Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033353439.roa
File: 3138362e302e3135322e302f32322d3234203d3e2033353439.roa (raw, json)
Hash identifier: kClGDVfmtDv49/lAsICG1WreKudyMVPFaxkYzY300Ng=
Subject key identifier: 84:5C:1F:94:17:A5:34:08:E4:58:53:B5:73:F0:07:13:18:BC:F2:FC
Certificate issuer: /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial: 32B3E2C7089E5EED51E731E6686A8D3AB0280BC0
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033353439.roa
Signing time: Mon 28 Oct 2024 18:30:00 +0000
ROA not before: Mon 28 Oct 2024 18:25:00 +0000
ROA not after: Mon 27 Oct 2025 18:30:00 +0000
asID: 3549
IP address blocks: 186.0.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b3:e2:c7:08:9e:5e:ed:51:e7:31:e6:68:6a:8d:3a:b0:28:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
Validity
Not Before: Oct 28 18:25:00 2024 GMT
Not After : Oct 27 18:30:00 2025 GMT
Subject: CN=845C1F9417A53408E45853B573F0071318BCF2FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:df:54:8d:5e:a6:1b:97:29:91:f8:15:2d:
74:dd:18:9e:82:3b:2a:e1:5b:cc:8e:4a:52:31:3b:
1f:d8:2a:44:be:9e:52:dd:a9:be:18:49:76:df:79:
9a:55:d6:9f:68:0d:63:fa:f6:42:93:57:73:22:5a:
75:ff:24:20:1b:c6:44:a9:79:39:85:9d:73:66:76:
7e:4f:43:80:d8:5b:fe:9a:f9:b2:55:d2:2f:13:e9:
44:84:c2:3f:b1:df:b2:0d:23:7e:7b:54:94:18:33:
81:08:56:3e:1f:0c:22:59:f9:a1:7f:3b:dc:08:f8:
ee:0d:af:ce:bc:02:14:c1:fb:9e:b5:69:90:ad:4d:
2a:8e:ad:b5:ee:3b:8f:fe:c1:08:8c:40:b0:1f:fa:
66:33:84:66:14:cd:a7:84:05:8a:32:ee:1e:18:c4:
38:90:a2:7e:59:05:0c:13:b8:68:8f:5e:dd:00:16:
02:bc:a7:55:09:0f:1c:d4:31:b1:88:2e:ae:7e:4e:
7a:15:82:93:21:b0:66:7c:29:37:f3:5d:23:8b:26:
59:4f:1b:c1:ad:81:9b:a9:1f:c0:f5:bf:2c:64:8a:
a8:bf:78:ea:05:f2:27:9a:46:c1:66:df:f5:36:03:
29:7f:3f:0f:50:17:0a:fe:04:6d:e4:6f:c5:31:a4:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:1F:94:17:A5:34:08:E4:58:53:B5:73:F0:07:13:18:BC:F2:FC
X509v3 Authority Key Identifier:
keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.0.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:6b:a8:c1:84:3d:e0:bf:2d:95:ea:b4:e9:6a:09:97:a5:fb:
cb:90:c3:83:05:dc:bd:c8:9b:6c:9e:49:48:e7:92:42:29:1e:
ab:a9:e5:3b:f8:84:6f:75:50:31:49:db:38:4b:34:01:0f:eb:
63:02:0a:5e:d4:87:9e:d4:cd:80:f6:65:f5:f8:5c:73:8d:cb:
4c:b6:8f:2b:7f:a1:1e:18:fc:af:e4:1a:80:f7:1b:51:ee:ff:
c2:47:a1:39:a8:eb:ee:65:7b:51:db:2a:aa:3b:bd:fe:05:ec:
a1:f0:4e:bb:e3:e6:9a:be:e9:9c:9f:88:cd:5b:e3:cd:6e:3f:
59:fe:cc:5d:d0:2d:e9:fc:6b:e6:10:42:53:24:19:27:1f:21:
df:02:a5:37:e1:09:49:68:17:2f:d5:df:ea:45:b0:d2:1c:33:
8e:22:35:b5:69:80:a3:2f:b2:1b:82:98:88:dc:4b:83:ed:7e:
58:3f:5a:c9:ef:db:36:d1:6b:e1:f7:71:76:4a:90:c2:e1:17:
74:c5:db:3b:ae:d5:3c:fe:3a:47:e5:e9:12:03:27:25:65:a8:
c5:d7:1f:7a:1b:2e:cf:2a:f6:95:31:76:bb:99:4b:72:1b:96:
08:ca:56:4a:39:28:3b:d4:37:44:84:ce:77:ef:d9:8a:0a:12:
c5:6b:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:53 2025 by rpki-client