Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e302e302f31362d3234203d3e203132303636.roa
File: 3138362e3135302e302e302f31362d3234203d3e203132303636.roa (raw, json)
Hash identifier: IeF1c34TfJyM/Xl2jjCDZvAvgmvXE98MygMkwIuj9Og=
Subject key identifier: F3:3D:D2:D0:3C:F5:56:99:64:09:0F:F0:4B:38:73:63:57:4F:85:B0
Certificate issuer: /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial: 6317F16999B1FD1D27DA70551ADD657388EB8998
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e302e302f31362d3234203d3e203132303636.roa
Signing time: Tue 04 Feb 2025 18:47:05 +0000
ROA not before: Tue 04 Feb 2025 18:42:05 +0000
ROA not after: Tue 03 Feb 2026 18:47:05 +0000
asID: 12066
IP address blocks: 186.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:17:f1:69:99:b1:fd:1d:27:da:70:55:1a:dd:65:73:88:eb:89:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Validity
Not Before: Feb 4 18:42:05 2025 GMT
Not After : Feb 3 18:47:05 2026 GMT
Subject: CN=F33DD2D03CF5569964090FF04B387363574F85B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:15:04:fd:09:6c:1d:32:d4:98:29:cd:53:
29:1c:a6:99:c7:1b:55:1d:68:c3:30:46:29:1e:7c:
08:41:fd:f5:5d:71:e8:c6:26:c7:7e:8a:14:e1:9d:
66:de:b9:1f:8d:74:39:16:a7:0e:d5:74:56:fd:4f:
a9:4e:9e:0d:52:2a:b8:fb:0b:36:7a:83:b2:b3:2f:
40:5c:27:63:a2:6b:e1:2e:52:79:8f:e9:f4:10:02:
12:b1:de:3b:0a:35:0c:0c:a3:36:db:f6:ea:2c:94:
d1:be:57:b3:00:e8:e1:6e:b0:a3:49:83:92:39:a3:
ef:3f:1e:01:71:8c:5e:c2:78:18:44:bd:a3:ff:35:
0a:0f:67:e1:a8:58:34:d9:2b:75:cf:b3:3c:bf:a3:
9c:44:d8:9f:59:2a:59:96:12:13:cd:e2:a0:f2:37:
2d:d8:ed:00:57:86:67:0e:31:16:3d:ae:96:54:96:
de:30:d6:b5:01:b5:b6:e2:07:c1:9e:09:a9:05:9a:
25:df:5e:53:21:d9:03:5f:2a:37:70:68:33:6c:2a:
2a:45:2d:2f:ec:17:a1:2e:0b:81:7c:49:fe:a5:45:
5d:e4:42:85:e2:b5:87:25:e7:e5:cc:e0:1e:43:be:
54:e7:5b:39:56:c0:91:cd:e4:36:fb:83:51:0c:e0:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3D:D2:D0:3C:F5:56:99:64:09:0F:F0:4B:38:73:63:57:4F:85:B0
X509v3 Authority Key Identifier:
keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e302e302f31362d3234203d3e203132303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:87:2f:de:c6:ed:fc:f1:6f:65:7e:9b:24:52:45:d9:74:24:
a8:88:23:a1:ea:16:2e:e3:e0:eb:95:ac:69:3a:fe:c3:8e:46:
eb:80:52:05:1f:2e:eb:51:b5:16:03:ce:e1:9d:a8:59:0b:58:
32:9b:99:cb:a1:4c:e5:db:a4:70:c5:76:05:f7:cc:35:48:ac:
e2:74:2d:a2:ad:0b:61:68:5c:01:0b:56:84:f7:11:ac:36:89:
62:23:39:c6:86:f1:c2:4f:e2:f7:a6:5a:79:a0:e1:5d:2a:09:
e2:12:5f:50:95:b9:dd:26:7a:88:0c:e8:03:ef:a8:38:29:ba:
74:f0:d8:d3:af:35:0f:d0:58:66:ea:1d:ed:22:91:e4:2b:85:
53:fe:a8:7e:4b:e4:21:68:e4:40:a3:8b:5e:53:39:4a:20:83:
b4:11:ea:a7:25:ba:63:cd:9a:75:cc:4d:92:94:17:a9:25:e6:
9f:c5:4b:fe:a0:41:35:e4:40:c5:96:d1:1a:ef:bf:87:62:27:
68:41:a7:58:3c:83:67:01:e0:a8:5b:07:f6:08:d0:2e:8a:d8:
c9:e3:d9:b8:32:69:6e:63:fc:d2:09:1f:8b:a0:20:2f:02:c3:
10:7f:0a:cc:13:05:3f:b9:b4:f5:e5:22:a9:f1:96:97:35:2a:
44:65:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:25 2025 by rpki-client