:89:4b:73:17:
1f:51:ff:84:f5:16:f5:32:10:d3:64:ba:a8:2f:f9:
ec:b9:c8:7b:c5:cc:26:9b:8f:f5:2d:3f:e5:6e:fd:
05:74:ba:c2:20:97:94:27:7e:74:96:72:5c:1a:aa:
d0:57:99:f2:2c:7d:dc:60:17:90:68:7e:30:2b:be:
1f:a5:f2:92:00:7d:20:24:f5:26:a2:b5:a1:d7:79:
3a:96:07:a2:4f:1c:d4:05:44:91:02:a7:df:9b:79:
7d:4e:50:51:cd:8a:ec:07:cb:40:80:44:2a:27:d8:
e3:4e:65:f5:4b:c6:2b:b9:cb:d3:44:71:f8:42:12:
f7:84:54:fb:2c:0e:3b:10:26:18:12:6e:38:49:07:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D5:B2:20:9B:DC:95:AC:6A:F6:CD:85:13:CC:DF:2A:E1:06:B3:75
X509v3 Authority Key Identifier:
keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133332e302f32342d3234203d3e203233323433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c6:29:ac:2a:5b:8f:7a:2e:97:23:3a:25:d8:35:7e:3e:50:
47:96:bb:0f:c3:41:79:7a:f7:93:37:d3:bf:98:57:13:ba:bb:
0c:ff:58:0c:6b:9f:1d:4e:d4:6e:42:59:63:64:39:cf:03:eb:
f9:b5:60:46:52:b9:a2:4e:eb:a0:71:a6:fb:3f:5a:4d:f8:f7:
28:b4:38:fd:c2:03:79:5b:13:9e:b5:c1:e3:4d:ca:ca:5e:ea:
51:63:ae:2a:7b:8f:4d:6d:a5:c3:8d:22:66:fd:c9:03:98:93:
41:78:0a:cd:20:a1:be:2b:24:70:c7:97:0c:c8:e3:df:14:9a:
d9:93:dc:34:17:00:58:0b:07:f1:65:bd:92:60:aa:25:94:d6:
44:52:bb:1c:b3:a3:a6:96:8e:f3:43:5c:4f:bb:46:ad:f6:0c:
e7:80:1e:c0:cb:bb:31:c8:6b:5a:fb:17:8e:00:a2:05:9c:0e:
07:b0:57:a2:d2:5a:18:e0:4f:3b:52:e6:65:6e:45:85:9f:fe:
8f:83:ab:d2:2c:22:5b:6d:49:16:5b:9d:d9:e9:97:e5:03:5a:
ec:80:e8:8b:bd:88:73:e7:7e:b0:ff:1a:cd:fd:da:c9:d5:01:
31:52:8a:af:c7:76:4a:d7:81:7c:cd:19:04:24:38:54:ef:c8:
7a:7d:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:59 2025 by rpki-client