Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e37382e302e302f31352d3234203d3e2037343138.roa
File: 3138362e37382e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier: tuh54khUCe2ut/0iDjuw+Rj2VQg2VMom0MnHqw0E//0=
Subject key identifier: 6D:DB:26:27:07:79:26:0F:35:32:9D:72:B6:F6:0C:83:06:4D:17:55
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 09D7693F15128463A2B3210050641A595F674CC2
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e37382e302e302f31352d3234203d3e2037343138.roa
Signing time: Tue 04 Feb 2025 18:29:49 +0000
ROA not before: Tue 04 Feb 2025 18:24:49 +0000
ROA not after: Tue 03 Feb 2026 18:29:49 +0000
asID: 7418
IP address blocks: 186.78.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d7:69:3f:15:12:84:63:a2:b3:21:00:50:64:1a:59:5f:67:4c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Feb 4 18:24:49 2025 GMT
Not After : Feb 3 18:29:49 2026 GMT
Subject: CN=6DDB26270779260F35329D72B6F60C83064D1755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:9f:8a:d8:06:67:89:66:eb:60:40:ef:8c:
61:2f:8f:5e:1f:a3:79:a7:3b:bf:ec:fd:9e:9a:77:
e9:1d:ea:f3:bf:38:0a:31:02:3c:0a:dd:30:f7:39:
2a:81:1e:a5:36:89:7b:1c:fb:7e:88:53:ba:fa:10:
4d:b8:44:73:6a:9f:7e:bf:bc:67:d2:4c:f6:a2:81:
ce:54:70:c9:e5:c8:31:3d:d3:90:5f:76:49:6d:fa:
b7:45:20:5b:fb:14:1b:7f:48:b2:fb:17:42:56:38:
99:9c:e4:34:cc:f6:b3:65:a7:c9:90:9f:e6:91:94:
5e:39:c0:89:d3:1f:5e:01:b1:58:5b:fc:bf:02:55:
d8:77:df:70:db:3b:2b:8c:71:b8:fa:b1:55:04:02:
ad:cd:7b:6f:8c:60:e1:63:84:7a:d0:d7:7f:63:ec:
07:b2:b2:26:dc:29:31:f9:5e:0e:eb:33:fa:a2:79:
02:9d:40:ef:5a:45:f4:c1:88:a7:80:b8:5e:ac:f6:
ef:52:0a:c5:a2:e0:44:49:38:fc:57:4f:f6:aa:74:
04:7b:41:dc:a3:0f:c2:cb:23:51:56:4f:03:3a:ce:
ef:31:fd:5d:2c:93:34:14:78:a6:a1:c1:84:46:90:
7d:bc:79:d1:76:23:4c:f8:49:4b:cf:7c:c1:a6:6d:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DB:26:27:07:79:26:0F:35:32:9D:72:B6:F6:0C:83:06:4D:17:55
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e37382e302e302f31352d3234203d3e2037343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.78.0.0/15
Signature Algorithm: sha256WithRSAEncryption
09:17:0d:ff:42:a3:e9:e9:5b:bd:45:96:58:d0:74:93:bc:e8:
7d:90:2c:6b:4d:25:50:27:de:45:22:41:3f:a3:c3:09:3e:59:
9c:9a:0e:48:f8:d2:9c:55:1c:e1:49:6f:c3:95:c3:ea:ed:2b:
d4:7d:a3:52:4a:3f:dc:33:44:f3:2a:ee:e3:36:28:52:04:36:
c7:08:9c:d1:23:61:d4:e8:b5:e1:ee:65:99:ff:ec:28:65:03:
d0:70:66:08:b5:a5:3f:54:40:bf:ec:c8:cd:91:68:5b:3f:24:
9e:11:a5:a9:1c:c4:57:fe:0c:46:2b:1e:8b:e3:ed:a2:a5:96:
e0:c5:af:85:9f:fb:e1:8b:fe:f7:e7:17:83:aa:3b:3d:0d:2f:
47:74:07:8d:f3:19:d1:7b:d4:cd:da:f8:80:fa:8a:a5:aa:64:
91:55:a2:a4:0e:2e:3a:2a:a5:cc:2b:62:c1:0c:75:91:dd:e7:
ba:aa:4d:42:87:5e:39:b4:ef:9b:0c:52:65:5a:32:52:e2:28:
52:46:92:29:9a:7c:ee:15:47:ee:d5:92:94:ea:93:e1:82:7f:
e2:3a:9a:65:a3:25:fe:8c:fb:e8:08:d2:94:a8:19:82:66:2c:
ee:24:fc:1c:f1:a4:88:4b:34:f1:47:bd:da:76:d6:58:2a:7c:
6f:42:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:04 2025 by rpki-client