Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3232382e302f32332d3234203d3e203237393838.roa
File: 3138392e39302e3232382e302f32332d3234203d3e203237393838.roa (raw, json)
Hash identifier: eIrdvXDSgH5n+WjVCNdO8Xw5MvxaNcAUc+NXvC2KEgg=
Subject key identifier: 07:AD:3F:0B:60:25:82:62:D4:70:F7:8D:55:B4:CB:AA:F6:A7:6C:38
Certificate issuer: /CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
Certificate serial: 4646353B5028900F598D76AA7E3781BB081754FB
Authority key identifier: 8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3232382e302f32332d3234203d3e203237393838.roa
Signing time: Tue 04 Feb 2025 18:32:14 +0000
ROA not before: Tue 04 Feb 2025 18:27:14 +0000
ROA not after: Tue 03 Feb 2026 18:32:14 +0000
asID: 27988
IP address blocks: 189.90.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:46:35:3b:50:28:90:0f:59:8d:76:aa:7e:37:81:bb:08:17:54:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
Validity
Not Before: Feb 4 18:27:14 2025 GMT
Not After : Feb 3 18:32:14 2026 GMT
Subject: CN=07AD3F0B60258262D470F78D55B4CBAAF6A76C38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:c6:73:ea:3b:5a:35:3a:4e:d1:c4:85:96:
48:4a:ec:66:ed:0e:b6:08:7a:a2:9f:25:bf:7e:71:
92:33:90:a8:5e:ba:1b:c2:2c:d1:3b:85:f9:5f:90:
f8:41:14:8d:9d:1c:d5:44:40:98:3b:54:22:ca:27:
31:f6:59:a6:fb:96:f4:26:80:fe:36:0e:11:88:cd:
06:c3:9b:cf:de:46:16:11:cc:e4:d0:29:cd:21:ac:
a2:8c:b7:c3:a5:e6:9d:ff:93:f7:1e:40:71:4c:96:
80:af:2f:1b:3a:a9:33:62:dd:a3:91:dc:d9:42:fc:
95:84:f5:b7:88:3b:98:00:7e:94:0f:f1:1f:1f:44:
e5:0c:1e:99:8b:b7:bf:a0:cd:0b:aa:2d:04:55:f5:
46:0f:7c:09:f0:6c:bb:a1:e8:33:47:d3:44:cf:9b:
36:71:b0:3f:88:53:17:df:5f:70:4d:2b:7b:76:b3:
7a:df:99:c7:51:24:f6:ab:c5:b5:5e:d7:f3:96:bf:
8c:68:86:4b:fb:f3:5b:cb:28:71:1b:01:92:a8:f6:
4c:0f:d1:02:ec:ee:d9:52:67:d5:3a:da:05:68:30:
8e:76:6c:93:f0:f3:ca:90:f3:33:6a:08:a5:46:cc:
2c:12:24:bd:92:55:f4:7a:14:79:53:43:f7:0e:84:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AD:3F:0B:60:25:82:62:D4:70:F7:8D:55:B4:CB:AA:F6:A7:6C:38
X509v3 Authority Key Identifier:
keyid:8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3232382e302f32332d3234203d3e203237393838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.228.0/23
Signature Algorithm: sha256WithRSAEncryption
15:0a:97:12:32:00:a0:91:ec:0c:4d:59:da:c1:0e:82:4f:ce:
ee:85:e1:e6:85:52:be:25:97:ca:23:d5:24:6d:97:99:d5:03:
e0:91:55:9e:8d:64:84:83:54:a5:ce:3a:bd:39:3f:59:9e:69:
e0:15:8f:10:7e:14:e4:8d:c3:2b:32:72:de:20:69:b8:97:19:
2f:61:7b:04:6d:3f:38:22:0e:72:62:1f:1c:e8:db:e0:f6:83:
6d:1a:35:d8:66:c6:78:30:4b:f9:c2:dc:cd:95:09:97:23:bd:
73:11:a6:ec:5a:37:95:15:b2:bc:4e:15:c5:07:95:e3:36:05:
b9:32:a1:9e:fd:86:0e:5a:e0:60:d2:10:98:b0:f9:4b:fc:21:
ed:00:1f:e2:2a:5d:da:26:3c:54:3b:a6:b3:ef:b1:ae:40:f8:
8f:92:bd:0c:71:f4:25:7c:bc:57:3c:98:da:be:55:ac:7e:ce:
94:58:7d:5a:c5:3e:6f:27:53:9a:2a:b8:49:21:79:48:24:97:
7f:1c:91:74:1e:f4:d3:a4:8b:db:07:86:dc:32:ed:38:f3:7c:
e4:b7:4a:13:f8:f8:1a:fb:da:d5:97:d7:a6:e5:65:86:40:18:
de:48:c8:32:63:fa:f9:84:ab:f4:80:9f:2e:7a:8f:b8:c5:25:
5e:88:16:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:15:35 2025 by rpki-client