Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138362e36342e3132342e302f32322d3232203d3e203332303334.roa
File: 3138362e36342e3132342e302f32322d3232203d3e203332303334.roa (raw, json)
Hash identifier: oYEzWeF5YGsRiKoMxJOuiv8L53x4uOIwi8f4J7g8zWc=
Subject key identifier: 95:A2:E8:D8:A9:1E:71:C3:5E:62:03:D5:52:B7:EE:55:95:6F:59:4A
Certificate issuer: /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial: 04C8CFE2D8451D3248BAEA612F8DAA27E8C034CD
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138362e36342e3132342e302f32322d3232203d3e203332303334.roa
Signing time: Tue 04 Feb 2025 18:19:46 +0000
ROA not before: Tue 04 Feb 2025 18:14:46 +0000
ROA not after: Tue 03 Feb 2026 18:19:46 +0000
asID: 32034
IP address blocks: 186.64.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c8:cf:e2:d8:45:1d:32:48:ba:ea:61:2f:8d:aa:27:e8:c0:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
Validity
Not Before: Feb 4 18:14:46 2025 GMT
Not After : Feb 3 18:19:46 2026 GMT
Subject: CN=95A2E8D8A91E71C35E6203D552B7EE55956F594A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:10:8b:d5:fd:a7:ee:c3:05:c3:43:7a:8c:
48:40:33:06:46:42:62:a9:e6:94:e0:1b:b0:03:89:
60:bf:b7:2d:48:51:ab:5e:95:92:bf:65:9b:37:9c:
aa:47:9e:6a:c7:5d:2e:03:8c:73:be:eb:cf:c1:16:
bd:e5:c9:f2:c0:a9:67:9f:cc:09:f3:7e:27:40:11:
d9:cc:86:c7:49:2c:ac:7f:b2:17:a7:7b:31:cc:68:
d2:05:e1:89:2a:d2:c8:c5:99:ce:56:0d:2e:f8:1e:
0e:c5:7c:de:cf:a7:cc:75:db:26:b6:c8:2d:91:91:
cd:6f:11:6c:6d:0b:15:c0:ee:4c:b6:45:43:77:ae:
6e:8a:6c:7b:6d:54:ea:21:92:41:94:59:57:b0:6b:
3e:e3:d0:57:73:f1:0e:36:c3:68:35:de:fa:a5:fd:
95:d0:3d:b2:b1:55:a0:83:16:58:c6:ef:29:2e:a5:
40:22:c4:73:2c:3d:db:e3:db:bf:cc:59:5d:90:2e:
2a:2a:23:54:99:6a:f6:d8:55:b0:eb:b7:76:04:d8:
6b:99:fc:06:47:51:13:f6:24:4e:06:7d:d3:8c:11:
43:ae:a7:21:bd:75:64:9d:b1:55:70:2c:f1:73:72:
a2:b9:83:1b:98:3f:40:9f:a7:68:fb:a3:11:08:bf:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A2:E8:D8:A9:1E:71:C3:5E:62:03:D5:52:B7:EE:55:95:6F:59:4A
X509v3 Authority Key Identifier:
keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138362e36342e3132342e302f32322d3232203d3e203332303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.64.124.0/22
Signature Algorithm: sha256WithRSAEncryption
97:20:72:66:07:c9:b8:dc:5b:6b:35:2e:a3:bf:86:4e:2c:14:
31:2f:c3:e6:4c:90:bc:1c:98:d8:4e:50:39:37:f8:81:50:a4:
e8:07:d6:32:48:fc:f9:10:e6:03:e8:97:fb:47:8f:14:3c:77:
29:70:91:4a:cb:83:a1:30:11:46:99:e0:d1:8e:22:4d:20:fb:
92:5a:06:c1:13:cb:f7:76:63:7c:d9:37:58:a4:71:9b:f5:db:
69:7e:70:8f:a7:f9:68:c2:65:4e:36:61:ee:91:12:f4:3c:9e:
cc:36:65:c5:a6:03:f6:f2:b8:40:72:6b:c7:ce:47:56:4d:e2:
5c:e2:a7:1f:bf:b9:17:9e:aa:00:60:5f:2e:47:62:10:93:31:
a6:97:20:7e:7b:46:b9:ed:52:f3:40:61:af:2c:b4:98:26:17:
ca:65:19:83:ec:79:64:dc:31:78:1a:1c:43:de:3e:74:11:07:
15:96:2e:04:9f:39:ae:49:9e:a6:67:df:51:2c:8b:91:ba:cb:
9f:51:68:55:3e:46:06:98:d7:2b:c8:b8:74:57:cf:2a:c4:4c:
33:43:15:33:39:17:33:09:47:1b:58:cd:75:f5:71:10:3d:ea:
f2:4f:2a:0a:76:79:15:ae:4e:ba:17:1f:b4:7e:3d:bc:85:e3:
a5:21:3e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:59:09 2025 by rpki-client