Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3232342e302f32302d3231203d3e203230323939.roa
File: 3138362e33322e3232342e302f32302d3231203d3e203230323939.roa (raw, json)
Hash identifier: o7+MRLrXgTfD7WJsrQHmaQzR8JbN+J24DFlVyvN1I6o=
Subject key identifier: E9:47:59:32:4A:6A:F2:96:FB:20:87:F5:2D:25:68:56:47:19:A9:9D
Certificate issuer: /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial: 2323465E6C489CAE06DCF9FCD4034A54C13DB16A
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3232342e302f32302d3231203d3e203230323939.roa
Signing time: Tue 04 Feb 2025 18:48:57 +0000
ROA not before: Tue 04 Feb 2025 18:43:57 +0000
ROA not after: Tue 03 Feb 2026 18:48:57 +0000
asID: 20299
IP address blocks: 186.32.224.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:23:46:5e:6c:48:9c:ae:06:dc:f9:fc:d4:03:4a:54:c1:3d:b1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Validity
Not Before: Feb 4 18:43:57 2025 GMT
Not After : Feb 3 18:48:57 2026 GMT
Subject: CN=E94759324A6AF296FB2087F52D2568564719A99D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:72:da:83:70:e1:2b:ea:81:8b:84:a2:9f:
b3:4f:30:f6:f2:d5:99:2c:0a:b9:d9:2f:d0:f1:9a:
d1:51:92:c3:17:e9:95:4d:73:ee:a6:7e:53:55:42:
8c:d8:53:d0:d8:53:11:02:c5:e1:e2:19:53:6e:7a:
ce:c9:95:ca:a4:cc:8d:4e:61:2e:e3:60:00:6f:36:
59:3e:cb:d7:f9:21:64:0a:fa:95:7d:c8:48:27:59:
83:09:89:a3:47:81:04:8c:e6:f5:5b:2a:cf:d9:b9:
e0:80:0f:fa:bc:b1:9c:21:a7:df:45:df:7d:54:be:
c2:ba:bc:54:58:d0:96:fe:92:9b:b9:e1:69:50:67:
cd:8e:d4:a1:59:2d:d5:af:fd:69:b8:0f:2f:e2:fa:
5e:ee:8e:79:a9:04:26:d5:04:a3:94:8c:f8:aa:e3:
67:42:87:ec:e3:cd:15:4a:24:af:20:d5:84:8d:f6:
77:fa:dd:44:d3:81:df:60:59:62:4b:13:2c:3f:a3:
b0:d7:45:08:83:ec:50:c6:b5:62:b2:ae:34:24:f8:
bf:6f:83:13:d5:93:56:76:97:ee:37:75:58:66:89:
5e:b0:e9:15:78:13:f6:4b:91:9d:49:59:64:b3:90:
b3:7c:ca:67:21:c8:5d:64:f5:8e:95:dc:0c:a4:99:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:47:59:32:4A:6A:F2:96:FB:20:87:F5:2D:25:68:56:47:19:A9:9D
X509v3 Authority Key Identifier:
keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3232342e302f32302d3231203d3e203230323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.32.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:a3:8d:77:d5:e5:10:fa:5b:1c:70:ee:2b:a8:1a:f2:90:60:
ae:f2:40:ae:1c:9c:2b:48:6f:94:f2:e9:f9:f1:7a:50:c0:97:
fd:24:25:48:f4:c9:3b:b6:c0:52:01:bd:c7:e8:88:4e:8c:60:
12:c4:4c:4c:71:dc:5f:a3:c4:8b:89:07:8e:da:68:c2:e6:42:
1e:9d:9c:5b:66:f5:f8:36:26:72:41:24:05:79:a8:6e:3e:63:
33:89:23:ad:c4:3c:62:7e:48:ce:e3:6a:f7:73:a5:d1:8c:f5:
13:29:dc:d7:76:68:1a:6d:09:3d:12:48:94:c1:53:0c:d1:e4:
24:a6:87:80:9c:c9:ba:ff:43:95:63:4e:e0:5d:93:7a:1c:93:
85:11:54:28:5c:2a:c9:72:bb:3b:53:b7:7a:8a:77:23:e1:ea:
9d:0e:08:cf:2c:87:15:64:12:0d:93:7c:ec:c6:1f:42:fd:d4:
4b:b7:93:98:de:27:47:6a:c5:44:56:55:42:38:a5:91:df:c9:
c5:f9:e9:32:88:92:6f:c2:67:e1:bf:ef:87:6c:99:85:ab:fb:
23:bc:1b:30:fc:be:28:7c:c2:84:0a:72:66:b2:ac:c3:22:12:
8f:20:17:83:8b:df:c9:c5:23:9a:51:70:71:8b:4e:9f:4e:fe:
13:9b:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:18:55 2025 by rpki-client