Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/3138362e3230392e3230382e302f32322d3234203d3e20323731373738.roa
File: 3138362e3230392e3230382e302f32322d3234203d3e20323731373738.roa (raw, json)
Hash identifier: gRVC82WsUAZ47SkUdG2bsW+hoWkVBJ48MOXplS++lJQ=
Subject key identifier: 45:A9:70:BD:33:B1:66:A0:A6:C8:CF:EE:DA:29:A6:7E:31:41:67:BF
Certificate issuer: /CN=A7A60F15842EB5894656A90BB48FA1FF829B4CC7
Certificate serial: 182F40AB7091F11484EDED8304C56F297FAF766F
Authority key identifier: A7:A6:0F:15:84:2E:B5:89:46:56:A9:0B:B4:8F:A1:FF:82:9B:4C:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/3138362e3230392e3230382e302f32322d3234203d3e20323731373738.roa
Signing time: Tue 04 Feb 2025 18:40:47 +0000
ROA not before: Tue 04 Feb 2025 18:35:47 +0000
ROA not after: Tue 03 Feb 2026 18:40:47 +0000
asID: 271778
IP address blocks: 186.209.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:2f:40:ab:70:91:f1:14:84:ed:ed:83:04:c5:6f:29:7f:af:76:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7A60F15842EB5894656A90BB48FA1FF829B4CC7
Validity
Not Before: Feb 4 18:35:47 2025 GMT
Not After : Feb 3 18:40:47 2026 GMT
Subject: CN=45A970BD33B166A0A6C8CFEEDA29A67E314167BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:14:c6:f3:ae:3f:cb:a2:91:8d:9d:ca:cd:
a5:0e:09:68:5e:e3:0c:38:de:bb:b1:46:1e:45:16:
aa:1a:9c:4e:35:5b:1a:6c:aa:9a:d8:a4:aa:1b:8b:
35:2d:db:3a:2e:e5:dd:89:1c:26:75:35:17:84:e5:
c2:c6:04:49:91:71:d5:13:b0:6f:e3:30:98:a8:50:
e1:d4:a3:fb:82:08:f0:b7:0e:1b:c5:85:19:d7:d4:
7a:fa:03:c6:98:75:c4:f3:72:45:c2:d8:a3:da:a5:
22:ff:a9:00:a7:a1:04:c7:3b:f4:f1:7f:37:99:ae:
15:6b:8b:1c:f2:3a:d2:e5:fb:4c:d0:46:f2:f7:ed:
b1:ed:1e:cc:74:a4:d9:a8:e6:15:c1:16:71:25:02:
76:5b:55:14:a6:ac:33:08:8c:89:8b:84:cd:29:37:
f3:4f:fc:fe:6d:05:8e:74:c3:8c:b8:ee:81:18:31:
12:ad:a1:7a:6d:88:41:ea:3b:57:69:9a:73:a8:f9:
b2:b0:61:84:50:3f:ae:c5:46:ee:e4:e2:65:0c:6b:
65:f1:d0:05:fd:30:e2:0a:c9:d2:f0:60:f0:78:77:
ca:af:2f:88:99:91:09:c8:f9:e0:07:a2:4f:84:ad:
65:52:d9:34:d4:2e:85:9e:66:fd:4e:65:e8:e2:68:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A9:70:BD:33:B1:66:A0:A6:C8:CF:EE:DA:29:A6:7E:31:41:67:BF
X509v3 Authority Key Identifier:
keyid:A7:A6:0F:15:84:2E:B5:89:46:56:A9:0B:B4:8F:A1:FF:82:9B:4C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/3138362e3230392e3230382e302f32322d3234203d3e20323731373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:f9:6b:bd:23:72:d8:7a:3c:fa:c5:6f:83:77:89:05:ca:ba:
59:81:bc:33:c1:47:c4:80:f1:37:66:76:98:ff:06:e2:82:cf:
8a:59:d7:65:ae:59:cf:c6:cb:5c:3b:44:a1:9a:25:d2:cd:b5:
2e:8d:86:c6:7a:2e:0a:9e:6b:7e:cc:e4:22:1e:be:21:a2:16:
e4:82:06:6b:5e:2b:68:ed:53:57:b8:be:5f:8d:3e:43:58:57:
a9:bd:a9:79:8a:7a:f5:10:42:f5:a8:b3:72:24:f5:e9:ae:8f:
8d:36:86:f7:e0:ef:47:a4:4e:99:89:0a:e1:51:96:c8:5e:de:
93:c1:9e:a3:07:44:5d:81:35:94:63:8e:f8:42:1e:b3:f8:cd:
13:92:3b:32:a5:0c:24:45:60:34:c4:c4:5f:2b:d5:1a:62:61:
1a:2c:bb:dc:eb:ff:13:9a:1d:e2:1d:a1:f7:28:25:0e:4e:f5:
68:97:93:eb:46:ba:3f:c9:83:fd:ec:46:5a:c1:b4:4d:a4:2c:
75:1e:ad:04:d3:c8:77:25:00:8d:6b:d3:55:50:9c:94:62:b5:
da:09:3e:c3:99:2c:55:b7:ad:ac:48:f5:d9:79:be:dd:13:3f:
cc:63:01:1f:61:43:0d:a2:71:76:1f:2f:ad:f8:0e:a5:d9:fa:
2e:b0:a5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:36 2025 by rpki-client