Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/3133382e3131372e39362e302f32322d3234203d3e20323632313436.roa
File: 3133382e3131372e39362e302f32322d3234203d3e20323632313436.roa (raw, json)
Hash identifier: 39b3Do7fljEwzUtBJU/DtBVS11uB7rEAFGwmY4sl0gA=
Subject key identifier: 44:8D:7F:E0:05:E1:D1:A6:6B:1D:DB:86:9F:99:C7:9D:B5:01:AA:D8
Certificate issuer: /CN=E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683
Certificate serial: 3AADF91512DCAC7DB88BA70A8C96CFC00CDE2E99
Authority key identifier: E8:9E:A7:20:75:24:FF:2A:C1:EC:7B:A9:F4:DB:06:11:6C:C6:D6:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/3133382e3131372e39362e302f32322d3234203d3e20323632313436.roa
Signing time: Tue 04 Feb 2025 18:48:59 +0000
ROA not before: Tue 04 Feb 2025 18:43:59 +0000
ROA not after: Tue 03 Feb 2026 18:48:59 +0000
asID: 262146
IP address blocks: 138.117.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ad:f9:15:12:dc:ac:7d:b8:8b:a7:0a:8c:96:cf:c0:0c:de:2e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683
Validity
Not Before: Feb 4 18:43:59 2025 GMT
Not After : Feb 3 18:48:59 2026 GMT
Subject: CN=448D7FE005E1D1A66B1DDB869F99C79DB501AAD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:67:9c:79:88:c6:b4:c6:67:8a:a7:6b:c9:
61:aa:9b:be:22:eb:e8:2d:93:4f:47:bf:75:de:b1:
d4:1c:d3:61:1a:1b:9a:a8:14:3a:90:3c:05:2b:6d:
24:bb:d4:03:d8:e3:3b:5e:0e:61:ab:7f:cb:01:ec:
f3:fc:4e:7b:21:b5:e1:a1:1c:45:63:74:25:c9:94:
3d:19:19:fc:8f:5a:d4:62:ff:54:ce:7c:fd:60:e8:
e5:b0:1c:32:e3:ce:3c:1a:fa:16:e3:b3:75:dc:d6:
4b:8c:77:c6:00:30:16:b8:49:c4:b9:65:11:97:c9:
89:4c:ab:8c:97:64:4c:8f:28:a7:1d:6b:c9:44:53:
f9:c6:5c:22:66:7d:9c:8e:07:81:b3:d9:cb:fe:a6:
83:0c:27:36:23:95:92:6b:a4:f0:e6:f0:d8:1d:b7:
66:6c:26:09:5b:89:57:b5:e4:e2:35:19:59:48:de:
ee:43:f7:e9:3c:3c:f3:e0:25:a7:a2:bf:96:04:43:
5f:38:84:33:0d:84:a4:04:6a:b4:5f:7d:ee:60:92:
e5:01:1a:e4:b0:48:43:01:ea:85:b9:7b:60:3d:c9:
41:2d:8d:0c:e1:05:04:1a:3e:9b:f4:95:40:38:9a:
9e:1e:a6:87:90:ac:16:38:cc:31:4c:b5:48:27:f9:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:7F:E0:05:E1:D1:A6:6B:1D:DB:86:9F:99:C7:9D:B5:01:AA:D8
X509v3 Authority Key Identifier:
keyid:E8:9E:A7:20:75:24:FF:2A:C1:EC:7B:A9:F4:DB:06:11:6C:C6:D6:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/3133382e3131372e39362e302f32322d3234203d3e20323632313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:90:f3:59:b4:58:a2:ed:e3:2e:1f:74:6e:57:47:81:fd:bf:
30:78:c0:1a:43:ae:b6:47:e2:51:33:c5:35:92:7c:43:dd:06:
69:97:d6:19:5d:7e:5e:ea:74:16:6e:8a:b8:c8:a2:31:35:df:
3f:c1:68:18:d3:61:ea:cc:a5:de:19:d1:d6:66:31:45:20:5b:
a8:3a:9c:86:f8:63:47:2c:06:aa:41:d8:b8:e7:f1:ec:2f:d5:
07:03:b3:1e:6a:59:38:f7:07:90:9c:72:59:99:6b:d5:e1:4b:
5d:28:50:e1:ad:34:94:02:19:22:3d:41:be:62:ba:27:0e:d9:
4f:7e:a2:bf:30:ef:1f:e8:03:a0:8c:51:d7:be:07:5e:31:b4:
a9:b5:10:30:66:65:22:80:ee:e0:3c:a2:25:b0:f4:12:f5:16:
e9:ba:2e:fd:c8:bf:d8:73:dc:ba:ea:3a:8c:ea:c4:38:4a:64:
2c:b1:03:29:02:4b:08:70:cf:0a:bf:d2:c0:c7:40:f5:02:2f:
cc:dd:dd:ad:85:09:7b:69:43:69:26:21:ca:33:aa:47:0d:8d:
a3:6a:b1:1d:25:30:0b:b8:73:e5:07:10:92:8b:d9:27:6f:c3:
44:3d:90:77:d7:57:43:bd:e3:cd:ab:53:a7:cc:1b:fc:5a:24:
ec:c0:54:43
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOq35FRLcrH24i6cKjJbPwAzeLpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5RUE3MjA3NTI0RkYyQUMxRUM3QkE5RjREQjA2MTE2
Q0M2RDY4MzAeFw0yNTAyMDQxODQzNTlaFw0yNjAyMDMxODQ4NTlaMDMxMTAvBgNV
BAMTKDQ0OEQ3RkUwMDVFMUQxQTY2QjFEREI4NjlGOTlDNzlEQjUwMUFBRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqI2eceYjGtMZniqdryWGqm74i
6+gtk09Hv3XesdQc02EaG5qoFDqQPAUrbSS71APY4zteDmGrf8sB7PP8TnshteGh
HEVjdCXJlD0ZGfyPWtRi/1TOfP1g6OWwHDLjzjwa+hbjs3Xc1kuMd8YAMBa4ScS5
ZRGXyYlMq4yXZEyPKKcda8lEU/nGXCJmfZyOB4Gz2cv+poMMJzYjlZJrpPDm8Ngd
t2ZsJglbiVe15OI1GVlI3u5D9+k8PPPgJaeiv5YEQ184hDMNhKQEarRffe5gkuUB
GuSwSEMB6oW5e2A9yUEtjQzhBQQaPpv0lUA4mp4epoeQrBY4zDFMtUgn+TCFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQURI1/4AXh0aZrHduGn5nHnbUBqtgwHwYDVR0j
BBgwFoAU6J6nIHUk/yrB7Hup9NsGEWzG1oMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzNGQzc2NjREQzFBMTYyMUU3QTVEMjQ2NjQzQzIwQkUz
REVBNjM0NUFCMEVFMTgwOTc0RDRCNEQ1RkZGRDU5LzAvRTg5RUE3MjA3NTI0RkYy
QUMxRUM3QkE5RjREQjA2MTE2Q0M2RDY4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODlFQTcyMDc1MjRGRjJBQzFF
QzdCQTlGNERCMDYxMTZDQzZENjgzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMzRkM3NjY0REMxQTE2MjFFN0E1RDI0NjY0M0MyMEJFM0RFQTYzNDVB
QjBFRTE4MDk3NEQ0QjRENUZGRkQ1OS8wLzMxMzMzODJlMzEzMTM3MmUzOTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinVg
MA0GCSqGSIb3DQEBCwUAA4IBAQCikPNZtFii7eMuH3RuV0eB/b8weMAaQ662R+JR
M8U1knxD3QZpl9YZXX5e6nQWboq4yKIxNd8/wWgY02HqzKXeGdHWZjFFIFuoOpyG
+GNHLAaqQdi45/HsL9UHA7Mealk49weQnHJZmWvV4UtdKFDhrTSUAhkiPUG+Yron
DtlPfqK/MO8f6AOgjFHXvgdeMbSptRAwZmUigO7gPKIlsPQS9Rbpui79yL/Yc9y6
6jqM6sQ4SmQssQMpAksIcM8Kv9LAx0D1Ai/M3d2thQl7aUNpJiHKM6pHDY2jarEd
JTALuHPlBxCSi9knb8NEPZB311dDvePNq1OnzBv8WiTswFRD
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:25:33 2025 by rpki-client