Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134372e302f32342d3234203d3e20323635353135.roa
File: 3133382e33362e3134372e302f32342d3234203d3e20323635353135.roa (raw, json)
Hash identifier: fmvwhJoSPRZs5HuL4TboIcJZhdlGg4dygScNi/e1Wyo=
Subject key identifier: 3F:BA:68:F8:2C:8F:AE:A8:DD:ED:9C:B6:05:4C:2F:3E:74:EA:AD:FB
Certificate issuer: /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial: 062D02EB46B70485C6E1F9A5E24D2F730962A5D4
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134372e302f32342d3234203d3e20323635353135.roa
Signing time: Tue 04 Feb 2025 18:19:46 +0000
ROA not before: Tue 04 Feb 2025 18:14:46 +0000
ROA not after: Tue 03 Feb 2026 18:19:46 +0000
asID: 265515
IP address blocks: 138.36.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:2d:02:eb:46:b7:04:85:c6:e1:f9:a5:e2:4d:2f:73:09:62:a5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
Validity
Not Before: Feb 4 18:14:46 2025 GMT
Not After : Feb 3 18:19:46 2026 GMT
Subject: CN=3FBA68F82C8FAEA8DDED9CB6054C2F3E74EAADFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:21:a2:71:70:95:3c:e8:30:8d:63:69:a6:
57:de:15:f7:5f:9e:be:1c:39:8a:3a:a0:4a:2c:eb:
ef:cb:4e:84:58:b5:22:ad:78:39:47:cf:9b:32:f1:
a5:05:a4:89:0c:4b:e0:e4:0a:1d:e9:f2:1e:05:75:
13:94:e1:6b:a2:f0:54:56:fa:c3:9b:24:71:cf:b2:
f8:f7:a2:7d:a0:9c:8b:e3:27:b7:d8:5a:4b:ad:e0:
cb:26:ed:74:f8:7c:92:c2:46:cb:07:89:e7:89:fd:
5b:93:d2:20:27:9b:29:8b:6c:4a:d5:63:5d:9b:e9:
31:d4:1f:5c:02:03:54:04:90:b8:f2:86:12:b6:60:
f4:e3:f0:79:72:ae:9c:79:38:0e:90:d8:d2:91:60:
0f:e5:95:c7:92:9e:d1:85:d0:fc:45:61:ec:dd:30:
10:9e:f8:2d:d2:52:bc:5f:65:5a:f7:26:b2:cf:e5:
1d:97:eb:49:d9:cb:58:10:c2:63:4d:95:49:88:ee:
73:fc:89:44:c1:b9:fa:25:a0:69:49:80:77:65:55:
67:d6:2f:3b:9a:7e:96:14:29:45:30:d8:bb:55:7f:
c5:90:51:2b:01:d3:da:66:4e:86:70:85:fb:d8:5f:
ae:4f:50:30:e8:d1:b3:67:a9:85:1c:ca:3a:60:4b:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BA:68:F8:2C:8F:AE:A8:DD:ED:9C:B6:05:4C:2F:3E:74:EA:AD:FB
X509v3 Authority Key Identifier:
keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134372e302f32342d3234203d3e20323635353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:78:7e:82:be:19:8b:5b:cf:a6:1e:57:c1:b2:44:bd:17:06:
76:95:5e:bb:d3:31:e6:3c:bb:8e:2d:41:a8:ee:f2:57:e4:22:
b2:d3:a9:a1:4b:5d:d8:aa:38:bd:2f:56:b3:bd:ce:c4:f0:38:
4f:b8:6d:a0:55:a7:5c:e6:95:4c:c1:c8:76:ff:bb:6f:a0:e9:
3d:a8:ec:d0:06:4a:3c:be:a9:ab:ee:ba:10:0e:50:a4:3e:38:
b8:c3:dd:b2:c3:5a:7a:54:38:ec:75:fd:81:48:f3:98:16:bd:
24:fd:9c:c8:95:45:85:48:be:10:a2:d9:c1:67:cf:e6:66:df:
a8:85:20:72:cc:43:e4:cc:e8:7f:d0:ac:14:00:7d:af:52:a0:
fa:3d:fa:e3:98:f7:bc:03:7b:ca:ad:1a:67:e2:1f:13:27:c1:
9a:16:66:13:4f:ab:25:4b:5d:2b:df:9c:49:00:0a:23:a0:d6:
7a:7f:16:49:b8:c8:d7:80:67:b5:64:fe:83:89:0a:37:5e:88:
ca:af:31:f6:bf:4d:32:e8:cb:96:8c:c1:1f:20:f6:76:fa:0b:
b5:72:b5:d3:19:11:de:e6:43:02:00:ec:5b:5d:d2:e6:00:77:
87:d6:6a:29:f6:8e:92:ad:e2:83:75:9b:03:11:fd:4b:70:88:
ec:5e:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:23:05 2025 by rpki-client