Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e31362e302e302f31352d3234203d3e203233323031.roa
File: 3138362e31362e302e302f31352d3234203d3e203233323031.roa (raw, json)
Hash identifier: Nj+s8c+2V2+5eAQ68RlUOBZ6tIhz+ZUjeqjlq7+z7co=
Subject key identifier: 2D:BF:94:5A:F9:EA:35:0A:B2:8A:FA:2B:6A:E9:36:6F:3A:63:D5:4A
Certificate issuer: /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial: 0E7174720E1D9CFDB3FACD9CB19E9C72ACE8CA6D
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e31362e302e302f31352d3234203d3e203233323031.roa
Signing time: Tue 04 Feb 2025 18:40:27 +0000
ROA not before: Tue 04 Feb 2025 18:35:27 +0000
ROA not after: Tue 03 Feb 2026 18:40:27 +0000
asID: 23201
IP address blocks: 186.16.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:71:74:72:0e:1d:9c:fd:b3:fa:cd:9c:b1:9e:9c:72:ac:e8:ca:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Validity
Not Before: Feb 4 18:35:27 2025 GMT
Not After : Feb 3 18:40:27 2026 GMT
Subject: CN=2DBF945AF9EA350AB28AFA2B6AE9366F3A63D54A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:ad:44:d9:65:66:8b:e6:9e:6a:62:b9:00:
4f:18:ea:bc:82:f9:2d:aa:e3:ee:56:79:00:10:5f:
0c:7f:ab:9f:45:39:41:91:4b:3e:f1:09:6d:74:c4:
1e:44:8c:28:7e:5b:1a:ef:f0:7e:aa:86:65:2c:cc:
90:5b:61:20:41:a2:cd:07:c1:24:13:55:24:13:18:
f0:e8:b9:27:79:ec:f8:51:7f:dc:95:13:4c:f3:36:
0c:47:36:85:9c:bf:db:84:5c:c3:97:44:67:8e:69:
49:40:e6:11:26:ee:04:d6:d1:13:62:a7:91:cc:94:
02:48:33:ff:e0:d4:d7:c8:7d:eb:17:5f:6a:6b:41:
aa:8a:4b:58:7d:e8:57:e9:9f:82:d7:0b:85:20:32:
b6:f5:f9:4f:25:ff:b1:44:da:93:0e:54:6a:20:51:
df:7d:c1:bc:24:49:4d:53:2e:24:0c:3a:93:8d:45:
cc:d3:68:b6:a7:41:5b:05:22:c4:f8:60:42:4a:cc:
10:c2:b6:e7:a5:d7:8e:0d:5f:b7:87:96:f6:21:b2:
eb:00:9b:67:b0:5f:52:4a:08:7b:d1:cc:7b:b8:e9:
90:51:36:aa:55:5c:a3:15:1a:7d:cd:11:e9:8f:e1:
4b:04:d6:34:eb:c6:97:55:93:1d:53:73:eb:cb:64:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BF:94:5A:F9:EA:35:0A:B2:8A:FA:2B:6A:E9:36:6F:3A:63:D5:4A
X509v3 Authority Key Identifier:
keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e31362e302e302f31352d3234203d3e203233323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.16.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3f:0b:e7:2c:1e:d5:9b:e9:82:4e:8b:f6:98:03:f4:f4:fc:40:
c9:f6:ce:89:dd:5f:f5:52:95:9a:b7:cf:9b:b3:68:3f:70:24:
bb:67:30:70:53:8d:9d:57:7b:51:b3:1f:61:ca:3e:17:a7:a5:
b3:10:ea:25:99:71:74:46:3a:ba:cc:c6:69:d4:8f:85:76:8c:
7a:ae:6f:1b:f7:c0:3b:f3:34:9e:9c:96:8c:be:17:ac:54:bd:
a8:87:cb:a7:da:4d:3c:0a:cb:ed:e8:62:76:f3:c9:15:12:ae:
80:e6:d2:84:b9:75:6d:5b:78:b8:b6:1b:0a:13:95:90:4d:b7:
13:7f:c9:7b:eb:05:04:a1:6a:13:dc:0d:f3:41:d9:41:f5:3d:
7c:e4:1e:92:9f:cf:46:1b:cb:c6:48:fd:7c:a7:a8:50:45:22:
ca:26:ee:93:71:17:db:2b:3f:21:ec:5d:1d:fc:99:77:7d:2f:
1e:08:48:ed:86:4a:d6:61:5c:42:23:49:bd:12:94:52:bf:fc:
1a:ee:40:7f:f9:97:52:1e:51:fc:18:6b:20:0d:c9:a4:c0:ba:
74:d2:2f:cb:df:25:27:f4:8b:ab:d7:c0:69:e6:e6:db:0e:76:
24:c4:56:11:fb:df:d2:56:00:06:53:30:9b:26:b9:b5:4b:34:
4b:d8:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:28 2025 by rpki-client