Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3133382e35392e3131362e302f32322d3234203d3e203131353632.roa
File: 3133382e35392e3131362e302f32322d3234203d3e203131353632.roa (raw, json)
Hash identifier: fbBD+ZidCfq0o6KloJUo+qBHWxOcAuckEk3Ibr0nWRw=
Subject key identifier: 00:C8:F4:51:88:6C:D2:7D:4A:47:21:F1:DF:54:69:0C:11:26:AF:0D
Certificate issuer: /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial: 0939D87D22F4692808636D42738CF76751D46D3E
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3133382e35392e3131362e302f32322d3234203d3e203131353632.roa
Signing time: Tue 04 Feb 2025 18:00:52 +0000
ROA not before: Tue 04 Feb 2025 17:55:52 +0000
ROA not after: Tue 03 Feb 2026 18:00:52 +0000
asID: 11562
IP address blocks: 138.59.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:39:d8:7d:22:f4:69:28:08:63:6d:42:73:8c:f7:67:51:d4:6d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Validity
Not Before: Feb 4 17:55:52 2025 GMT
Not After : Feb 3 18:00:52 2026 GMT
Subject: CN=00C8F451886CD27D4A4721F1DF54690C1126AF0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:ec:0b:21:07:34:78:52:9c:e4:d0:02:b8:
a8:33:9e:35:b4:90:c8:e1:ea:6f:80:0a:1f:56:77:
82:9c:5a:0f:f4:a7:fd:9a:65:b3:84:e3:35:19:10:
4d:79:93:bf:87:34:d2:5e:1a:ea:a7:a1:10:a8:3c:
dc:57:41:df:9d:82:bb:50:e2:33:72:62:4a:1e:c2:
e6:12:6b:c9:18:83:b5:76:da:7d:0f:48:86:3d:a8:
fc:63:8b:d4:0f:6d:7e:2e:e0:33:d0:20:4d:66:fc:
4e:52:b1:37:15:c2:cd:2e:92:b7:bb:d6:d7:7c:15:
57:8d:81:37:35:47:25:16:f8:ab:9c:38:19:30:57:
df:05:ea:67:9d:54:4a:f9:7d:b8:72:fc:4f:5b:2c:
bd:d2:a2:bd:2d:f8:f3:9e:f8:24:75:c1:70:f3:3b:
22:6c:5d:b1:81:6f:c5:b8:51:09:a6:2d:38:1d:8e:
e7:00:4b:4f:e6:38:0c:eb:84:1a:27:c2:a0:f3:52:
4e:e7:b0:4f:90:ce:3c:e9:bc:e3:43:34:3f:96:e4:
00:15:4b:c5:dc:65:ac:94:51:01:82:0d:a8:65:28:
a4:72:eb:8e:54:2a:65:79:83:bd:69:c2:a1:fa:81:
9e:6f:2f:c2:5d:d5:30:b4:95:9f:91:89:97:b1:23:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:F4:51:88:6C:D2:7D:4A:47:21:F1:DF:54:69:0C:11:26:AF:0D
X509v3 Authority Key Identifier:
keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3133382e35392e3131362e302f32322d3234203d3e203131353632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.116.0/22
Signature Algorithm: sha256WithRSAEncryption
43:5c:38:da:30:0d:49:c6:0c:43:17:11:34:39:04:13:e6:26:
9e:c6:01:1c:27:b9:26:6f:ae:26:99:29:c7:ae:ea:a4:b0:42:
6c:ef:f2:79:f6:22:e9:19:a6:6d:ce:35:de:7a:91:c6:9c:e5:
d5:05:12:c9:b5:17:c3:0b:61:da:e5:5d:46:71:e6:09:1a:a3:
ba:de:6a:dc:a4:a3:91:6e:00:a7:65:db:74:de:9d:84:16:f5:
c2:a4:e3:69:04:61:72:61:c0:df:1c:59:6f:0f:29:a9:e2:95:
bc:0d:cf:be:ac:7f:b4:84:cd:0c:b9:56:0a:8d:2d:90:b9:27:
2f:88:81:d1:b6:54:a6:90:ae:d5:f5:da:91:df:4a:47:79:e5:
af:86:a9:9d:6f:7f:f1:4d:35:98:fa:90:4a:e7:2b:47:ea:38:
3a:0c:4f:0a:23:3f:ae:48:8b:e0:f8:2a:5c:6e:16:b4:44:9c:
a8:aa:9b:7a:b3:49:5b:4d:df:75:bc:63:2f:5c:5c:74:7e:b8:
b7:a9:40:3e:d7:12:a6:1f:c3:a6:12:16:76:17:d6:43:7c:a3:
38:7b:45:6a:53:91:ea:5c:bc:6f:64:43:d5:90:a1:ed:68:0c:
c7:3c:93:e0:31:25:f3:3b:2d:11:42:3c:0d:11:27:ea:c0:7f:
ef:37:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:46 2025 by rpki-client