Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e382e302f32322d3232203d3e2036333036.roa
File: 3138362e32342e382e302f32322d3232203d3e2036333036.roa (raw, json)
Hash identifier: H2odat1dkIue5cIIo6QTlcK0wfEA+jqSrBTAX1e3pdU=
Subject key identifier: EF:E9:2D:55:FE:8F:9C:A0:57:62:EA:D3:98:B5:E5:60:D2:3A:C0:E2
Certificate issuer: /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial: 350E4EDBBCCD26E173821EE136ACD7AC2AF744F8
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e382e302f32322d3232203d3e2036333036.roa
Signing time: Tue 04 Feb 2025 18:33:00 +0000
ROA not before: Tue 04 Feb 2025 18:28:00 +0000
ROA not after: Tue 03 Feb 2026 18:33:00 +0000
asID: 6306
IP address blocks: 186.24.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0e:4e:db:bc:cd:26:e1:73:82:1e:e1:36:ac:d7:ac:2a:f7:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Validity
Not Before: Feb 4 18:28:00 2025 GMT
Not After : Feb 3 18:33:00 2026 GMT
Subject: CN=EFE92D55FE8F9CA05762EAD398B5E560D23AC0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:aa:5f:1a:ae:cb:5e:20:45:41:39:19:b9:
c2:93:6e:d5:cf:38:66:4f:f3:f8:07:e8:92:ad:58:
4e:88:b1:90:fd:d2:42:0a:6c:09:4b:3f:0e:47:ff:
a1:1a:96:7e:cf:32:c3:b5:c6:4d:35:45:ef:26:6b:
ef:5b:3e:06:14:dd:8a:2b:32:66:2f:a8:b0:6e:b2:
3f:93:9c:93:f9:19:b1:b1:30:4b:9a:a2:15:1a:ef:
c5:e2:31:ed:d0:f6:58:98:2b:b8:a2:43:44:31:94:
2e:7d:37:b1:c7:ce:b1:fb:c5:66:65:91:02:17:ce:
9f:8f:b7:76:48:06:39:94:d8:4f:bd:01:ef:f5:fe:
cd:f9:0b:17:65:68:04:cf:d8:ea:2f:ec:8e:e2:b5:
34:1c:2a:7f:c4:79:3a:88:93:d3:5e:43:1f:30:37:
f4:7c:cb:02:18:77:a9:22:74:d5:6a:e2:e2:d6:a8:
4e:c7:e3:74:fa:f8:ee:eb:89:8b:df:a4:fc:38:95:
55:4d:ce:82:dc:f0:58:99:c0:51:72:12:6f:6f:1d:
f5:3a:d8:8e:2b:e7:29:3e:02:15:2c:4e:78:21:44:
81:9c:fe:26:93:a2:7b:e9:a0:37:02:98:a6:89:2b:
e9:f1:00:8c:22:99:da:8c:24:54:c5:f0:2b:07:ea:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E9:2D:55:FE:8F:9C:A0:57:62:EA:D3:98:B5:E5:60:D2:3A:C0:E2
X509v3 Authority Key Identifier:
keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e382e302f32322d3232203d3e2036333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.24.8.0/22
Signature Algorithm: sha256WithRSAEncryption
73:92:e6:91:f3:6f:5c:6b:a3:20:32:25:8e:78:2f:ee:08:46:
1c:f9:01:cd:59:c9:12:67:cc:c4:99:0b:31:3f:98:a6:91:8c:
52:c8:f5:03:8b:40:68:8e:63:fe:40:ca:a7:88:b1:2a:f9:78:
8a:a7:ea:78:03:fb:19:91:44:3a:bf:79:63:d7:e0:b6:88:05:
ef:a0:d8:b4:b5:e7:1f:54:7a:7f:f8:0d:ec:7b:b5:1f:3a:8c:
ed:ce:b8:81:e5:3a:05:6a:aa:89:1c:fb:f7:13:23:b7:31:a8:
ad:bf:e6:6a:3f:dd:b0:61:85:5c:3c:b4:2a:b1:b2:1a:9c:01:
85:83:8b:ae:5d:73:eb:e9:ee:0a:68:a9:73:86:8c:4b:39:79:
df:54:e7:8c:7d:80:d9:3c:ec:19:09:39:e0:55:7a:3b:da:46:
d4:fa:89:35:7a:59:6e:98:2d:ab:1a:bb:80:90:44:c7:3f:e5:
22:40:df:7b:3c:21:4e:53:85:a1:e7:a2:bb:91:b5:80:13:78:
14:4b:ca:ae:88:fc:3b:f7:fa:56:24:f3:9b:50:5f:36:69:8c:
fb:32:af:0d:8c:fa:30:e9:aa:27:17:a7:a3:7b:0a:62:67:66:
fc:fc:27:f5:64:24:5a:e2:be:bd:69:71:64:47:d5:ad:f0:26:
f3:31:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:08 2025 by rpki-client