Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3138362e3135362e302e302f31362d3234203d3e203232303437.roa
File: 3138362e3135362e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier: wQxQfidM8aFxhUpEr7JsvD3xM/vu8lc5DK4z9NCkJmQ=
Subject key identifier: 98:9C:69:DA:E7:C8:88:78:19:8E:CE:14:F7:80:6F:FC:FD:A9:E1:2D
Certificate issuer: /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial: 674F2FF77497184E3A9CDF6C6C75B3DCA8668012
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3138362e3135362e302e302f31362d3234203d3e203232303437.roa
Signing time: Tue 04 Feb 2025 18:19:13 +0000
ROA not before: Tue 04 Feb 2025 18:14:13 +0000
ROA not after: Tue 03 Feb 2026 18:19:13 +0000
asID: 22047
IP address blocks: 186.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4f:2f:f7:74:97:18:4e:3a:9c:df:6c:6c:75:b3:dc:a8:66:80:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Validity
Not Before: Feb 4 18:14:13 2025 GMT
Not After : Feb 3 18:19:13 2026 GMT
Subject: CN=989C69DAE7C88878198ECE14F7806FFCFDA9E12D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:34:d2:e2:cd:9b:b9:5e:4b:cf:bc:c5:fc:
30:95:6b:1c:ce:1c:9e:ea:d6:20:a2:c1:82:17:c1:
2a:29:fd:25:65:9f:53:fd:93:ee:38:05:fb:d3:ea:
03:d6:8d:b7:e6:cd:f7:3c:16:fa:6a:9e:7b:2d:47:
db:87:8b:c4:b0:ac:4c:77:02:6d:02:58:d9:3e:3e:
e9:3b:4e:25:8b:3f:09:f1:67:dd:b4:32:9c:1a:18:
97:88:54:54:48:95:30:4f:e3:89:8e:ac:46:c9:c3:
f4:ec:9b:8f:95:f6:4e:01:f1:c5:32:89:4c:2a:e3:
fb:39:d9:29:4e:5d:2b:bc:a2:92:fa:46:b5:59:f8:
a6:56:db:36:30:84:f8:7e:44:b6:8f:d0:f1:d1:96:
19:c1:c5:11:95:85:6a:78:54:70:32:b3:b6:0e:57:
1e:36:7d:36:14:35:cb:f5:50:19:01:0e:75:48:10:
c9:9e:b8:95:5e:10:d8:f2:59:a6:34:2f:22:7b:48:
d1:94:f8:b1:a3:b5:d7:d8:fa:80:3c:57:38:e5:9d:
dc:12:86:94:20:ea:b9:2b:78:02:1d:7a:9f:59:59:
84:16:f5:0a:b9:18:90:75:15:41:c5:5e:69:33:ee:
1a:cd:f6:9e:5f:77:95:23:d5:c9:84:84:c4:a4:3c:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9C:69:DA:E7:C8:88:78:19:8E:CE:14:F7:80:6F:FC:FD:A9:E1:2D
X509v3 Authority Key Identifier:
keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3138362e3135362e302e302f31362d3234203d3e203232303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.156.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:fa:98:d8:a3:d5:0d:68:cd:e8:38:d4:d7:7c:dc:d9:98:b1:
fa:15:17:72:a3:07:84:86:16:01:54:b8:d0:cf:09:22:ec:91:
7e:6c:0f:78:92:ac:09:1b:e3:74:2d:e6:c4:a7:20:54:e5:71:
c0:90:bd:0e:b8:1c:51:9f:39:05:3a:56:2c:e5:9b:bb:93:b1:
21:8e:ba:ba:5f:bd:78:6f:35:1c:1e:f7:d7:50:72:53:cf:04:
b8:a8:fb:cd:46:15:2b:0a:9e:50:24:c5:b5:c3:33:8b:13:71:
80:13:48:e0:5e:4a:7d:f5:d2:97:d5:24:a4:84:24:cb:1a:9b:
ab:1d:f2:3c:71:31:12:b0:bb:43:ad:61:e0:1f:17:d7:f8:53:
b5:a3:c1:cd:3c:b4:d8:da:a9:22:7b:1f:33:83:b0:be:75:0a:
d3:86:98:ef:c5:c0:f6:bd:f0:ed:ba:12:8f:c0:8d:29:07:06:
a5:87:46:d9:fb:33:2d:72:73:2d:00:1a:25:94:07:c8:ff:18:
7b:ca:2c:9a:2d:c4:cb:16:17:ca:8a:3c:27:69:ab:aa:36:f0:
63:60:e9:73:7f:35:10:e1:63:21:36:b0:ee:ab:88:e0:0e:5a:
2b:d6:e3:42:1b:c1:ac:e8:32:3c:e3:11:38:3d:7e:90:14:38:
80:63:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:49 2025 by rpki-client