Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136342e302e302f31372d3234203d3e203138373334.roa
File: 3138372e3136342e302e302f31372d3234203d3e203138373334.roa (raw, json)
Hash identifier: HeUQuYhX1CMdSZv+dUyz3f1aDspjuJy43l0WzKQlu1w=
Subject key identifier: 65:04:DF:AF:76:E5:11:F6:73:FE:C6:D7:51:42:A5:F7:A7:9C:D3:35
Certificate issuer: /CN=9F078022C5EAA80D6F3FB43FCDC73FADC9791878
Certificate serial: 1427E1FB8D71B160121020F77005693407469651
Authority key identifier: 9F:07:80:22:C5:EA:A8:0D:6F:3F:B4:3F:CD:C7:3F:AD:C9:79:18:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136342e302e302f31372d3234203d3e203138373334.roa
Signing time: Mon 25 Nov 2024 18:30:00 +0000
ROA not before: Mon 25 Nov 2024 18:25:00 +0000
ROA not after: Mon 24 Nov 2025 18:30:00 +0000
asID: 18734
IP address blocks: 187.164.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:27:e1:fb:8d:71:b1:60:12:10:20:f7:70:05:69:34:07:46:96:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F078022C5EAA80D6F3FB43FCDC73FADC9791878
Validity
Not Before: Nov 25 18:25:00 2024 GMT
Not After : Nov 24 18:30:00 2025 GMT
Subject: CN=6504DFAF76E511F673FEC6D75142A5F7A79CD335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:75:15:d2:12:f5:9c:c0:8a:39:e0:ec:26:
5c:f6:e2:0a:4a:3d:20:26:c3:4e:7f:77:df:f5:da:
66:ef:c7:96:50:68:25:04:9a:e8:5b:7d:3a:8a:e9:
95:23:c0:ea:a5:fc:3a:a2:65:ab:ca:57:9e:e9:de:
24:79:07:b9:37:b1:5d:84:1d:1b:36:e8:7c:4a:a0:
13:c8:1b:13:e6:40:f5:22:d2:ea:88:ff:74:c6:2c:
56:57:a7:3c:e6:89:c3:33:da:65:87:8e:89:ca:c0:
d1:d8:91:3d:3f:68:68:a3:39:11:6e:3c:00:72:82:
c6:8c:68:f9:c3:2f:b4:2d:2c:1f:8e:6f:50:10:4f:
0a:0e:c3:1b:08:79:c4:68:6b:f4:e9:7f:7d:8f:5c:
6d:7e:1a:f8:dc:a1:4a:2d:86:0c:82:bf:24:39:7c:
d1:cb:c7:4e:00:ec:8a:cf:bb:7a:8c:78:8d:05:9e:
d9:20:de:cb:6b:f7:eb:e1:12:dc:c0:da:60:76:11:
4e:f0:36:1e:81:45:f1:e2:2e:13:b9:8a:6c:57:57:
16:41:d8:d2:33:c8:91:bb:e1:7f:7f:8e:57:30:f5:
1d:04:66:c4:59:16:37:e0:10:c9:7c:7d:6c:0b:9b:
1c:83:ac:ed:b6:d2:87:4a:90:07:51:d2:fb:e9:e9:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:04:DF:AF:76:E5:11:F6:73:FE:C6:D7:51:42:A5:F7:A7:9C:D3:35
X509v3 Authority Key Identifier:
keyid:9F:07:80:22:C5:EA:A8:0D:6F:3F:B4:3F:CD:C7:3F:AD:C9:79:18:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F078022C5EAA80D6F3FB43FCDC73FADC9791878.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3136342e302e302f31372d3234203d3e203138373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.164.0.0/17
Signature Algorithm: sha256WithRSAEncryption
32:ac:6b:9c:f1:5b:62:87:06:32:e6:20:44:0c:db:b0:29:14:
aa:a8:d3:46:b6:ae:32:db:1c:f7:70:b6:96:ac:06:4e:2b:22:
9e:8e:e1:1a:f0:17:e9:4b:32:3a:b4:34:17:69:56:8b:4a:20:
57:87:9c:14:9e:65:98:4d:eb:50:05:91:e7:d0:2b:8d:a8:d8:
cb:2b:cf:ed:20:d8:ec:dc:99:bb:a4:b7:94:fe:d1:c1:c2:3f:
a9:ad:5d:be:e7:62:00:b9:d8:07:f5:50:11:73:50:20:59:30:
57:e7:0c:25:8b:23:d2:0e:12:cd:f8:c4:95:70:dd:c3:f9:c8:
aa:a8:0c:a1:b9:ce:e5:4e:b3:35:d0:9a:ec:1f:6c:1c:a8:a1:
a5:e3:a0:8f:63:17:4d:62:77:14:4e:75:47:47:85:61:ef:77:
2c:9d:32:87:25:9d:9d:b1:6e:1a:cc:29:8c:52:9b:5d:51:35:
89:32:1e:95:c7:e8:a3:e9:ee:1c:f7:97:d0:05:7d:6c:59:d7:
0c:7a:2a:9f:b6:13:d5:e9:22:f7:bc:79:58:6e:fa:a9:ad:1c:
e6:e5:bf:00:34:f8:eb:76:48:a0:a9:f8:c4:d6:7d:e5:a9:17:
00:ed:86:fa:b2:26:44:df:7d:7a:e3:68:ae:f6:d7:c9:a1:cd:
86:0b:38:0c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUFCfh+41xsWASECD3cAVpNAdGllEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwNzgwMjJDNUVBQTgwRDZGM0ZCNDNGQ0RDNzNGQURD
OTc5MTg3ODAeFw0yNDExMjUxODI1MDBaFw0yNTExMjQxODMwMDBaMDMxMTAvBgNV
BAMTKDY1MDRERkFGNzZFNTExRjY3M0ZFQzZENzUxNDJBNUY3QTc5Q0QzMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rnUV0hL1nMCKOeDsJlz24gpK
PSAmw05/d9/12mbvx5ZQaCUEmuhbfTqK6ZUjwOql/DqiZavKV57p3iR5B7k3sV2E
HRs26HxKoBPIGxPmQPUi0uqI/3TGLFZXpzzmicMz2mWHjonKwNHYkT0/aGijORFu
PABygsaMaPnDL7QtLB+Ob1AQTwoOwxsIecRoa/Tpf32PXG1+GvjcoUothgyCvyQ5
fNHLx04A7IrPu3qMeI0Fntkg3str9+vhEtzA2mB2EU7wNh6BRfHiLhO5imxXVxZB
2NIzyJG74X9/jlcw9R0EZsRZFjfgEMl8fWwLmxyDrO220odKkAdR0vvp6auZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUZQTfr3blEfZz/sbXUUKl96ec0zUwHwYDVR0j
BBgwFoAUnweAIsXqqA1vP7Q/zcc/rcl5GHgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENEI2RjBGOURCRTMzRkRDMEQxMEYyNjIzNDM2Qzk4QkQz
REQzMzlFMTc0RjM5MzQwNDhEQzA4Q0RFNkVBNjQ2LzAvOUYwNzgwMjJDNUVBQTgw
RDZGM0ZCNDNGQ0RDNzNGQURDOTc5MTg3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA3ODAyMkM1RUFBODBENkYz
RkI0M0ZDREM3M0ZBREM5NzkxODc4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDRCNkYwRjlEQkUzM0ZEQzBEMTBGMjYyMzQzNkM5OEJEM0REMzM5RTE3
NEYzOTM0MDQ4REMwOENERTZFQTY0Ni8wLzMxMzgzNzJlMzEzNjM0MmUzMDJlMzAy
ZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzgzNzMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe7pAAwDQYJ
KoZIhvcNAQELBQADggEBADKsa5zxW2KHBjLmIEQM27ApFKqo00a2rjLbHPdwtpas
Bk4rIp6O4RrwF+lLMjq0NBdpVotKIFeHnBSeZZhN61AFkefQK42o2Msrz+0g2Ozc
mbukt5T+0cHCP6mtXb7nYgC52Af1UBFzUCBZMFfnDCWLI9IOEs34xJVw3cP5yKqo
DKG5zuVOszXQmuwfbByooaXjoI9jF01idxROdUdHhWHvdyydMoclnZ2xbhrMKYxS
m11RNYkyHpXH6KPp7hz3l9AFfWxZ1wx6Kp+2E9XpIve8eVhu+qmtHOblvwA0+Ot2
SKCp+MTWfeWpFwDthvqyJkTffXrjaK7218mhzYYLOAw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:04 2025 by rpki-client