Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134382e302f32322d3232203d3e20323634373434.roa
File: 3136382e3139342e3134382e302f32322d3232203d3e20323634373434.roa (raw, json)
Hash identifier: Ur+Dirs0TLqadLRvU8/z37Snh6mPrxz7M7Cf04VUOv8=
Subject key identifier: 04:95:52:D2:8F:EE:35:9B:F3:1F:F0:09:42:A8:5E:A4:DA:D8:A0:1B
Certificate issuer: /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial: 7E4F867BA329C50DE45225A5C51A887781016106
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134382e302f32322d3232203d3e20323634373434.roa
Signing time: Tue 04 Feb 2025 18:54:17 +0000
ROA not before: Tue 04 Feb 2025 18:49:17 +0000
ROA not after: Tue 03 Feb 2026 18:54:17 +0000
asID: 264744
IP address blocks: 168.194.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4f:86:7b:a3:29:c5:0d:e4:52:25:a5:c5:1a:88:77:81:01:61:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Validity
Not Before: Feb 4 18:49:17 2025 GMT
Not After : Feb 3 18:54:17 2026 GMT
Subject: CN=049552D28FEE359BF31FF00942A85EA4DAD8A01B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:35:22:6e:d4:ac:4e:1f:a8:1c:48:06:df:
f7:1b:fd:5b:1e:e9:e9:5e:ed:90:7e:15:f0:02:a4:
68:d2:bb:e8:a4:e8:97:cb:d4:8a:ba:f6:74:d9:05:
2e:50:f2:36:18:7f:6a:46:8a:85:c8:e2:7f:d4:d7:
93:10:6d:60:05:97:4e:e2:30:27:20:0e:d5:27:63:
a0:a3:55:4b:aa:1e:cb:87:54:40:d1:e1:b9:55:34:
e3:a7:35:a3:b2:21:18:29:a4:f9:22:f4:d6:48:b8:
bc:9a:0e:10:36:c3:da:9c:14:85:c1:a3:fb:a7:66:
82:89:c3:4c:b7:d7:19:9e:c0:1f:8e:28:2b:83:91:
60:a6:a0:3b:2e:24:ce:9b:64:d8:5c:03:25:99:6e:
c8:0c:80:a8:d6:80:d8:b2:13:59:0b:6d:38:72:04:
15:02:34:b6:c2:2e:5b:40:e5:89:41:f4:a0:14:97:
3d:6b:c9:26:7a:ab:26:7a:70:f6:d1:7c:20:8c:a5:
1e:8d:63:52:9d:e1:be:89:cf:2e:d6:8f:84:fc:68:
fe:b2:e1:71:26:00:9a:77:1a:a3:56:b4:35:4e:a7:
2d:d9:3c:a9:b4:15:35:25:04:7a:0e:62:d7:42:1e:
6c:c7:2e:98:61:5f:d2:79:36:0e:db:89:13:e3:0a:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:52:D2:8F:EE:35:9B:F3:1F:F0:09:42:A8:5E:A4:DA:D8:A0:1B
X509v3 Authority Key Identifier:
keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134382e302f32322d3232203d3e20323634373434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.148.0/22
Signature Algorithm: sha256WithRSAEncryption
32:2a:84:7d:dc:eb:07:7f:5e:85:5c:78:33:4c:d2:b5:ad:fc:
82:ad:79:57:1d:60:93:45:e8:2a:cf:b8:c5:01:bf:bc:8b:cc:
79:f2:7c:df:f3:f3:19:1b:aa:f7:37:0d:09:e4:fa:54:a0:68:
d9:1d:92:8d:25:02:c9:bd:2a:35:27:d1:6c:3d:f2:45:c9:fb:
99:24:0c:0d:2f:7f:cc:32:5c:9a:ba:31:8c:22:35:0f:53:f4:
17:65:68:52:84:5d:93:0c:8c:b4:66:b5:64:31:4f:ba:05:8d:
79:d5:78:dd:61:55:df:4f:41:3c:45:1a:49:c1:49:ef:45:a5:
89:b6:ac:4e:5d:d4:e5:f3:9c:95:7d:78:fd:4c:46:25:5a:20:
a9:14:4a:3b:0c:f9:6b:17:e4:14:fb:79:d5:ed:c9:e8:13:2d:
5b:17:cb:db:ab:10:4a:8a:c9:8f:e9:39:ae:97:1f:c9:b1:97:
9a:9c:e1:85:36:ef:56:de:ce:cc:69:24:32:40:b9:a3:dc:d0:
c5:65:e0:ad:09:b8:43:c4:95:f9:d6:41:70:cf:63:4e:ac:92:
df:79:9d:fe:9a:65:bc:8a:57:48:13:0a:cf:64:01:62:79:be:
29:f0:e6:e7:dc:3d:1f:6c:24:71:b2:32:34:79:79:70:bb:dd:
dd:9c:e7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:44 2025 by rpki-client