Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36312e302f32342d3234203d3e203238313033.roa
File: 3133382e3138362e36312e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier: RQ12DKPZHwx3lbxo7bFE1ddcGjWIn0fiqSGA4pjrlUU=
Subject key identifier: 09:EC:1F:92:38:03:EE:35:EB:C4:0D:AA:D0:78:6C:C0:0A:FD:F5:D0
Certificate issuer: /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial: 1A9B6CE7E0B52FEC5CD06B7893E62E05938D23FC
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36312e302f32342d3234203d3e203238313033.roa
Signing time: Mon 12 Aug 2024 12:45:02 +0000
ROA not before: Mon 12 Aug 2024 12:40:02 +0000
ROA not after: Mon 11 Aug 2025 12:45:02 +0000
asID: 28103
IP address blocks: 138.186.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:9b:6c:e7:e0:b5:2f:ec:5c:d0:6b:78:93:e6:2e:05:93:8d:23:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Validity
Not Before: Aug 12 12:40:02 2024 GMT
Not After : Aug 11 12:45:02 2025 GMT
Subject: CN=09EC1F923803EE35EBC40DAAD0786CC00AFDF5D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:71:bf:36:1e:68:cb:a3:0a:06:d3:95:a4:
8f:30:7a:d3:01:66:36:7d:f7:84:98:be:b4:f9:d1:
91:03:ec:03:e5:b1:1a:3a:3d:12:95:65:86:14:f6:
56:c9:c0:77:13:12:27:53:d7:0a:4b:50:8a:48:d8:
7b:ca:d0:f4:94:55:08:3c:03:2e:ef:ee:b8:f1:c7:
15:47:ec:38:cf:46:44:8b:83:0b:fe:a2:f3:05:94:
d1:25:5b:bf:a7:7f:3b:60:2a:22:5b:7f:8e:41:98:
f1:fb:51:11:ae:1e:5f:90:f8:1f:cb:fa:6e:4e:00:
e5:fc:27:ce:41:07:2d:39:9e:dc:77:31:72:9d:76:
52:11:c4:1c:b0:23:50:e1:8e:ed:4a:63:b8:1b:d1:
b8:9b:ed:24:54:3d:d8:68:7e:e1:d6:b0:20:c0:85:
02:29:d1:b0:71:28:e9:56:fb:e3:a1:9f:c8:0b:c5:
d7:90:d0:81:2c:b7:5c:e8:52:34:dd:71:0c:e6:ad:
d7:ad:53:33:1a:06:54:09:2f:1f:5b:66:51:35:95:
35:d2:f6:18:38:58:ed:62:c4:45:ba:0b:1c:ac:4b:
ff:95:e1:0e:cf:28:21:07:ea:ff:49:15:95:77:57:
ca:49:79:64:ed:3c:0a:23:c9:02:17:7b:aa:99:5c:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EC:1F:92:38:03:EE:35:EB:C4:0D:AA:D0:78:6C:C0:0A:FD:F5:D0
X509v3 Authority Key Identifier:
keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36312e302f32342d3234203d3e203238313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5f:a4:20:e7:55:fa:d5:fb:50:22:bd:a1:27:31:7c:75:a8:
ef:8e:5f:38:52:8b:ed:31:24:e6:76:c8:ac:3f:c0:34:94:8c:
9b:7d:c3:a3:83:e5:72:40:55:56:be:45:58:4a:1c:bf:ce:28:
df:5e:18:af:55:27:81:84:3a:c2:d7:76:54:27:99:3e:c0:1b:
e7:d8:6c:67:58:f0:f3:42:7c:0e:a6:1b:2d:14:5b:5f:11:15:
27:95:27:49:c9:0c:7b:78:53:06:83:08:09:cb:6b:c9:9c:c1:
70:aa:d8:5c:39:eb:d6:9d:e9:0d:ed:f0:ac:fb:2a:63:89:06:
04:ec:b0:b4:f1:79:f8:05:f2:e2:b6:d8:f7:76:19:cc:94:88:
d9:da:84:44:b3:c8:5d:a4:c5:2e:9a:19:79:24:7b:45:b6:a6:
df:1b:11:ef:23:0d:9e:8a:b9:8f:7c:24:85:2b:8a:e2:5b:a6:
90:6b:90:4d:33:92:37:2e:d4:54:a7:b5:3f:e8:ef:7f:0a:a4:
40:4e:c9:db:58:31:18:e8:e6:7c:6c:bd:ae:cf:8c:22:36:5c:
71:f3:63:ba:3d:bc:91:50:ac:43:c2:e9:c8:d8:4e:3d:cd:1c:
c1:fb:da:0d:c3:32:3e:ab:63:cd:76:ec:c0:35:28:9e:e1:fc:
97:37:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:16 2025 by rpki-client