Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234332e302f32342d3234203d3e20323632393331.roa
File: 3139312e3130322e3234332e302f32342d3234203d3e20323632393331.roa (raw, json)
Hash identifier: TkvWGKgIXiIWVUM6Vd0I53+1Tgp+EWZHUfe8kyp2PTs=
Subject key identifier: 38:3B:57:2A:08:A6:F7:90:F4:A4:75:3C:5E:C1:85:3D:42:7E:13:8B
Certificate issuer: /CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
Certificate serial: 409E0772522A32CD162A0829423EA02ACB76FE86
Authority key identifier: A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234332e302f32342d3234203d3e20323632393331.roa
Signing time: Tue 04 Feb 2025 18:23:06 +0000
ROA not before: Tue 04 Feb 2025 18:18:06 +0000
ROA not after: Tue 03 Feb 2026 18:23:06 +0000
asID: 262931
IP address blocks: 191.102.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9e:07:72:52:2a:32:cd:16:2a:08:29:42:3e:a0:2a:cb:76:fe:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
Validity
Not Before: Feb 4 18:18:06 2025 GMT
Not After : Feb 3 18:23:06 2026 GMT
Subject: CN=383B572A08A6F790F4A4753C5EC1853D427E138B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:c3:8f:df:05:79:5b:89:21:5a:1e:95:a4:
d1:4e:9c:c1:f7:49:68:64:74:cc:07:d9:68:58:a1:
16:0c:a9:95:06:45:31:5c:b0:72:24:bc:c8:09:0b:
bb:9f:1d:92:80:d5:7a:45:1e:47:45:02:a5:2c:eb:
bc:4e:56:15:de:79:a1:38:42:fc:97:71:e7:09:fe:
26:63:9e:80:e7:30:ed:e4:e6:3f:9f:6b:3d:0a:3c:
1b:5c:44:f0:8e:14:66:73:0d:af:c0:f3:c8:29:69:
b4:f4:e7:3d:cf:ca:eb:d3:96:7c:35:d6:3e:e1:aa:
dd:33:86:cf:ad:82:2c:3c:37:82:21:80:df:20:0b:
18:df:da:ce:fb:cd:2b:37:46:f6:5b:0b:08:14:40:
34:ff:ce:05:fa:90:ed:71:91:43:72:f0:bf:f7:e2:
ef:13:13:ad:9b:49:11:b5:63:1a:38:79:a1:73:f3:
24:88:a6:27:8c:50:b2:07:70:67:c4:15:24:40:aa:
df:30:1b:30:0d:2f:84:b6:8c:62:5f:74:37:46:05:
3c:5f:05:a3:4f:c2:31:7e:49:3d:1c:fc:b0:5c:83:
e2:07:53:2f:1a:67:5c:56:19:eb:53:c1:c0:c5:e2:
01:61:3a:09:92:2d:2a:dd:26:8f:12:83:15:9d:a9:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:57:2A:08:A6:F7:90:F4:A4:75:3C:5E:C1:85:3D:42:7E:13:8B
X509v3 Authority Key Identifier:
keyid:A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234332e302f32342d3234203d3e20323632393331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.102.243.0/24
Signature Algorithm: sha256WithRSAEncryption
27:dc:16:7b:ea:75:2a:2d:a2:e0:81:fa:87:32:34:ba:73:4f:
6a:a1:15:73:9b:95:58:8f:e6:1c:60:7f:a1:25:78:64:e3:42:
aa:b5:6e:45:45:da:f1:b9:45:08:89:3d:74:68:cb:9a:9e:4c:
5f:7d:8d:9d:a2:4a:d9:fb:e5:3a:59:b0:07:c6:3a:8c:0e:4a:
db:26:ff:7d:cb:2a:1f:f8:54:88:98:68:c5:6d:a9:19:a4:4b:
2a:2a:d2:9b:2d:09:97:5d:2d:d9:76:69:43:6f:0c:61:25:69:
63:dd:3c:ee:0b:eb:5a:ac:d2:94:1f:6e:44:25:d7:ae:e8:37:
1b:a8:7b:68:58:be:b8:66:99:9d:0a:49:f3:f1:0c:4f:61:5f:
58:c8:b2:ea:73:8c:da:f3:55:e8:fa:02:4a:20:85:ef:fb:0d:
e1:7c:99:67:a0:2e:81:e3:77:f0:8a:31:74:10:8e:2b:f6:7c:
6b:40:7b:05:ca:49:b1:53:55:59:e7:b6:15:d2:a2:7f:03:98:
92:66:d2:11:94:4e:fc:44:76:dc:82:b4:c1:2d:3e:ed:16:19:
75:f8:d0:d6:3d:69:4b:cf:76:49:e0:70:27:4b:1a:b5:db:5a:
3d:b7:08:68:8a:f1:a3:d5:bb:8d:36:2f:96:40:cf:54:7c:a1:
e0:6b:76:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:41 2025 by rpki-client