Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32342d3234203d3e203532353130.roa
File: 3133382e3231392e35362e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier: 6wL2EK9sheCmIpOWLD0i5Ev2ZZTlycJhUOSMLszz4t8=
Subject key identifier: 3D:91:FD:CE:81:50:DB:7B:93:F6:EC:04:72:46:C5:9E:73:FC:F1:38
Certificate issuer: /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial: 594A2BE4B0DCDA7698764A58E7BDC49E21D61E00
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32342d3234203d3e203532353130.roa
Signing time: Tue 04 Feb 2025 18:31:44 +0000
ROA not before: Tue 04 Feb 2025 18:26:44 +0000
ROA not after: Tue 03 Feb 2026 18:31:44 +0000
asID: 52510
IP address blocks: 138.219.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4a:2b:e4:b0:dc:da:76:98:76:4a:58:e7:bd:c4:9e:21:d6:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Validity
Not Before: Feb 4 18:26:44 2025 GMT
Not After : Feb 3 18:31:44 2026 GMT
Subject: CN=3D91FDCE8150DB7B93F6EC047246C59E73FCF138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:6b:60:29:f2:b6:81:7c:9d:8a:7e:84:d6:
15:00:5d:97:f5:39:b0:61:a4:48:76:3a:7b:ef:e7:
df:21:bb:e0:93:f4:a3:eb:68:c2:1f:26:46:5e:d5:
1b:f5:cc:50:28:13:7b:11:5d:0b:c5:f7:07:ea:bc:
d7:2f:40:cb:9b:7d:22:46:04:bf:5f:fc:6a:10:08:
4e:ed:43:04:48:7e:e9:55:2f:40:f7:b9:0c:40:8d:
b2:95:a6:70:4c:e9:23:8a:57:64:e2:15:7a:57:ab:
fa:4c:14:6f:8b:91:16:c7:13:7a:6e:50:35:be:12:
10:a5:63:71:0c:3c:84:f6:a9:2c:a4:96:d4:85:f2:
c0:65:58:8f:0e:a5:6b:04:f0:18:f9:9d:54:67:e0:
82:e7:6d:c5:f8:98:dc:58:7e:1c:24:af:e1:04:f2:
4f:b8:c3:c9:6d:a7:2d:f5:3c:10:1a:f0:3c:d5:0a:
e8:c2:13:85:9b:db:a1:9a:6f:84:20:35:76:df:c4:
4e:4f:ff:ff:df:21:b8:72:f0:25:5d:c9:d5:45:f4:
2d:84:5b:8e:c1:cf:35:da:8a:d7:d5:1e:2a:d0:4e:
fc:a3:a6:5f:d7:6b:34:48:e2:a6:c5:8d:7b:19:03:
ec:dd:68:e7:79:a6:08:86:51:77:d4:60:46:6f:de:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:91:FD:CE:81:50:DB:7B:93:F6:EC:04:72:46:C5:9E:73:FC:F1:38
X509v3 Authority Key Identifier:
keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32342d3234203d3e203532353130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b2:af:df:e0:3d:af:18:65:0b:78:cd:22:f8:bd:ae:b3:87:
db:f2:04:2e:c6:41:ad:d4:2c:17:59:52:e4:2c:ad:72:22:1f:
cf:d5:8b:7c:7d:57:f5:e1:95:0d:0c:20:49:e0:14:2b:f1:05:
64:3a:c7:a1:94:89:12:55:e7:fa:ce:96:59:4d:4f:13:ae:b2:
48:f5:71:20:e3:ea:1e:69:e0:08:68:b5:e2:f9:85:90:78:ac:
52:ae:94:8f:9d:fe:b6:10:ec:b8:b2:e8:c0:c9:7e:38:7e:9f:
3c:5e:e7:0d:c1:b9:e1:54:7e:a5:7b:5c:12:46:38:0c:0f:02:
ce:7f:f4:9c:cb:dc:bd:e1:81:a8:92:8c:2b:44:49:e9:b7:90:
0d:88:b6:71:34:9e:a0:8f:4a:49:98:6f:78:d5:cc:e3:11:74:
5d:af:59:f0:94:b7:7e:69:87:84:b1:35:3a:7c:24:5f:83:57:
73:06:4c:2f:8d:7e:f3:68:4a:0d:23:d5:1e:14:36:ec:ff:6e:
79:2a:06:a4:f9:5b:8b:4f:b6:94:3a:94:29:92:cc:85:f1:32:
22:b3:c5:46:91:6d:f3:40:b6:97:3e:bd:c5:b0:ae:40:c1:df:
d3:e7:ba:5d:d1:fa:e9:fe:96:f7:0f:12:2a:d7:1c:00:38:bf:
9b:9b:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:33 2025 by rpki-client