Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3232382e302f32342d3234203d3e20323633373235.roa
File: 3133382e302e3232382e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier: 68XQ3ufMqGsmAQ1uoVne0GhesH7OqR7wmibn7nwIVNI=
Subject key identifier: F0:70:B4:CA:92:FD:DC:92:EA:3D:71:16:30:6B:7A:0F:26:89:10:37
Certificate issuer: /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial: 5950CC05D7983E0BCED6B61D3226A85CEEE3EB9B
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3232382e302f32342d3234203d3e20323633373235.roa
Signing time: Tue 04 Feb 2025 18:50:06 +0000
ROA not before: Tue 04 Feb 2025 18:45:06 +0000
ROA not after: Tue 03 Feb 2026 18:50:06 +0000
asID: 263725
IP address blocks: 138.0.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:50:cc:05:d7:98:3e:0b:ce:d6:b6:1d:32:26:a8:5c:ee:e3:eb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Validity
Not Before: Feb 4 18:45:06 2025 GMT
Not After : Feb 3 18:50:06 2026 GMT
Subject: CN=F070B4CA92FDDC92EA3D7116306B7A0F26891037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:9f:72:c6:84:da:86:f2:fd:12:bb:ed:b5:
ad:77:93:77:b4:8c:50:fd:c0:e3:c0:34:98:e6:48:
5e:23:2d:b4:90:67:db:73:37:5a:3a:5b:1b:bd:cf:
8f:e5:da:2c:59:63:29:18:e3:ea:8a:6a:94:6e:db:
5a:b2:b3:ca:78:02:be:9c:d7:bb:77:c3:2a:cf:57:
e8:f3:2c:7a:2f:40:92:59:ed:6e:e6:d0:b6:fb:0b:
fa:bc:e2:17:35:af:ec:51:5a:cf:3b:75:9e:e7:a8:
a6:84:99:5c:fa:fc:49:ca:c7:db:69:d3:1f:c7:b3:
8e:e9:70:ab:45:04:89:84:0f:4d:cf:10:ab:75:eb:
52:ac:3a:08:06:f5:47:b1:51:d7:5f:2a:20:27:3a:
1e:bc:b0:f9:68:80:4f:5c:b1:11:5c:06:94:50:2c:
65:d1:fe:83:31:bb:d8:e9:ef:af:8a:18:4c:dd:fd:
1e:a7:11:bd:00:e3:ce:84:07:21:82:da:82:6e:34:
2c:4e:a6:99:d7:ff:6d:eb:77:c5:f3:99:24:9d:38:
cd:96:cd:db:39:d2:5d:0f:f1:81:ad:0e:10:16:fe:
85:4a:9d:b2:45:53:30:fb:24:b4:8d:63:40:0a:e0:
8a:a2:f7:b6:b7:aa:61:56:24:cd:83:be:f7:53:88:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:70:B4:CA:92:FD:DC:92:EA:3D:71:16:30:6B:7A:0F:26:89:10:37
X509v3 Authority Key Identifier:
keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3232382e302f32342d3234203d3e20323633373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.228.0/24
Signature Algorithm: sha256WithRSAEncryption
98:00:ca:35:2c:52:df:cc:e1:10:56:09:01:5c:f5:a3:a3:92:
17:1f:88:cc:f3:07:16:52:18:5d:b5:64:71:c0:4d:cb:a3:50:
dd:6b:6e:1a:cf:30:4f:d8:8a:97:22:57:0d:28:2f:38:c7:2a:
80:ca:dc:10:7e:02:85:a9:c9:34:92:40:20:8a:a2:e3:28:10:
e1:73:b2:f2:cd:5b:9d:64:fc:74:7f:24:6a:3b:aa:af:a0:b0:
5d:7a:0d:64:90:ef:1c:7a:b3:99:7c:ea:25:ed:e3:a8:e7:a2:
ae:a9:8d:0e:01:fc:5b:0c:0c:d2:b8:b1:b8:ac:5b:66:1d:45:
1a:e0:65:76:c8:f3:61:ca:16:4e:52:6d:1c:93:c4:db:dc:72:
3f:1d:56:0d:f4:7f:0c:f9:16:62:84:15:d8:d1:2d:63:9a:7f:
9f:d7:ca:8a:ba:fd:a8:7c:07:57:38:e9:e9:6c:db:d9:e9:ac:
6b:2b:74:b0:e5:19:79:60:7e:c9:97:86:fe:cc:0c:ba:99:de:
9c:03:48:3a:b2:88:53:ed:ca:da:dc:3a:b1:e2:40:b8:db:80:
e8:7b:09:15:a3:b6:6f:d7:bc:47:bb:ac:11:ad:3b:0c:54:1a:
a9:17:12:74:7f:f4:46:34:cf:82:46:93:f2:80:56:4d:0f:4c:
a0:8c:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:24 2025 by rpki-client