Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132322e302f32332d3234203d3e20323635373033.roa
File: 3133382e302e3132322e302f32332d3234203d3e20323635373033.roa (raw, json)
Hash identifier: 9DN2a6/2yOaXSrp+epSvgmKQ8NkP3j4MxC0Fdv49nEM=
Subject key identifier: 3A:50:BD:93:6B:DB:57:1E:78:D2:21:08:44:21:24:19:19:3B:42:7D
Certificate issuer: /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial: 565E475AEDD7690E62BAF205B79649016DAED4A8
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132322e302f32332d3234203d3e20323635373033.roa
Signing time: Tue 04 Feb 2025 18:54:10 +0000
ROA not before: Tue 04 Feb 2025 18:49:10 +0000
ROA not after: Tue 03 Feb 2026 18:54:10 +0000
asID: 265703
IP address blocks: 138.0.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:5e:47:5a:ed:d7:69:0e:62:ba:f2:05:b7:96:49:01:6d:ae:d4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Validity
Not Before: Feb 4 18:49:10 2025 GMT
Not After : Feb 3 18:54:10 2026 GMT
Subject: CN=3A50BD936BDB571E78D2210844212419193B427D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:cd:61:76:1e:42:5f:75:ad:51:b0:8c:00:
fb:91:a1:3f:f8:ab:f3:e8:5a:4e:1e:f8:62:ec:9f:
5b:cb:42:12:82:4d:43:85:e2:0a:93:3e:d0:e8:67:
a1:98:26:8c:c4:8f:1a:28:06:1e:a6:9a:bb:6b:bf:
9b:20:ad:e3:c1:f6:c8:ed:f7:a7:c3:74:4e:7c:6d:
2f:90:07:08:9f:d5:b8:c8:7f:34:43:21:4f:97:71:
85:52:1f:1c:70:f6:14:29:f4:97:59:f0:42:35:28:
b0:38:94:25:a1:70:dc:25:0b:e6:45:c0:41:50:51:
f9:d4:04:13:06:1d:6c:fe:ba:32:d9:2a:3c:6f:c7:
5b:45:15:7c:e3:87:53:cd:68:44:24:28:18:1b:c9:
69:1f:04:5e:7e:ce:75:e3:1d:b1:c2:37:3d:35:83:
01:a6:8d:8d:99:36:06:63:20:b7:f4:d0:79:e0:fd:
0c:d5:b1:ad:8d:55:93:86:91:86:d9:59:af:72:55:
4d:55:72:5c:17:32:b6:05:a8:0d:5c:a6:f3:ef:ea:
70:f1:9b:dc:a7:33:0d:b7:0a:ba:8d:bf:32:ad:b1:
76:c8:c8:18:11:5d:e7:87:82:e9:2f:69:2f:ca:09:
49:a1:f3:a4:8d:b2:4e:ff:31:3d:bb:83:57:43:82:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:50:BD:93:6B:DB:57:1E:78:D2:21:08:44:21:24:19:19:3B:42:7D
X509v3 Authority Key Identifier:
keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132322e302f32332d3234203d3e20323635373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.122.0/23
Signature Algorithm: sha256WithRSAEncryption
43:44:cd:bb:07:70:6d:e3:71:3a:64:c2:d8:b2:4f:ac:2a:bf:
ef:85:eb:70:57:0a:18:7d:1c:ae:d1:eb:f2:d3:bc:f8:cb:83:
34:68:6c:35:d3:55:76:2a:e7:85:98:3c:94:c0:72:a1:a2:9f:
93:08:e9:90:b8:78:f2:be:9e:9a:dd:3c:25:b4:f8:ed:4f:f9:
ef:19:23:5b:e1:c4:1a:74:85:69:5b:76:21:40:b2:5a:1b:33:
01:9f:01:58:b7:52:fd:f2:ca:0a:9b:cb:cf:4c:6e:83:5e:c9:
8e:d7:be:7b:95:e2:84:8f:a1:b7:57:f3:a0:fd:70:5d:f3:dc:
b2:7a:62:a7:1a:0c:2d:af:95:cb:1a:ee:df:40:f4:b1:71:a4:
99:d0:65:7d:e1:68:16:2b:23:6f:e1:5f:dc:cd:5c:db:57:d9:
27:cc:ae:4a:31:d3:5f:ea:ae:2b:68:11:57:aa:8b:11:74:36:
12:b2:89:57:ce:2b:29:97:53:e3:8a:e7:e7:84:7c:ab:63:ce:
66:1f:d0:44:c6:da:62:8b:e3:19:b7:c0:54:cb:95:68:48:22:
f4:47:40:3b:0c:d6:80:74:0d:7a:7f:4d:0f:9f:ee:e2:4a:0e:
a4:f0:35:80:b7:d9:2f:39:4f:0f:5f:74:2d:83:59:28:08:82:
1a:c2:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:16 2025 by rpki-client