Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/3133382e3131382e3130342e302f32322d3234203d3e20323633373831.roa
File: 3133382e3131382e3130342e302f32322d3234203d3e20323633373831.roa (raw, json)
Hash identifier: s9fFZsqBhNIavigk4OSImXwZU2bo1zBVAjeCNBTHnJc=
Subject key identifier: 20:E7:67:4D:EF:C6:D2:B1:28:BC:7C:EE:76:A0:32:A4:FB:D7:AC:4F
Certificate issuer: /CN=6D2FA94F5131FEBB344C1140590E1E658A49A2D3
Certificate serial: 373359E5FE9BDE6CEF4B22046DB8153EB3B99C36
Authority key identifier: 6D:2F:A9:4F:51:31:FE:BB:34:4C:11:40:59:0E:1E:65:8A:49:A2:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/3133382e3131382e3130342e302f32322d3234203d3e20323633373831.roa
Signing time: Tue 04 Feb 2025 20:07:41 +0000
ROA not before: Tue 04 Feb 2025 20:02:41 +0000
ROA not after: Tue 03 Feb 2026 20:07:41 +0000
asID: 263781
IP address blocks: 138.118.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:33:59:e5:fe:9b:de:6c:ef:4b:22:04:6d:b8:15:3e:b3:b9:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D2FA94F5131FEBB344C1140590E1E658A49A2D3
Validity
Not Before: Feb 4 20:02:41 2025 GMT
Not After : Feb 3 20:07:41 2026 GMT
Subject: CN=20E7674DEFC6D2B128BC7CEE76A032A4FBD7AC4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:ac:90:71:8d:cf:ea:fb:e1:a6:c4:d6:8e:
d2:69:8c:c9:fe:d2:ef:0d:a7:06:88:66:ab:90:be:
07:1f:12:1b:8d:29:b8:c5:34:50:99:15:7f:8f:ba:
b7:a5:4c:4f:9c:1b:1f:c4:42:1e:6e:75:90:03:da:
45:74:f5:0e:84:b3:8c:57:f9:89:7b:28:bf:c1:fe:
f4:48:8c:e9:da:e7:49:fb:9b:cf:9b:d7:34:52:66:
6d:40:30:cb:1c:a3:27:9b:7d:f5:1c:82:90:82:56:
3e:e0:8a:66:df:4b:8f:26:89:e8:70:18:1f:fc:d7:
e6:03:32:22:7a:5d:6b:7c:a5:e2:4d:27:2c:30:21:
33:8c:26:24:cd:aa:a5:cb:e8:4a:ed:b9:97:15:70:
0f:a5:2d:42:9c:7b:73:83:c4:0b:3a:31:ea:d0:b4:
e3:5e:f5:8a:ff:41:a8:73:77:16:eb:9d:be:4a:fb:
11:74:62:68:a0:a1:8b:db:77:fc:56:57:0f:8b:40:
bf:e7:b1:50:ef:85:5d:ef:ed:02:34:72:2e:60:a9:
b1:cb:23:08:5b:6c:93:55:32:33:77:f7:55:ee:32:
d4:27:7b:65:53:17:13:c7:e5:1c:d1:0e:6d:a6:bf:
f7:14:50:8f:45:29:d8:c4:e2:8b:2b:f9:15:97:02:
60:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E7:67:4D:EF:C6:D2:B1:28:BC:7C:EE:76:A0:32:A4:FB:D7:AC:4F
X509v3 Authority Key Identifier:
keyid:6D:2F:A9:4F:51:31:FE:BB:34:4C:11:40:59:0E:1E:65:8A:49:A2:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/3133382e3131382e3130342e302f32322d3234203d3e20323633373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.104.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:81:9d:f9:4c:79:5b:17:29:8a:b7:9c:55:c6:57:c0:fd:a1:
0f:ed:fa:4d:eb:64:41:35:0a:3c:7a:34:2d:de:91:7c:05:b9:
30:44:7b:53:b6:bb:81:2f:4c:6c:11:d7:c1:fe:e1:ce:2b:98:
dc:54:13:01:2c:27:fb:b7:45:c3:f5:76:04:f0:da:65:02:34:
34:e2:51:37:76:19:9a:2c:dc:1d:0a:97:3b:bb:58:5c:bf:9e:
9f:b1:de:b1:38:34:47:f8:b7:33:eb:3c:48:4c:55:a2:da:55:
ca:b7:47:f6:b3:0c:06:60:a8:12:5e:d0:3c:53:3d:44:5c:f5:
f6:6f:33:56:93:34:d2:3d:0c:d7:83:40:52:27:ce:ec:7c:2d:
db:2e:a9:3f:7d:92:9f:3e:e2:7d:5d:6b:64:ca:6d:ef:38:61:
fc:02:81:f9:82:ce:c7:3b:1a:f2:ad:75:0e:9a:05:30:cb:15:
f5:57:08:0c:82:e3:c1:e6:37:48:58:2a:a6:42:ba:c2:d4:a1:
0a:c2:a4:f2:92:12:be:66:70:42:11:e3:45:1a:af:03:e5:b3:
6f:fc:94:55:d7:ad:51:3e:0e:77:40:6d:d4:19:e0:da:33:f1:
96:21:46:c6:e2:c8:d3:0c:85:d7:b6:a3:b2:ec:8b:8e:17:d5:
87:f4:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:00:19 2025 by rpki-client