Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32322d3232203d3e20323632323136.roa
File: 3133382e302e3130342e302f32322d3232203d3e20323632323136.roa (raw, json)
Hash identifier: nJeDhoauvrffEl49E2+Tmlh0fmWXzvz1SzL+u3QvLOw=
Subject key identifier: B0:9D:96:07:F5:B0:8C:3A:E1:5C:E2:08:FD:B2:23:D3:53:6C:03:80
Certificate issuer: /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial: 4287A6FC987B255FA0C4FFC7FABCADD9851E9A31
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32322d3232203d3e20323632323136.roa
Signing time: Fri 08 Nov 2024 14:10:03 +0000
ROA not before: Fri 08 Nov 2024 14:05:03 +0000
ROA not after: Fri 07 Nov 2025 14:10:03 +0000
asID: 262216
IP address blocks: 138.0.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:87:a6:fc:98:7b:25:5f:a0:c4:ff:c7:fa:bc:ad:d9:85:1e:9a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Validity
Not Before: Nov 8 14:05:03 2024 GMT
Not After : Nov 7 14:10:03 2025 GMT
Subject: CN=B09D9607F5B08C3AE15CE208FDB223D3536C0380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:62:aa:9e:0c:87:b7:af:e4:ea:7e:0f:ea:
a4:88:05:2c:5d:5a:83:8f:9d:4d:78:af:92:2e:a2:
5e:5f:1f:86:5d:b0:54:70:2b:c8:3c:15:ab:4f:5c:
5a:f6:ec:42:88:c7:2f:f8:3a:19:a6:68:98:22:5e:
cf:75:a3:93:6f:b6:a8:36:41:cf:e4:65:56:51:c6:
2b:b4:13:61:e2:d3:f2:35:ff:07:a3:8f:02:00:cc:
9c:ce:b9:51:fe:5c:e7:4a:24:80:61:7f:1b:6f:9a:
b4:04:5e:7a:10:1e:f7:f9:64:be:58:cc:b4:30:ed:
52:10:d5:50:eb:a6:4e:b1:23:88:c3:28:e4:8f:df:
02:d7:b6:08:bd:20:d3:63:45:68:d8:86:a7:10:2d:
6f:9e:88:82:5d:7e:11:2d:9c:57:68:83:c2:bd:04:
11:cf:b8:76:fc:c2:64:4b:e9:75:45:28:1e:8a:77:
6e:c0:f7:62:d1:76:7d:0c:00:3c:f9:dd:76:ee:3f:
ff:71:1f:c7:b0:dd:07:a7:51:ab:9d:bc:cc:ff:eb:
2b:ee:b3:62:81:64:a8:36:cb:86:d9:a3:65:41:a1:
76:1f:fc:76:52:1e:85:ff:d5:e0:2d:e5:d5:c1:71:
68:92:2f:fd:c9:9f:b2:df:19:06:09:5c:92:17:08:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9D:96:07:F5:B0:8C:3A:E1:5C:E2:08:FD:B2:23:D3:53:6C:03:80
X509v3 Authority Key Identifier:
keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32322d3232203d3e20323632323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.104.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:7e:7a:1a:5b:3d:14:36:59:4d:c3:d5:79:92:20:99:7a:b5:
a2:55:48:74:19:a3:c1:6f:bd:0d:8d:c4:12:90:fe:4d:a7:a4:
c1:ae:5e:d0:7a:90:dc:b7:34:d4:ca:f1:9c:c4:36:45:a8:fc:
bb:7a:9a:f1:b9:f5:4a:8b:62:0d:63:bb:03:ae:a4:46:37:20:
cd:f9:4c:c2:7d:1d:e1:4f:50:3c:50:ec:84:b4:3e:8c:c2:ba:
f1:1d:2c:8d:a7:71:8d:af:7e:df:23:52:6c:88:5a:cc:c1:d7:
2a:0c:ec:6f:92:7c:72:5e:89:d0:30:0f:e2:c2:3c:5d:69:da:
b9:06:30:f1:2a:c1:6f:b5:cb:fa:a8:28:13:6d:fb:20:c8:eb:
69:eb:94:1d:34:08:78:e1:e3:82:37:f6:42:c6:21:d4:89:7a:
ca:17:44:ae:a9:f7:f0:70:6c:90:96:54:7e:b1:18:f3:bb:31:
f6:13:fe:4c:9a:6c:86:a8:a7:c6:6e:86:af:c9:33:99:73:77:
f1:cd:21:f9:1e:f4:1d:ed:6c:3d:7a:96:5e:e0:d7:56:d8:50:
d1:20:09:6d:21:18:90:67:1b:e3:b5:db:8b:0a:02:f8:5f:e4:
bc:4b:4a:13:a2:c4:a9:8d:5b:f2:e2:78:58:4d:9e:f7:9e:c2:
93:8c:c8:1d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQoem/Jh7JV+gxP/H+ryt2YUemjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QxRjE3NEJGQkIxN0I3ODIyRTgyRDNBQTE0RTg2RDM4
NTQ4MzA4OTAeFw0yNDExMDgxNDA1MDNaFw0yNTExMDcxNDEwMDNaMDMxMTAvBgNV
BAMTKEIwOUQ5NjA3RjVCMDhDM0FFMTVDRTIwOEZEQjIyM0QzNTM2QzAzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDWKqngyHt6/k6n4P6qSIBSxd
WoOPnU14r5Iuol5fH4ZdsFRwK8g8FatPXFr27EKIxy/4OhmmaJgiXs91o5Nvtqg2
Qc/kZVZRxiu0E2Hi0/I1/wejjwIAzJzOuVH+XOdKJIBhfxtvmrQEXnoQHvf5ZL5Y
zLQw7VIQ1VDrpk6xI4jDKOSP3wLXtgi9INNjRWjYhqcQLW+eiIJdfhEtnFdog8K9
BBHPuHb8wmRL6XVFKB6Kd27A92LRdn0MADz53XbuP/9xH8ew3QenUaudvMz/6yvu
s2KBZKg2y4bZo2VBoXYf/HZSHoX/1eAt5dXBcWiSL/3Jn7LfGQYJXJIXCHXPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsJ2WB/WwjDrhXOII/bIj01NsA4AwHwYDVR0j
BBgwFoAUfR8XS/uxe3gi6C06oU6G04VIMIkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkNFMzNENUE4NEVDM0VCRTU4MDNCNDM5ODc5OTA4NzE4
QjE2MzdGREYwMjBFRjlDODJEQjdCRTIwMjAwN0NDLzAvN0QxRjE3NEJGQkIxN0I3
ODIyRTgyRDNBQTE0RTg2RDM4NTQ4MzA4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RDFGMTc0QkZCQjE3Qjc4MjJF
ODJEM0FBMTRFODZEMzg1NDgzMDg5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJDRTMzRDVBODRFQzNFQkU1ODAzQjQzOTg3OTkwODcxOEIxNjM3RkRG
MDIwRUY5QzgyREI3QkUyMDIwMDdDQy8wLzMxMzMzODJlMzAyZTMxMzAzNDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjMyMzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAooAaDAN
BgkqhkiG9w0BAQsFAAOCAQEArX56Gls9FDZZTcPVeZIgmXq1olVIdBmjwW+9DY3E
EpD+Taekwa5e0HqQ3Lc01MrxnMQ2Raj8u3qa8bn1SotiDWO7A66kRjcgzflMwn0d
4U9QPFDshLQ+jMK68R0sjadxja9+3yNSbIhazMHXKgzsb5J8cl6J0DAP4sI8XWna
uQYw8SrBb7XL+qgoE237IMjraeuUHTQIeOHjgjf2QsYh1Il6yhdErqn38HBskJZU
frEY87sx9hP+TJpshqinxm6Gr8kzmXN38c0h+R70He1sPXqWXuDXVthQ0SAJbSEY
kGcb47XbiwoC+F/kvEtKE6LEqY1b8uJ4WE2e957Ck4zIHQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:40 2025 by rpki-client