Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa
File: 3133382e302e382e302f32322d3234203d3e203532333439.roa (raw, json)
Hash identifier: 3lWJAlL8h6r5w9Oh9o+B3p8GjRe+qF8ONSUBNN+QXZU=
Subject key identifier: 58:F9:FD:8E:FD:FC:44:1C:CF:B8:E2:4E:7F:62:FB:09:EE:72:67:5C
Certificate issuer: /CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
Certificate serial: 5E689447C5D42530AB4D764D1EA72DD12040C909
Authority key identifier: 43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa
Signing time: Tue 04 Feb 2025 18:26:54 +0000
ROA not before: Tue 04 Feb 2025 18:21:54 +0000
ROA not after: Tue 03 Feb 2026 18:26:54 +0000
asID: 52349
IP address blocks: 138.0.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:68:94:47:c5:d4:25:30:ab:4d:76:4d:1e:a7:2d:d1:20:40:c9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
Validity
Not Before: Feb 4 18:21:54 2025 GMT
Not After : Feb 3 18:26:54 2026 GMT
Subject: CN=58F9FD8EFDFC441CCFB8E24E7F62FB09EE72675C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:13:b4:23:20:01:ef:3f:7a:8c:6c:d3:89:
84:eb:aa:44:fb:1e:81:43:9b:e3:67:cd:f5:58:6f:
ce:7b:3b:58:96:60:31:4a:04:b2:94:eb:86:70:42:
37:08:66:9b:2d:21:2c:77:a4:3a:70:50:dc:ed:43:
0d:fb:3b:aa:74:f7:37:44:cf:13:82:ce:6d:f7:4a:
e6:1a:84:e7:a3:a8:1b:09:c5:0b:e1:03:8e:be:50:
a8:e1:23:ce:ad:d1:3b:5f:c9:4b:e3:01:f4:e1:c3:
cc:a0:46:07:99:54:e1:55:28:5f:3e:fe:81:d6:42:
9e:4b:17:15:44:2a:0a:75:48:48:3d:ae:cb:1c:9f:
7f:36:fd:13:ff:8a:22:45:e8:c8:ed:a6:d2:34:17:
98:19:a0:3e:d7:2b:0d:25:ad:63:65:fd:58:f8:14:
f4:3f:8f:23:09:54:69:56:da:31:0e:d0:55:8a:ec:
a7:35:f1:26:92:f6:69:e9:57:3a:59:f5:cf:2e:0a:
96:29:03:d6:aa:15:f8:da:24:ac:94:db:07:38:47:
48:58:db:63:57:ac:70:f7:ee:e7:b9:08:45:90:7a:
9b:be:90:64:67:f2:95:0a:89:14:d0:8b:38:35:29:
ff:90:5f:5b:74:d9:99:a0:71:2a:f1:da:7f:a7:d3:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F9:FD:8E:FD:FC:44:1C:CF:B8:E2:4E:7F:62:FB:09:EE:72:67:5C
X509v3 Authority Key Identifier:
keyid:43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.8.0/22
Signature Algorithm: sha256WithRSAEncryption
97:11:7c:ca:57:75:25:ad:44:ef:dd:90:b5:ae:3b:64:a3:4f:
fa:0e:52:82:41:77:5f:e4:fa:7f:a5:49:1e:ee:4d:f6:99:ff:
9c:3e:db:3a:a3:51:23:b5:62:87:b0:5f:02:37:bb:dc:c9:11:
98:48:15:8a:7e:f7:da:bb:47:66:5f:6e:33:38:23:f5:27:54:
7a:80:00:0a:15:8e:73:33:a6:a8:cf:58:b5:cf:53:18:5d:f7:
34:a7:c4:74:7e:54:a8:8f:92:e8:c6:03:31:b9:d9:eb:1b:de:
f1:7f:fe:71:b1:34:63:38:dc:51:3b:65:db:11:9f:04:fc:ca:
5e:4b:ca:ae:ba:79:1d:cb:dc:79:e2:14:aa:73:65:e4:b9:5e:
f9:f3:b2:09:be:73:ee:a4:7c:20:33:d5:29:24:02:ca:11:24:
83:f8:2c:7c:fb:5d:55:e7:f0:db:1a:c7:a4:f8:06:ef:8f:f1:
64:a8:22:16:6d:c5:4c:d9:95:ea:cd:63:5e:85:87:20:3a:aa:
b8:03:82:be:e6:9b:23:65:c0:0f:23:f2:4a:1e:6b:62:ef:8f:
4d:d9:40:79:b1:c6:f6:c7:00:54:04:5d:b5:61:ac:97:9c:88:
e8:8c:a7:0a:c8:29:d5:32:4c:97:0a:fa:c0:76:59:f1:55:43:
fe:8c:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:13 2025 by rpki-client