Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131312e302f32342d3234203d3e20323633373932.roa
File: 3133382e3132322e3131312e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier: OM5cq7ZXw28RdNG9kDrxU/yw8/1xn0enKzU2Hd5oSO4=
Subject key identifier: FB:82:8D:C8:FB:89:40:4E:1B:05:D0:2E:15:EE:46:21:E2:AB:19:7C
Certificate issuer: /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial: 213F79C0C0B66D12D208198A57D427CF4D913EC6
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131312e302f32342d3234203d3e20323633373932.roa
Signing time: Tue 18 Mar 2025 13:30:00 +0000
ROA not before: Tue 18 Mar 2025 13:25:00 +0000
ROA not after: Tue 17 Mar 2026 13:30:00 +0000
asID: 263792
IP address blocks: 138.122.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:3f:79:c0:c0:b6:6d:12:d2:08:19:8a:57:d4:27:cf:4d:91:3e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Validity
Not Before: Mar 18 13:25:00 2025 GMT
Not After : Mar 17 13:30:00 2026 GMT
Subject: CN=FB828DC8FB89404E1B05D02E15EE4621E2AB197C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:eb:b1:0e:0c:71:70:42:c3:8a:b0:a7:a6:
5d:64:e9:1d:ce:33:27:91:42:e7:08:f0:53:a9:19:
b3:13:48:ce:05:36:be:73:6f:37:38:e3:81:bf:93:
cb:f3:21:7c:c6:78:5d:ea:7b:1c:fc:19:ec:36:ea:
0f:4a:03:ba:6b:0d:a7:e5:94:56:94:31:b9:ef:97:
2f:4a:30:b1:a5:fb:b4:f3:a4:cf:5b:1e:7a:f6:81:
3c:42:54:31:a6:1e:75:65:78:80:6c:98:8f:d3:76:
86:20:44:70:e2:d5:e8:83:e4:e2:69:03:8f:ee:69:
c3:b0:c3:38:bb:0d:3f:2f:4b:f8:56:e9:25:0d:a6:
14:9f:31:72:e7:8a:92:4e:76:78:ef:d7:d5:ed:79:
98:d2:ff:07:12:f7:08:bf:66:9f:e3:af:40:93:cc:
7e:98:84:9c:54:43:54:94:1a:5a:be:b5:0c:7f:37:
2c:6c:42:84:52:0f:c1:60:19:d3:27:e3:b9:bc:3f:
36:82:5f:9f:40:c8:0b:ca:d3:c7:ef:a4:8b:38:af:
aa:5c:3c:53:55:76:15:ef:0c:ec:e2:da:ee:a3:30:
2a:db:da:db:05:ae:ac:48:7a:fc:2d:6f:23:56:f3:
a5:25:8c:fa:35:ce:9c:d8:a6:8f:af:10:93:87:ad:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:82:8D:C8:FB:89:40:4E:1B:05:D0:2E:15:EE:46:21:E2:AB:19:7C
X509v3 Authority Key Identifier:
keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131312e302f32342d3234203d3e20323633373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.111.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:03:a9:c7:72:46:cf:0d:7c:a2:3e:17:9e:bd:68:41:d5:4c:
42:b4:b2:63:58:ce:10:20:61:24:e0:75:29:8d:e9:c3:1b:0c:
38:6e:05:12:41:26:b0:f5:b7:c7:b5:25:1d:2d:c1:b5:27:fd:
86:6c:0d:84:cc:c3:94:b2:82:e6:9e:47:72:c7:23:37:81:ca:
75:3c:a9:c5:df:e4:04:7a:eb:54:48:d1:1c:da:9b:1f:24:63:
52:7f:4b:9c:0a:d6:0a:00:e7:29:f5:28:56:45:1e:85:21:4e:
42:1d:51:02:af:8f:b7:a3:31:cd:a1:99:05:2a:cb:3f:f6:66:
2e:2e:ba:64:8e:2b:5d:42:ec:6f:a5:62:34:fd:04:4f:5a:07:
54:ca:a8:dc:95:35:e4:8c:0e:df:16:c0:01:81:87:1a:46:e2:
42:f8:c7:9b:89:8d:61:5a:27:1b:0b:07:40:f8:2f:50:ff:74:
58:9b:86:b2:d3:7a:71:3b:e4:2e:77:a7:99:b9:eb:6e:67:76:
e6:da:7c:75:d8:88:6e:5f:ae:72:96:98:4c:8d:0c:0d:14:0e:
0f:26:28:9b:9c:5c:87:8a:48:85:f1:fe:e1:3a:ef:57:1f:ee:
4b:18:b4:c6:34:e0:b9:dd:58:30:f0:b0:4b:54:99:33:0a:4a:
02:54:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:43 2025 by rpki-client