Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32322d3234203d3e20323730313036.roa
File: 3139312e3234312e3134302e302f32322d3234203d3e20323730313036.roa (raw, json)
Hash identifier: i/p/GM+naJA+R56VoGfRnIYQf4Qy+2DCZieGZQpK0Mo=
Subject key identifier: 9E:38:A8:A0:5A:4B:04:EB:10:AE:D8:24:9B:53:2A:B6:A5:0D:1F:02
Certificate issuer: /CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Certificate serial: 245E145921C2EFEB3885236B589B0BABCD04C6FE
Authority key identifier: 8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32322d3234203d3e20323730313036.roa
Signing time: Tue 04 Feb 2025 18:36:07 +0000
ROA not before: Tue 04 Feb 2025 18:31:07 +0000
ROA not after: Tue 03 Feb 2026 18:36:07 +0000
asID: 270106
IP address blocks: 191.241.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5e:14:59:21:c2:ef:eb:38:85:23:6b:58:9b:0b:ab:cd:04:c6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Validity
Not Before: Feb 4 18:31:07 2025 GMT
Not After : Feb 3 18:36:07 2026 GMT
Subject: CN=9E38A8A05A4B04EB10AED8249B532AB6A50D1F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:b8:0a:c9:2a:89:65:8d:b7:27:41:16:c2:
d1:e3:9c:17:7f:c8:e4:2c:ac:d1:f8:a6:aa:f2:2e:
07:9a:4b:76:06:13:e5:e0:e4:f5:e7:6c:d5:1a:a8:
d6:af:dd:4e:a9:39:92:01:51:4e:29:2d:92:7a:ad:
53:b8:12:6b:0d:22:4a:91:ee:2d:64:27:bd:49:b0:
e0:46:91:1d:b3:60:38:a5:f3:09:e0:5d:08:3f:9f:
ca:02:14:0e:c6:0e:b4:f1:65:ce:27:b7:78:7b:d7:
5b:62:0d:1f:aa:08:88:cb:51:6e:53:81:af:28:a9:
de:12:d8:c1:c6:c7:9b:f1:60:1e:2c:65:54:0d:8f:
0c:37:f0:41:38:7b:66:8a:36:fe:2b:b9:59:db:bb:
92:c9:86:a0:33:40:84:21:47:1b:09:bf:0f:84:3a:
c2:28:4b:e8:7f:51:de:d7:f2:f9:9e:cb:56:3f:f8:
8a:bc:d4:45:f3:a0:75:bd:01:e8:36:7a:1a:76:1d:
43:22:fb:91:42:46:2a:b5:7b:72:6b:ba:dd:18:9c:
2b:20:6d:a1:f7:8d:90:1b:b9:de:81:fe:ee:32:c5:
a3:f3:bf:97:c0:13:66:a5:ea:75:49:2b:74:f8:aa:
c6:fa:e5:4e:b5:cc:bc:d4:44:49:d8:f8:57:1d:29:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:A8:A0:5A:4B:04:EB:10:AE:D8:24:9B:53:2A:B6:A5:0D:1F:02
X509v3 Authority Key Identifier:
keyid:8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32322d3234203d3e20323730313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:03:6b:ff:78:12:94:bb:ed:ff:d5:4c:25:21:d6:bc:21:cc:
ff:e5:67:fe:4e:77:3a:79:17:92:53:b8:f7:3a:1d:42:25:9e:
09:37:9c:65:ad:d2:71:66:13:0c:29:1c:66:7b:64:c4:bd:1d:
c7:25:2f:52:7c:ab:16:c4:6f:7c:b7:95:94:f0:45:87:b3:ef:
44:88:01:43:b3:5c:d1:d6:fe:b1:b4:ca:da:db:43:ea:3d:11:
57:6a:35:8e:89:32:09:76:47:c0:d1:d3:3e:7b:e8:60:a5:b4:
a4:07:3a:fc:0f:37:0d:49:cc:49:27:2a:e6:79:db:a3:e6:37:
f3:14:45:1d:cd:9d:af:0b:92:fe:ed:04:73:ab:8b:12:a3:e3:
a9:d1:7c:9f:f3:da:06:73:83:19:89:c6:d4:fa:cc:a2:f6:a3:
65:2a:6d:79:34:0e:d9:a8:c0:25:fb:69:0e:bc:e4:b3:7c:05:
ca:3e:06:87:1d:74:09:a2:a8:7f:a6:81:ea:81:b4:50:89:12:
43:3c:fe:ff:87:cb:87:40:ac:32:0d:ab:71:92:5f:43:d1:ce:
b3:23:6b:6e:95:fb:34:b0:b4:af:8d:5d:60:95:2d:33:61:e0:
5a:47:9c:25:32:b1:51:e4:c1:13:51:8b:a0:8e:82:f0:0e:65:
25:37:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:36 2025 by rpki-client