Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e3234382e302f32342d3234203d3e203237393836.roa
File: 3138362e36372e3234382e302f32342d3234203d3e203237393836.roa (raw, json)
Hash identifier: Z3oqWJb+3tzGqWZzzZnRP0inqTHN+DbPmJTIjsmn0sc=
Subject key identifier: 36:88:E4:DF:C9:AC:65:D7:E2:4C:DF:9A:D4:F1:97:DA:AC:64:A2:A4
Certificate issuer: /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial: 752B9053F16AD265A3852943F8DC167BABA5DDE2
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e3234382e302f32342d3234203d3e203237393836.roa
Signing time: Tue 04 Feb 2025 19:56:32 +0000
ROA not before: Tue 04 Feb 2025 19:51:32 +0000
ROA not after: Tue 03 Feb 2026 19:56:32 +0000
asID: 27986
IP address blocks: 186.67.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:2b:90:53:f1:6a:d2:65:a3:85:29:43:f8:dc:16:7b:ab:a5:dd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Validity
Not Before: Feb 4 19:51:32 2025 GMT
Not After : Feb 3 19:56:32 2026 GMT
Subject: CN=3688E4DFC9AC65D7E24CDF9AD4F197DAAC64A2A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:c8:7c:38:e7:b7:16:eb:b6:b0:d5:40:73:
eb:2f:22:96:41:45:a4:4f:7a:e7:5e:da:a9:ea:85:
9e:38:0d:43:11:8c:00:3a:13:73:f4:9f:90:b8:a2:
48:f0:82:d8:b8:c7:da:0f:9a:6f:ee:83:b9:69:60:
db:0d:69:29:1e:de:cd:17:e0:34:ff:35:96:55:ef:
94:a5:0e:77:12:11:b6:96:8a:e8:68:6c:cd:19:7d:
2e:71:f0:73:c7:7c:2c:83:23:ee:2c:6f:ac:3c:17:
85:d3:d5:8a:5b:84:1e:8e:99:ca:ab:6d:61:f8:06:
90:5d:32:5b:25:55:27:73:f6:0b:41:16:3a:c6:9d:
97:85:e6:7a:93:1e:78:da:fa:73:86:6e:da:0c:dc:
eb:98:e7:9d:7d:3a:18:4b:bf:9f:ef:65:b4:9c:78:
ad:30:4d:76:7f:cd:4a:06:66:f7:03:5f:2d:6b:dd:
2a:74:16:f9:11:45:55:7b:90:0f:6c:3b:2d:be:12:
77:a6:1f:d7:d8:27:75:86:50:a9:e9:2a:cc:e6:2e:
aa:a4:5c:36:30:dc:75:89:d9:b9:51:e4:cb:d6:87:
93:00:55:27:66:8d:0f:f6:ad:23:34:e4:a4:bd:03:
91:90:78:92:ac:3e:86:0f:37:3a:c1:4b:ef:13:2a:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:88:E4:DF:C9:AC:65:D7:E2:4C:DF:9A:D4:F1:97:DA:AC:64:A2:A4
X509v3 Authority Key Identifier:
keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e3234382e302f32342d3234203d3e203237393836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.67.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b9:8f:d9:7a:08:59:02:ad:a7:27:b6:48:0e:df:88:1e:68:
59:a0:18:fe:a0:fb:6c:1f:ae:ae:80:bd:8d:4f:cf:f9:e8:94:
84:fe:d3:d5:0d:57:67:9f:d9:67:26:36:f7:4d:21:fe:e7:d4:
08:70:8c:f3:f1:65:d1:c1:2c:9a:df:fe:c3:f1:22:bd:2c:d7:
a4:a8:a2:a8:58:34:99:5d:6c:58:4a:9f:34:1a:70:a1:34:9c:
e5:84:64:1e:cd:0e:25:77:9c:a0:96:55:59:45:bb:aa:4d:14:
e7:bc:39:39:ae:ba:75:31:22:6d:b2:8f:35:23:97:d4:55:88:
fe:0b:dc:c8:c0:37:54:12:dd:b0:a1:00:0a:a0:12:84:e8:a9:
d7:a6:c0:4b:f4:73:8d:f4:bf:97:7e:61:94:37:71:e1:ca:21:
e0:5d:4b:b3:f7:a3:96:a9:b4:3d:13:df:aa:e4:42:43:fb:f9:
dc:4f:4b:2a:3f:47:2f:1d:89:1b:4a:66:ea:32:0b:24:e0:e0:
2b:71:89:58:7f:41:20:c3:91:26:ed:b9:73:32:e5:99:35:12:
bf:e7:2d:64:01:23:33:dd:4f:58:3c:0f:23:4c:36:14:73:36:
50:52:17:f2:79:4d:75:bc:e3:f6:be:76:29:48:d8:a1:1d:fc:
56:15:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:41 2025 by rpki-client