Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa
File: 3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier: 8DSvH0bx8+mrRuK0l0Xa7OZQNmjEdgLFHgRTRoU/+kI=
Subject key identifier: 49:51:3C:ED:02:76:6C:5A:55:C7:47:E9:78:81:3F:8A:A9:E0:E4:95
Certificate issuer: /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial: 2AA831DBB468C3307AAF9890FAC19B9F3A769B42
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa
Signing time: Tue 04 Feb 2025 18:47:38 +0000
ROA not before: Tue 04 Feb 2025 18:42:38 +0000
ROA not after: Tue 03 Feb 2026 18:47:38 +0000
asID: 61512
IP address blocks: 143.255.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a8:31:db:b4:68:c3:30:7a:af:98:90:fa:c1:9b:9f:3a:76:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Validity
Not Before: Feb 4 18:42:38 2025 GMT
Not After : Feb 3 18:47:38 2026 GMT
Subject: CN=49513CED02766C5A55C747E978813F8AA9E0E495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:68:1a:8d:56:c6:57:0d:5c:80:97:68:fa:
5d:95:01:cb:79:4e:07:8e:52:62:6e:ba:37:d8:90:
24:3a:e3:8b:8b:59:aa:cd:00:23:82:46:79:4a:34:
e5:6f:35:27:65:ea:b1:9a:f6:60:de:5b:a1:05:82:
f1:c5:74:8e:78:2e:55:dc:22:6f:b8:e4:5d:33:46:
09:64:08:5a:6e:9d:da:e6:fd:65:96:91:31:d1:ca:
79:56:57:06:3c:ad:e0:26:5a:53:5c:d4:61:14:c4:
a7:ac:9e:5f:d5:0a:20:ee:7f:4f:10:3a:f3:34:26:
21:f0:fd:71:1f:57:7c:93:80:36:bf:e5:8c:75:35:
c5:9f:30:af:03:31:08:7a:fd:1d:55:89:fa:35:3f:
0c:56:4c:4b:a8:49:eb:22:37:5b:6e:e3:02:78:20:
70:f8:6d:07:af:df:f4:de:f6:f3:2d:13:e7:88:a2:
29:9f:13:44:1d:84:35:a8:02:0f:b2:54:f5:fb:62:
33:0a:dd:21:f5:cf:7d:88:86:17:ab:e3:0b:18:2f:
e1:db:29:fc:2b:51:a5:b9:aa:83:13:85:97:b2:32:
a6:7f:04:d7:da:86:14:d2:33:89:5b:4a:78:70:7a:
58:f8:6b:8b:bb:10:83:03:01:f5:7c:31:56:89:3b:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:3C:ED:02:76:6C:5A:55:C7:47:E9:78:81:3F:8A:A9:E0:E4:95
X509v3 Authority Key Identifier:
keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:06:7e:26:3a:90:d4:45:17:45:3e:41:26:d5:49:7a:7b:b1:
ea:8b:9a:d5:27:47:46:c2:94:62:91:c4:82:ec:6f:ce:92:55:
3f:e7:79:6e:e7:30:60:76:b8:ec:9e:0c:c8:a5:dd:2f:57:ef:
0d:9b:0e:a3:3d:e2:0b:e3:97:d3:82:b4:5d:84:d0:91:16:2a:
67:1f:95:d2:4b:34:ff:e5:7f:1b:d6:f9:20:25:2c:df:da:c3:
37:e7:24:eb:e5:d7:ce:77:a6:73:c6:b4:2a:5b:a3:91:5f:af:
4e:28:c1:24:ba:1e:14:03:83:81:46:af:90:4b:36:85:33:69:
13:7c:22:33:ca:a0:c2:1b:32:8d:78:53:87:50:c5:50:84:c4:
e6:71:22:6f:d0:0e:bf:1f:6b:0d:35:5c:a7:c6:d9:ea:76:e7:
68:18:4f:cc:d9:02:8a:37:70:3f:b4:58:5d:2b:f2:f5:f1:2d:
5a:42:46:87:5e:03:5f:3e:d4:7b:be:63:7c:f5:1f:c9:01:e1:
d6:9c:66:3e:74:9c:3e:81:e1:b2:3b:88:1b:42:21:ed:6c:08:
63:55:d0:f9:51:68:ad:9d:5e:6a:c0:43:92:bb:4a:6d:6d:61:
45:41:06:0b:d4:45:7b:15:c1:43:cb:41:34:12:6e:f9:ea:bc:
42:2b:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:30 2025 by rpki-client