Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3136382e39362e302e302f31362d3234203d3e2033353937.roa
File: 3136382e39362e302e302f31362d3234203d3e2033353937.roa (raw, json)
Hash identifier: TJ0lH/Rhli8UfBcN+TfpkHE7GEwauWKRQgz3yzU8mzE=
Subject key identifier: 23:76:01:5C:18:2B:18:6C:F0:A5:05:3D:92:D2:78:49:AF:45:9D:6F
Certificate issuer: /CN=F5141320452E9DA4404C594445360E531655082A
Certificate serial: 74F7D7E6095ED88C342AE1D19D7AD2E53B3995E0
Authority key identifier: F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3136382e39362e302e302f31362d3234203d3e2033353937.roa
Signing time: Tue 04 Feb 2025 18:39:29 +0000
ROA not before: Tue 04 Feb 2025 18:34:29 +0000
ROA not after: Tue 03 Feb 2026 18:39:29 +0000
asID: 3597
IP address blocks: 168.96.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f7:d7:e6:09:5e:d8:8c:34:2a:e1:d1:9d:7a:d2:e5:3b:39:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5141320452E9DA4404C594445360E531655082A
Validity
Not Before: Feb 4 18:34:29 2025 GMT
Not After : Feb 3 18:39:29 2026 GMT
Subject: CN=2376015C182B186CF0A5053D92D27849AF459D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:a3:16:e1:7f:05:9c:ba:6b:b6:c5:86:89:
bf:21:75:67:87:d0:ca:e3:05:a3:33:cb:17:36:5c:
1a:72:5b:c6:a5:26:b1:91:87:df:6f:90:05:8f:c3:
b4:6f:c1:38:3e:08:f9:0c:44:bb:97:9c:0d:fa:29:
51:02:88:a3:c8:3d:e7:79:55:ce:f2:e2:c1:e9:57:
b0:15:13:b6:90:c8:ea:63:d5:97:dc:eb:0e:c3:d5:
49:20:72:8a:31:d4:98:29:41:62:d4:09:28:4f:75:
a2:1d:33:d3:e0:e6:d7:9c:b1:f8:fd:87:ac:89:ed:
52:b9:1b:b9:55:51:1e:11:7a:6c:5d:50:91:08:ba:
9e:3f:9c:14:47:c5:c7:73:46:b7:65:ba:af:78:b2:
8d:74:aa:46:2f:78:e9:57:cc:5f:30:65:45:e6:07:
ea:42:e0:c8:91:e6:d6:f6:91:c7:8d:19:24:dc:fc:
85:24:e9:3b:26:ef:63:33:3d:3c:a1:7e:60:ea:c8:
b9:ef:d8:41:bf:c2:3c:9c:f1:57:cf:6e:ed:8c:23:
94:aa:d2:c8:f9:51:43:5d:e2:04:b5:1c:6e:84:6f:
81:e8:b0:e4:61:9c:94:36:2c:f2:73:4d:6c:f1:d8:
ab:a4:13:c3:f1:91:be:37:43:50:e0:e8:9a:a8:0f:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:76:01:5C:18:2B:18:6C:F0:A5:05:3D:92:D2:78:49:AF:45:9D:6F
X509v3 Authority Key Identifier:
keyid:F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3136382e39362e302e302f31362d3234203d3e2033353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:f5:7e:44:e7:fc:bf:8f:cb:06:3d:e8:43:b7:2e:8e:eb:d8:
1e:7e:a1:5d:66:3d:42:bc:8f:05:8b:45:3f:2e:27:83:57:f2:
75:cf:5b:50:45:5b:23:13:48:6b:59:99:0b:51:d4:c8:93:66:
f5:a9:1e:4e:d4:52:9a:62:13:d1:2f:49:6d:bb:ac:f5:f8:20:
b2:71:c2:e4:a0:d7:c3:a5:20:d2:37:45:08:1f:0d:01:a4:c5:
0a:fb:28:c1:70:71:75:2f:da:6d:49:09:4d:97:e4:b1:e5:46:
10:44:eb:21:7c:ed:fb:2b:90:47:c9:bc:ff:aa:df:a2:09:aa:
36:ad:ed:12:f1:9e:66:2b:2b:3a:d3:72:d7:33:c4:74:22:51:
bc:4b:96:0f:0d:ae:dc:ad:1d:3c:54:64:89:27:01:d8:4a:01:
90:43:42:f4:59:e0:cf:30:e3:6f:60:51:ec:88:74:b9:9d:fe:
fc:9f:59:cb:41:5f:1d:05:7a:a4:79:48:be:85:cb:97:f1:c5:
ea:44:43:52:fb:0a:68:fa:39:f3:27:10:7c:f9:b9:1a:14:07:
d0:87:6c:25:1e:d8:08:b0:bd:30:80:a5:38:4b:4a:0a:8f:e2:
7c:08:1e:58:18:12:6a:e3:5b:e9:3c:e9:02:62:f9:d8:5f:47:
ab:eb:d6:3a
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUdPfX5gle2Iw0KuHRnXrS5Ts5leAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxNDEzMjA0NTJFOURBNDQwNEM1OTQ0NDUzNjBFNTMx
NjU1MDgyQTAeFw0yNTAyMDQxODM0MjlaFw0yNjAyMDMxODM5MjlaMDMxMTAvBgNV
BAMTKDIzNzYwMTVDMTgyQjE4NkNGMEE1MDUzRDkyRDI3ODQ5QUY0NTlENkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK46MW4X8FnLprtsWGib8hdWeH
0MrjBaMzyxc2XBpyW8alJrGRh99vkAWPw7RvwTg+CPkMRLuXnA36KVECiKPIPed5
Vc7y4sHpV7AVE7aQyOpj1Zfc6w7D1Ukgcoox1JgpQWLUCShPdaIdM9Pg5tecsfj9
h6yJ7VK5G7lVUR4RemxdUJEIup4/nBRHxcdzRrdluq94so10qkYveOlXzF8wZUXm
B+pC4MiR5tb2kceNGSTc/IUk6Tsm72MzPTyhfmDqyLnv2EG/wjyc8VfPbu2MI5Sq
0sj5UUNd4gS1HG6Eb4HosORhnJQ2LPJzTWzx2KukE8Pxkb43Q1Dg6JqoD8f5AgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUI3YBXBgrGGzwpQU9ktJ4Sa9FnW8wHwYDVR0j
BBgwFoAU9RQTIEUunaRATFlERTYOUxZVCCowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzdGODEzQ0QxMDY2QkU3RjdDNDlCNjA2NTJFRDJDN0FD
RkVDODYzMjQ0M0E2MTlCOUE0N0JCRjI5NkU1NEU5LzAvRjUxNDEzMjA0NTJFOURB
NDQwNEM1OTQ0NDUzNjBFNTMxNjU1MDgyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTE0MTMyMDQ1MkU5REE0NDA0
QzU5NDQ0NTM2MEU1MzE2NTUwODJBLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc3RjgxM0NEMTA2NkJFN0Y3QzQ5QjYwNjUyRUQyQzdBQ0ZFQzg2MzI0
NDNBNjE5QjlBNDdCQkYyOTZFNTRFOS8wLzMxMzYzODJlMzkzNjJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMzM1MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKhgMA0GCSqGSIb3
DQEBCwUAA4IBAQAt9X5E5/y/j8sGPehDty6O69gefqFdZj1CvI8Fi0U/LieDV/J1
z1tQRVsjE0hrWZkLUdTIk2b1qR5O1FKaYhPRL0ltu6z1+CCyccLkoNfDpSDSN0UI
Hw0BpMUK+yjBcHF1L9ptSQlNl+Sx5UYQROshfO37K5BHybz/qt+iCao2re0S8Z5m
Kys603LXM8R0IlG8S5YPDa7crR08VGSJJwHYSgGQQ0L0WeDPMONvYFHsiHS5nf78
n1nLQV8dBXqkeUi+hcuX8cXqRENS+wpo+jnzJxB8+bkaFAfQh2wlHtgIsL0wgKU4
S0oKj+J8CB5YGBJq41vpPOkCYvnYX0er69Y6
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:03:21 2025 by rpki-client