Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3138362e3138392e3232342e302f32302d3234203d3e203136383134.roa
File: 3138362e3138392e3232342e302f32302d3234203d3e203136383134.roa (raw, json)
Hash identifier: CpEA/po2Kqh4BVFj5nrmuT71WVoWaR/GPP4X2njr0qw=
Subject key identifier: 88:00:DB:55:7D:C0:B6:A2:E7:96:6C:75:64:0B:B1:11:08:74:4A:4A
Certificate issuer: /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial: 53881AF35AD799EB2694E05C5680CA21638C0C8D
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3138362e3138392e3232342e302f32302d3234203d3e203136383134.roa
Signing time: Tue 04 Feb 2025 20:04:06 +0000
ROA not before: Tue 04 Feb 2025 19:59:06 +0000
ROA not after: Tue 03 Feb 2026 20:04:06 +0000
asID: 16814
IP address blocks: 186.189.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:88:1a:f3:5a:d7:99:eb:26:94:e0:5c:56:80:ca:21:63:8c:0c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Validity
Not Before: Feb 4 19:59:06 2025 GMT
Not After : Feb 3 20:04:06 2026 GMT
Subject: CN=8800DB557DC0B6A2E7966C75640BB11108744A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:58:06:74:21:96:df:74:1c:b1:6a:32:e2:
a2:52:98:2b:7b:34:25:58:65:ac:4a:53:19:72:54:
87:9d:9b:f1:1f:05:89:79:10:80:2e:65:f6:d3:c7:
94:ca:c4:ec:64:80:70:e1:14:f9:9c:28:07:82:a8:
08:de:68:b6:b5:1c:d6:ab:1f:5c:04:24:dc:2d:04:
7f:c8:84:ca:e6:a6:c1:7d:19:8e:ed:7f:ad:2d:89:
ab:36:55:8c:74:fa:09:75:70:b8:1e:bd:c9:ea:38:
d3:f8:2d:70:d8:d7:ad:76:c5:3c:e6:6c:51:4e:9b:
c4:c0:5e:61:be:2e:40:43:3f:6f:06:f3:23:0f:88:
da:c3:ff:e7:bc:58:dd:01:8b:51:41:cb:93:1a:b1:
c6:cb:29:67:3c:f8:dc:74:fe:c6:66:7a:cd:7a:a5:
38:2c:a7:c1:dd:09:a9:f4:bc:6c:0c:f9:9c:91:0e:
40:33:c6:cb:ef:fe:96:ce:6f:b2:fa:f3:4a:72:40:
03:45:34:d9:2c:9b:1b:b1:1e:79:9a:a7:0a:a9:bb:
51:29:2a:31:59:f7:b4:36:ed:63:bc:ee:96:d4:0d:
64:3a:b0:9b:04:21:54:39:22:e5:9b:ea:24:e8:ab:
ec:e6:25:36:19:16:ff:01:f2:fd:e7:4b:fa:c2:93:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:00:DB:55:7D:C0:B6:A2:E7:96:6C:75:64:0B:B1:11:08:74:4A:4A
X509v3 Authority Key Identifier:
keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3138362e3138392e3232342e302f32302d3234203d3e203136383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.189.224.0/20
Signature Algorithm: sha256WithRSAEncryption
17:2c:33:43:ff:75:72:80:87:22:53:30:b9:28:b1:c2:16:e5:
ae:44:9d:4f:75:72:aa:e8:66:bd:70:2a:db:dd:fd:8c:e3:99:
03:52:f7:64:3c:1f:87:60:3b:1f:dd:65:5c:07:72:27:ba:7b:
1a:9c:b7:0b:41:f9:da:d5:a2:71:46:7a:e0:ee:19:99:1d:c7:
e0:a5:4a:ab:5b:ab:67:6a:9f:06:63:59:5e:b7:a1:2e:02:6c:
bc:37:cf:a7:58:f8:61:ff:4a:19:95:a2:d0:3e:69:fa:d5:23:
9e:0b:2b:5b:91:94:53:1c:93:1d:79:52:d5:51:98:04:5b:c3:
ee:7c:5c:8f:f0:e3:a6:cb:0f:e4:8d:45:f1:32:cc:e6:d7:a2:
0c:e8:b8:6f:10:b1:53:b2:fc:23:d7:c3:ed:d8:61:1a:e8:67:
cb:61:35:cc:b6:88:6a:d4:66:1b:ae:a2:36:3c:fd:cc:af:d3:
36:c6:60:c9:52:54:1b:9a:3a:f7:83:75:3b:e6:db:c1:00:0a:
fe:7d:91:f3:4a:0a:41:7a:bd:f5:86:8b:94:f1:33:b0:e0:a1:
51:f4:12:4e:e8:cf:19:1e:ca:56:f7:83:a7:06:d5:f9:f4:db:
1f:96:7b:6f:7a:9c:21:3b:d3:d3:68:17:62:38:94:5d:c3:66:
5f:17:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:40:25 2025 by rpki-client