Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3138312e382e302f32322d3234203d3e203237383433.roa
File: 3136382e3138312e382e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier: +wr7p99yrtHOl/N7G5MhkjUVAdj1U6nym7OYs0sTMcE=
Subject key identifier: C0:7F:E0:5A:7A:5E:96:57:98:8E:88:4C:FF:B8:14:24:D6:7A:7A:7D
Certificate issuer: /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial: 0CA8D5A85395353FCF4A65483FD6AD53166903F9
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3138312e382e302f32322d3234203d3e203237383433.roa
Signing time: Tue 04 Feb 2025 18:06:07 +0000
ROA not before: Tue 04 Feb 2025 18:01:07 +0000
ROA not after: Tue 03 Feb 2026 18:06:07 +0000
asID: 27843
IP address blocks: 168.181.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a8:d5:a8:53:95:35:3f:cf:4a:65:48:3f:d6:ad:53:16:69:03:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Validity
Not Before: Feb 4 18:01:07 2025 GMT
Not After : Feb 3 18:06:07 2026 GMT
Subject: CN=C07FE05A7A5E9657988E884CFFB81424D67A7A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:9f:4c:5d:8e:ae:77:d5:89:cd:e4:40:9b:
ea:20:b2:22:db:4a:90:39:59:c3:c6:a6:62:fe:7f:
28:00:87:91:b0:76:1e:e7:b5:28:21:7c:61:82:09:
7c:98:ff:5c:1f:4a:3b:5a:68:50:57:0a:22:6e:eb:
c8:3d:79:bc:c9:f2:47:de:93:00:40:f6:7d:3b:bb:
70:de:f8:aa:13:5a:c9:75:5f:36:26:29:9b:3c:4b:
20:09:89:b0:ee:23:3d:fa:de:71:d1:3c:bd:c4:72:
41:c0:5f:8d:a4:cd:f6:19:ee:9b:46:eb:aa:26:37:
a0:2e:99:62:a7:cf:82:8f:54:22:18:5c:22:c2:8f:
7b:5e:6f:63:69:d6:11:e5:c3:39:76:b7:b4:f5:18:
d5:63:b7:84:68:15:0b:8d:c9:19:8d:98:86:20:02:
ec:0b:92:f4:d1:f1:65:d7:14:45:a7:6a:a7:ed:19:
28:81:23:b5:b4:bf:b0:af:92:32:91:60:09:6e:d3:
f4:0e:84:32:70:47:e6:b8:f6:24:67:e3:46:98:5e:
17:ab:a4:7b:4a:d5:3d:d7:a3:e0:c8:fe:e7:06:18:
1d:d0:1d:75:07:2c:a1:c0:ae:1d:1d:a4:83:3d:ac:
3a:0f:7b:11:cd:2b:54:23:1f:a6:3d:e0:63:19:93:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7F:E0:5A:7A:5E:96:57:98:8E:88:4C:FF:B8:14:24:D6:7A:7A:7D
X509v3 Authority Key Identifier:
keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3138312e382e302f32322d3234203d3e203237383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.8.0/22
Signature Algorithm: sha256WithRSAEncryption
21:d1:80:9d:7c:67:e6:a8:50:7b:fd:8a:2e:33:a6:05:fe:95:
89:90:02:01:8b:a5:c4:77:e7:c9:2a:a2:6a:3e:ce:58:fa:93:
77:ed:a5:0b:8a:ec:87:4c:10:22:08:61:ba:25:c1:a1:e4:35:
61:f6:35:0d:8e:63:67:d7:5c:6f:19:51:d7:7f:ff:b6:d0:67:
28:54:82:bc:85:0f:4a:3c:6d:8e:17:52:88:b1:e0:f6:df:d0:
80:c2:13:bc:8e:9a:3b:32:bf:98:ef:bb:8e:61:5a:2c:5a:39:
fb:0e:7a:ba:43:c4:0d:97:c6:87:d5:ec:9c:81:df:e1:45:5c:
d2:91:4f:cf:72:3e:91:4c:e3:a8:76:6f:22:4b:49:41:da:f6:
75:df:7a:17:1b:14:9f:e8:db:ff:98:98:31:bf:b8:7e:36:12:
5a:52:57:b5:7e:f8:3d:a5:d5:d1:f7:44:25:24:c7:80:81:1f:
c5:ba:b9:c1:35:47:a2:b3:99:55:c6:ff:59:85:ef:28:f5:90:
9f:a2:98:1e:47:14:6e:27:be:30:91:f8:f7:9c:c1:ba:19:47:
6f:57:d2:8d:85:96:2d:fb:02:d9:4e:2c:e9:2f:d9:30:7c:bc:
6e:f2:13:4a:94:18:01:89:15:4b:af:57:b5:1d:70:f1:f0:c1:
e6:de:cc:67
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUDKjVqFOVNT/PSmVIP9atUxZpA/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwOEQzOEQ0NTcxQzA5QTgzQjQ1QUNGRDEwQUVCNzgy
NkNFOEY4NDAeFw0yNTAyMDQxODAxMDdaFw0yNjAyMDMxODA2MDdaMDMxMTAvBgNV
BAMTKEMwN0ZFMDVBN0E1RTk2NTc5ODhFODg0Q0ZGQjgxNDI0RDY3QTdBN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7l59MXY6ud9WJzeRAm+ogsiLb
SpA5WcPGpmL+fygAh5Gwdh7ntSghfGGCCXyY/1wfSjtaaFBXCiJu68g9ebzJ8kfe
kwBA9n07u3De+KoTWsl1XzYmKZs8SyAJibDuIz363nHRPL3EckHAX42kzfYZ7ptG
66omN6AumWKnz4KPVCIYXCLCj3teb2Np1hHlwzl2t7T1GNVjt4RoFQuNyRmNmIYg
AuwLkvTR8WXXFEWnaqftGSiBI7W0v7CvkjKRYAlu0/QOhDJwR+a49iRn40aYXher
pHtK1T3Xo+DI/ucGGB3QHXUHLKHArh0dpIM9rDoPexHNK1QjH6Y94GMZkwIPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUwH/gWnpelleYjohM/7gUJNZ6en0wHwYDVR0j
BBgwFoAUnwjTjUVxwJqDtFrP0QrreCbOj4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTZFOEYxMDMxNDZCMjg1MDMzNTAyM0E3MEE2RDM5ODc0
NzY2MzY4REJEQTVGMDQ4RDU1OTcyQjk4RkQ4MzY3LzAvOUYwOEQzOEQ0NTcxQzA5
QTgzQjQ1QUNGRDEwQUVCNzgyNkNFOEY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA4RDM4RDQ1NzFDMDlBODNC
NDVBQ0ZEMTBBRUI3ODI2Q0U4Rjg0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE2RThGMTAzMTQ2QjI4NTAzMzUwMjNBNzBBNkQzOTg3NDc2NjM2OERC
REE1RjA0OEQ1NTk3MkI5OEZEODM2Ny8wLzMxMzYzODJlMzEzODMxMmUzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczODM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKotQgwDQYJ
KoZIhvcNAQELBQADggEBACHRgJ18Z+aoUHv9ii4zpgX+lYmQAgGLpcR358kqomo+
zlj6k3ftpQuK7IdMECIIYbolwaHkNWH2NQ2OY2fXXG8ZUdd//7bQZyhUgryFD0o8
bY4XUoix4Pbf0IDCE7yOmjsyv5jvu45hWixaOfsOerpDxA2XxofV7JyB3+FFXNKR
T89yPpFM46h2byJLSUHa9nXfehcbFJ/o2/+YmDG/uH42ElpSV7V++D2l1dH3RCUk
x4CBH8W6ucE1R6KzmVXG/1mF7yj1kJ+imB5HFG4nvjCR+PecwboZR29X0o2Fli37
AtlOLOkv2TB8vG7yE0qUGAGJFUuvV7UdcPHwwebezGc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:37:11 2025 by rpki-client