Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/3133382e3132312e3130342e302f32322d3235203d3e20323633373930.roa
File: 3133382e3132312e3130342e302f32322d3235203d3e20323633373930.roa (raw, json)
Hash identifier: F76GrfwcKexdgUbJG6CgDaKwgPsEu6hUZX77Pc88mZU=
Subject key identifier: 2D:AE:B2:B0:1B:C3:C0:F9:99:0B:2A:9F:20:A9:DB:57:B8:33:36:0F
Certificate issuer: /CN=BAE407ECC84E4D7557E3AF0237ACE50C0EF39828
Certificate serial: 29606511D8A241D08C7345F4732F451AA148C6F0
Authority key identifier: BA:E4:07:EC:C8:4E:4D:75:57:E3:AF:02:37:AC:E5:0C:0E:F3:98:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/3133382e3132312e3130342e302f32322d3235203d3e20323633373930.roa
Signing time: Tue 04 Feb 2025 18:43:58 +0000
ROA not before: Tue 04 Feb 2025 18:38:58 +0000
ROA not after: Tue 03 Feb 2026 18:43:58 +0000
asID: 263790
IP address blocks: 138.121.104.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:60:65:11:d8:a2:41:d0:8c:73:45:f4:73:2f:45:1a:a1:48:c6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAE407ECC84E4D7557E3AF0237ACE50C0EF39828
Validity
Not Before: Feb 4 18:38:58 2025 GMT
Not After : Feb 3 18:43:58 2026 GMT
Subject: CN=2DAEB2B01BC3C0F9990B2A9F20A9DB57B833360F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:4c:99:56:ed:57:b5:be:bc:24:a3:08:15:
56:83:11:dd:01:75:9f:96:a3:ac:d1:1d:f2:17:35:
bc:73:8d:38:6d:2a:08:96:13:ad:a0:0c:9b:97:ff:
20:e7:f4:e0:2e:78:71:4e:1c:ca:6a:99:ef:d4:b0:
6f:91:cc:c2:42:93:31:e0:a8:86:d5:bc:5c:0f:54:
c3:e9:48:d2:5f:1c:b9:ff:a4:a5:ea:9d:92:75:70:
ed:68:ee:41:55:1a:87:cd:65:99:72:f4:3b:62:91:
84:26:cb:d8:10:ee:5f:72:0b:aa:4c:8f:95:d9:96:
c4:5b:9f:ee:dd:ec:58:05:61:b2:ba:ef:03:ed:92:
b2:02:58:25:2e:34:89:f0:a9:6b:82:3a:99:b4:82:
25:98:7b:da:66:32:0d:e1:e6:db:b5:1d:a4:80:34:
ac:f9:50:37:f4:ee:16:1a:d7:09:04:f5:5a:d2:2a:
95:11:00:08:0c:bd:9f:7c:54:a9:90:55:d9:45:fa:
17:2d:20:a0:0f:e1:7a:53:bd:88:7c:e1:d3:e0:5c:
01:d2:45:d3:12:da:e9:3d:88:15:79:8c:26:de:c9:
92:0b:73:9c:c3:6e:21:2e:3b:d5:b1:83:a6:c5:74:
d9:f6:16:49:09:b6:e3:30:22:72:3c:41:7d:f3:16:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AE:B2:B0:1B:C3:C0:F9:99:0B:2A:9F:20:A9:DB:57:B8:33:36:0F
X509v3 Authority Key Identifier:
keyid:BA:E4:07:EC:C8:4E:4D:75:57:E3:AF:02:37:AC:E5:0C:0E:F3:98:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAE407ECC84E4D7557E3AF0237ACE50C0EF39828.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1019A668494E8E3DFB7DE59F9B09F89B3A80E28936C7442EC95B3F251000392/0/3133382e3132312e3130342e302f32322d3235203d3e20323633373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.104.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:6f:0d:e1:c8:49:73:72:4d:70:56:13:84:ee:15:d3:98:8e:
ff:15:d0:9d:77:fe:7e:ab:fe:b3:a5:8c:b3:b3:3c:37:d0:43:
c2:88:af:25:53:c3:43:93:7e:b9:39:fd:7d:ca:6d:da:20:a7:
83:7c:8c:b2:28:12:6a:03:b3:ce:50:f3:2d:a3:e8:69:5f:d1:
c4:ae:4f:3a:6d:c7:33:ea:9f:9a:a2:8a:e3:73:a1:10:5d:ed:
54:63:54:12:66:0c:f1:6f:f5:6e:6b:c9:19:d1:e7:03:71:13:
22:6d:91:42:ba:ea:a5:be:83:18:c2:27:52:af:e5:90:ee:6e:
d5:a6:6f:02:16:4a:1c:26:87:43:b8:32:fd:60:cf:85:e5:f7:
63:0c:b2:ea:6c:b3:d8:82:ec:ad:62:86:37:c2:27:3c:e2:e5:
ab:c6:71:d5:6e:cf:46:16:8d:c8:27:23:c2:15:34:01:78:4c:
a7:af:86:75:c7:47:ed:4c:04:3b:f7:5c:81:40:d9:81:92:93:
cd:5b:70:83:14:09:9e:92:d3:e2:fd:cc:0e:a4:21:d3:b9:92:
de:87:d1:00:74:cb:05:2c:8f:f5:40:ab:c3:1a:3b:38:7b:7e:
55:7d:b8:0c:23:8a:a1:eb:35:dd:10:1e:79:d2:4c:10:1f:b0:
07:49:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:12 2025 by rpki-client