Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133362e302f32342d3234203d3e203631343937.roa
File: 3133382e39392e3133362e302f32342d3234203d3e203631343937.roa (raw, json)
Hash identifier: RK0nikVIaqyMaMoCsLHM0XvVg3ZPgIO9Hx7uNumFi3A=
Subject key identifier: 7A:D5:35:BB:21:86:34:57:29:3D:69:3C:81:63:22:B1:8F:25:8B:5F
Certificate issuer: /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial: 7CEDD1C93058C2B467139697B52116B963847948
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133362e302f32342d3234203d3e203631343937.roa
Signing time: Tue 04 Feb 2025 20:05:26 +0000
ROA not before: Tue 04 Feb 2025 20:00:26 +0000
ROA not after: Tue 03 Feb 2026 20:05:26 +0000
asID: 61497
IP address blocks: 138.99.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ed:d1:c9:30:58:c2:b4:67:13:96:97:b5:21:16:b9:63:84:79:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Validity
Not Before: Feb 4 20:00:26 2025 GMT
Not After : Feb 3 20:05:26 2026 GMT
Subject: CN=7AD535BB21863457293D693C816322B18F258B5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:65:d5:6e:ba:f2:44:da:16:43:f6:c3:3a:
6d:c0:46:c0:70:00:78:92:1e:08:71:91:e1:b4:9d:
33:24:e9:00:f0:a8:a6:9f:73:08:ff:3b:e3:39:3d:
86:d0:9e:25:e3:26:68:d0:19:37:74:c0:73:cc:70:
37:e8:38:0a:17:82:02:19:7f:e8:e0:9a:e5:f9:0b:
5f:6c:da:6d:ee:c1:7d:e7:03:9b:fb:54:f6:b7:bb:
43:67:f9:6a:99:4b:f0:26:d1:3e:8c:3c:ea:f6:35:
65:7d:4c:81:c9:1b:b5:61:cb:5b:b0:11:3d:6c:a2:
b1:37:80:b9:74:fd:0c:9b:91:2c:f2:77:84:2c:23:
cb:13:63:06:50:18:88:73:24:e3:80:b0:f1:a8:12:
5c:1e:38:ab:b2:57:99:34:32:2a:3a:77:7b:1c:e6:
cb:46:e7:ce:6e:e9:08:23:bf:1a:02:5f:3b:93:d8:
df:8d:dd:9f:a8:dd:07:24:7b:89:e7:f2:17:e0:3a:
90:f8:a7:7b:78:2c:56:b5:a9:80:f0:73:01:3b:0c:
14:51:c7:5d:8c:c7:96:b3:5e:73:ff:cc:1b:29:54:
33:40:e7:ce:03:34:ff:23:4d:19:a8:d9:63:98:12:
6e:ba:6d:55:3c:1b:5d:ff:86:88:2e:29:c3:94:73:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:35:BB:21:86:34:57:29:3D:69:3C:81:63:22:B1:8F:25:8B:5F
X509v3 Authority Key Identifier:
keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133362e302f32342d3234203d3e203631343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:22:59:32:99:90:f8:22:87:57:72:61:00:00:76:81:2d:0d:
b4:fe:25:42:04:56:34:e3:28:c1:c5:2d:0f:39:0b:4e:ad:50:
95:97:bd:fe:83:fc:03:35:1e:df:c0:87:fc:09:d7:63:61:f8:
94:82:88:c8:cc:6d:0d:4c:58:5b:9f:99:19:e5:aa:e5:bd:99:
a9:85:0a:ae:ca:75:0a:44:22:33:59:e0:eb:66:2e:e9:65:f9:
e4:f3:f2:01:c2:88:2d:7b:d3:84:79:61:9a:e3:b3:57:cc:ee:
97:e2:04:af:71:13:b3:7f:0e:3a:f4:92:79:78:8d:c3:1b:b1:
5e:fa:bf:a9:53:de:d2:f8:49:fc:97:69:08:ec:b9:ec:d1:89:
b6:d8:82:62:3e:db:84:a0:67:5f:c9:10:1d:cf:be:ee:08:1a:
50:20:2a:4d:42:cc:61:11:ad:90:de:01:e3:34:61:27:fe:bf:
b1:91:6c:e9:1e:c9:d4:90:27:e3:3d:4e:06:6f:ca:af:53:4c:
ca:9b:74:e3:a5:41:e4:27:bf:c0:60:5d:8b:c6:8c:f8:20:ba:
94:7d:e7:22:76:8b:e6:5c:29:49:de:ee:d0:e8:c8:9c:02:a4:
a6:53:d6:3f:e7:1d:d0:2f:e0:d7:a5:f9:eb:14:72:bf:fc:4b:
01:46:8b:94
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfO3RyTBYwrRnE5aXtSEWuWOEeUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VEMTMwMkVCQzQ4NEM3QzY5RTYzN0U0NUFFRjY3NzVE
NUU2MThBOTAeFw0yNTAyMDQyMDAwMjZaFw0yNjAyMDMyMDA1MjZaMDMxMTAvBgNV
BAMTKDdBRDUzNUJCMjE4NjM0NTcyOTNENjkzQzgxNjMyMkIxOEYyNThCNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmmGXVbrryRNoWQ/bDOm3ARsBw
AHiSHghxkeG0nTMk6QDwqKafcwj/O+M5PYbQniXjJmjQGTd0wHPMcDfoOAoXggIZ
f+jgmuX5C19s2m3uwX3nA5v7VPa3u0Nn+WqZS/Am0T6MPOr2NWV9TIHJG7Vhy1uw
ET1sorE3gLl0/QybkSzyd4QsI8sTYwZQGIhzJOOAsPGoElweOKuyV5k0Mio6d3sc
5stG585u6QgjvxoCXzuT2N+N3Z+o3Qcke4nn8hfgOpD4p3t4LFa1qYDwcwE7DBRR
x12Mx5azXnP/zBspVDNA584DNP8jTRmo2WOYEm66bVU8G13/hoguKcOUc2oxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUetU1uyGGNFcpPWk8gWMisY8li18wHwYDVR0j
BBgwFoAUztEwLrxITHxp5jfkWu9nddXmGKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjQyOUQzRkM0ODk4QzQzRkQwQzg5RTkwNUFDQUU4M0Q1
NTNENDUyMTcxMDZBOEUwREIwNDA4OEVFNEZGMTFELzAvQ0VEMTMwMkVCQzQ4NEM3
QzY5RTYzN0U0NUFFRjY3NzVENUU2MThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUQxMzAyRUJDNDg0QzdDNjlF
NjM3RTQ1QUVGNjc3NUQ1RTYxOEE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzY0MjlEM0ZDNDg5OEM0M0ZEMEM4OUU5MDVBQ0FFODNENTUzRDQ1MjE3
MTA2QThFMERCMDQwODhFRTRGRjExRC8wLzMxMzMzODJlMzkzOTJlMzEzMzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzkzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIpjiDAN
BgkqhkiG9w0BAQsFAAOCAQEAbSJZMpmQ+CKHV3JhAAB2gS0NtP4lQgRWNOMowcUt
DzkLTq1QlZe9/oP8AzUe38CH/AnXY2H4lIKIyMxtDUxYW5+ZGeWq5b2ZqYUKrsp1
CkQiM1ng62Yu6WX55PPyAcKILXvThHlhmuOzV8zul+IEr3ETs38OOvSSeXiNwxux
Xvq/qVPe0vhJ/JdpCOy57NGJttiCYj7bhKBnX8kQHc++7ggaUCAqTULMYRGtkN4B
4zRhJ/6/sZFs6R7J1JAn4z1OBm/Kr1NMypt046VB5Ce/wGBdi8aM+CC6lH3nInaL
5lwpSd7u0OjInAKkplPWP+cd0C/g16X56xRyv/xLAUaLlA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:24 2025 by rpki-client