Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3138362e3138392e3234382e302f32322d3234203d3e203136383134.roa
File: 3138362e3138392e3234382e302f32322d3234203d3e203136383134.roa (raw, json)
Hash identifier: jPLMh3oaKPNdZWfHonU/nZiKxE+aD8EJ1F73kl9UFLg=
Subject key identifier: E8:1C:C5:61:6F:9D:C3:68:DF:E3:74:B8:4A:36:D4:8D:54:C1:89:59
Certificate issuer: /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial: 2313F2F06193C178D871FD915B6A99E83A5DFA1E
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3138362e3138392e3234382e302f32322d3234203d3e203136383134.roa
Signing time: Tue 04 Feb 2025 20:04:12 +0000
ROA not before: Tue 04 Feb 2025 19:59:12 +0000
ROA not after: Tue 03 Feb 2026 20:04:12 +0000
asID: 16814
IP address blocks: 186.189.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:13:f2:f0:61:93:c1:78:d8:71:fd:91:5b:6a:99:e8:3a:5d:fa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Validity
Not Before: Feb 4 19:59:12 2025 GMT
Not After : Feb 3 20:04:12 2026 GMT
Subject: CN=E81CC5616F9DC368DFE374B84A36D48D54C18959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:c3:7b:83:4e:a9:f0:59:d3:27:d3:66:72:
ba:a2:1d:6b:90:9b:fc:75:93:ba:13:44:62:f6:b2:
6c:7c:da:76:fe:d8:56:4b:7d:94:10:45:d2:1c:42:
a8:db:16:83:f0:ae:f1:4f:f4:d9:d7:2c:3f:5f:79:
44:af:f3:f1:e7:1a:2c:f5:c3:50:b5:06:3d:cc:7d:
46:d0:a7:ee:6f:31:e5:1e:02:90:29:e8:2f:a7:48:
f3:67:ab:e3:f8:1f:73:ca:64:ad:2d:99:aa:53:23:
ad:04:fe:e4:e7:c7:d2:b7:ea:4a:a9:8c:06:5c:5e:
10:3f:26:d7:b6:de:eb:8d:6f:5b:93:58:ac:f2:f8:
37:c8:31:7d:63:44:2c:da:c8:a1:41:fe:ee:8b:39:
4b:5c:5a:9b:0c:3f:3b:d7:17:ea:6c:b6:10:60:22:
ab:92:dc:25:76:13:87:6e:7d:c9:0d:43:87:80:81:
fb:b8:51:29:3e:ef:b2:24:99:7f:ef:1f:2f:c1:6a:
93:ea:ea:32:10:16:24:17:96:8e:d6:e4:22:65:bf:
d9:2a:40:c9:83:e2:5f:e9:a0:6a:55:82:d9:fc:41:
63:ec:3b:ca:f3:e5:6a:9c:77:39:3a:2f:82:4f:79:
22:f4:5c:c8:40:ff:5e:8d:28:99:bd:60:9c:9a:70:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:C5:61:6F:9D:C3:68:DF:E3:74:B8:4A:36:D4:8D:54:C1:89:59
X509v3 Authority Key Identifier:
keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3138362e3138392e3234382e302f32322d3234203d3e203136383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.189.248.0/22
Signature Algorithm: sha256WithRSAEncryption
63:c7:96:d0:12:82:66:ed:88:6b:40:40:6d:ee:fe:82:55:01:
6e:f1:da:e3:dd:dc:80:2c:34:fa:39:52:74:a7:8a:ce:a4:57:
f8:f7:f6:a6:a0:66:87:b1:16:86:29:90:c4:f4:c5:9c:0d:66:
e1:c4:46:55:f1:77:fc:86:55:d0:2d:84:08:a0:a7:de:ea:47:
f8:90:9e:d6:24:ae:b5:68:e6:da:21:4d:7b:0e:43:2b:de:5e:
24:50:51:f6:01:20:f1:79:2a:8d:55:0f:7b:45:da:d3:1e:39:
d6:d5:9c:e2:59:25:b8:71:20:51:bf:57:45:bd:ca:bc:83:39:
47:9d:e5:ef:93:df:e2:6e:e0:3d:0c:51:34:d3:c8:86:f3:94:
91:29:e4:be:f7:b7:4b:a5:09:65:a7:18:b3:94:0d:13:0b:73:
6c:31:37:0c:74:15:f0:9a:cb:de:65:59:27:09:d3:31:4d:24:
c5:e3:69:fe:40:38:03:6c:04:ab:67:16:5e:b6:28:bf:96:38:
05:ac:24:36:30:47:80:e7:79:4e:c3:33:53:34:df:67:ca:44:
09:08:e1:76:97:c4:47:78:80:ef:04:ba:e8:52:13:54:bc:95:
59:fa:bb:a6:76:2a:0f:7b:dd:6c:6a:26:0d:1c:6e:7e:68:f6:
df:b5:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:40:24 2025 by rpki-client