Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E668E5322CCDB06C2EF85FFF8C7824088C3BDB4CF690D1590B48C75DE2E38A1C/0/3133382e3231392e31322e302f32322d3234203d3e203237373239.roa
File: 3133382e3231392e31322e302f32322d3234203d3e203237373239.roa (raw, json)
Hash identifier: Q07kIazJRedQHd8deMACk2qpCnBmu6zRC++OgeJ27sk=
Subject key identifier: 89:14:92:37:D4:EE:3B:5E:01:23:AF:04:3A:C9:39:D0:C7:34:AD:07
Certificate issuer: /CN=43CADC1539915252A9808C5CA36A3076A33D38CD
Certificate serial: 55917D78B4F72F63B5CEBE4C8BDDBF26502F52DC
Authority key identifier: 43:CA:DC:15:39:91:52:52:A9:80:8C:5C:A3:6A:30:76:A3:3D:38:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43CADC1539915252A9808C5CA36A3076A33D38CD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E668E5322CCDB06C2EF85FFF8C7824088C3BDB4CF690D1590B48C75DE2E38A1C/0/3133382e3231392e31322e302f32322d3234203d3e203237373239.roa
Signing time: Tue 04 Feb 2025 18:46:54 +0000
ROA not before: Tue 04 Feb 2025 18:41:54 +0000
ROA not after: Tue 03 Feb 2026 18:46:54 +0000
asID: 27729
IP address blocks: 138.219.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:91:7d:78:b4:f7:2f:63:b5:ce:be:4c:8b:dd:bf:26:50:2f:52:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43CADC1539915252A9808C5CA36A3076A33D38CD
Validity
Not Before: Feb 4 18:41:54 2025 GMT
Not After : Feb 3 18:46:54 2026 GMT
Subject: CN=89149237D4EE3B5E0123AF043AC939D0C734AD07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:23:5a:06:1b:8e:85:a1:df:54:6d:67:5f:
3f:15:ca:27:3d:cd:c4:35:80:17:c0:d3:fd:d9:6b:
dd:3e:1f:51:1a:2e:3b:cd:14:82:ce:1b:d7:aa:4d:
5d:29:ce:a0:fd:eb:b1:11:ac:2d:88:91:a8:8e:ef:
2c:56:b1:d9:95:55:26:d9:e0:04:dc:0e:46:99:30:
80:53:66:f8:84:24:e6:f8:50:5e:f1:5c:48:7e:cd:
a8:bf:1b:34:a5:31:8a:ec:45:68:0a:2f:57:1b:1b:
e0:1f:ac:24:d0:b6:f0:b0:d0:73:3f:1f:4c:f2:ed:
6f:09:8d:10:e7:7b:0c:d5:6e:f4:e0:a6:55:55:4f:
c4:05:70:37:00:12:eb:45:40:fe:07:79:2d:d5:ce:
e6:e9:7d:10:2b:da:b5:21:dc:40:5b:09:b1:91:8c:
6c:07:09:ab:76:c4:eb:c5:8a:74:4c:1b:11:f4:62:
a7:48:30:45:23:97:a2:23:e8:52:fb:ff:b1:83:86:
68:95:43:89:26:0e:b6:00:66:9e:62:85:23:42:9a:
1a:c1:2f:05:b4:08:8d:56:17:06:c3:2d:ad:ff:cc:
0b:1b:c2:19:90:78:10:1a:1c:b8:23:e1:b2:93:db:
17:a5:29:95:e5:08:38:11:cf:7c:91:92:89:ac:21:
d4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:14:92:37:D4:EE:3B:5E:01:23:AF:04:3A:C9:39:D0:C7:34:AD:07
X509v3 Authority Key Identifier:
keyid:43:CA:DC:15:39:91:52:52:A9:80:8C:5C:A3:6A:30:76:A3:3D:38:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E668E5322CCDB06C2EF85FFF8C7824088C3BDB4CF690D1590B48C75DE2E38A1C/0/43CADC1539915252A9808C5CA36A3076A33D38CD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43CADC1539915252A9808C5CA36A3076A33D38CD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E668E5322CCDB06C2EF85FFF8C7824088C3BDB4CF690D1590B48C75DE2E38A1C/0/3133382e3231392e31322e302f32322d3234203d3e203237373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.12.0/22
Signature Algorithm: sha256WithRSAEncryption
89:f1:cc:11:65:b6:ae:d0:61:69:e5:2a:9f:f3:dc:44:09:4e:
66:b5:66:13:c9:3c:7d:f1:98:b8:fd:ca:15:f6:a4:5f:21:f1:
7d:f8:fb:7d:2f:93:41:1f:bf:a8:28:c0:d5:a8:53:49:44:bd:
5a:60:91:d2:eb:42:f8:d8:6b:4b:d2:24:31:b7:ea:0a:21:6f:
65:9f:17:e9:07:e0:f9:a1:ec:50:c3:f9:f5:4b:39:9f:4e:c5:
9d:08:9b:7f:11:a8:fd:27:df:93:c8:d9:ed:4d:8c:50:55:9f:
9b:2b:b3:76:02:79:ef:6d:4f:9c:5b:03:05:5b:e1:d8:31:4b:
1f:9a:36:55:e4:e4:12:b5:5d:f1:51:2f:81:a0:7a:58:1b:5c:
5b:27:bc:92:82:58:3a:b6:3a:a4:03:d0:98:07:7c:64:df:e8:
3e:11:f7:28:fe:af:0f:7b:a1:33:e2:b2:94:82:6b:3e:59:36:
f9:69:bb:f1:b6:98:04:01:c7:b5:7d:85:af:45:7d:01:32:4a:
f3:c7:ac:b2:49:77:89:69:b7:23:e9:56:3c:8a:d2:93:fb:25:
72:f3:17:5d:6d:64:7f:ff:eb:b7:bc:94:dd:fb:4f:38:49:9f:
3f:e9:54:ea:d5:66:db:4f:b0:e8:ae:74:e3:c4:d1:b3:67:f6:
05:16:a3:96
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVZF9eLT3L2O1zr5Mi92/JlAvUtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNDQURDMTUzOTkxNTI1MkE5ODA4QzVDQTM2QTMwNzZB
MzNEMzhDRDAeFw0yNTAyMDQxODQxNTRaFw0yNjAyMDMxODQ2NTRaMDMxMTAvBgNV
BAMTKDg5MTQ5MjM3RDRFRTNCNUUwMTIzQUYwNDNBQzkzOUQwQzczNEFEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHiNaBhuOhaHfVG1nXz8Vyic9
zcQ1gBfA0/3Za90+H1EaLjvNFILOG9eqTV0pzqD967ERrC2IkaiO7yxWsdmVVSbZ
4ATcDkaZMIBTZviEJOb4UF7xXEh+zai/GzSlMYrsRWgKL1cbG+AfrCTQtvCw0HM/
H0zy7W8JjRDnewzVbvTgplVVT8QFcDcAEutFQP4HeS3VzubpfRAr2rUh3EBbCbGR
jGwHCat2xOvFinRMGxH0YqdIMEUjl6Ij6FL7/7GDhmiVQ4kmDrYAZp5ihSNCmhrB
LwW0CI1WFwbDLa3/zAsbwhmQeBAaHLgj4bKT2xelKZXlCDgRz3yRkomsIdRFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUiRSSN9TuO14BI68EOsk50Mc0rQcwHwYDVR0j
BBgwFoAUQ8rcFTmRUlKpgIxco2owdqM9OM0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjY4RTUzMjJDQ0RCMDZDMkVGODVGRkY4Qzc4MjQwODhD
M0JEQjRDRjY5MEQxNTkwQjQ4Qzc1REUyRTM4QTFDLzAvNDNDQURDMTUzOTkxNTI1
MkE5ODA4QzVDQTM2QTMwNzZBMzNEMzhDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0NBREMxNTM5OTE1MjUyQTk4
MDhDNUNBMzZBMzA3NkEzM0QzOENELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTY2OEU1MzIyQ0NEQjA2QzJFRjg1RkZGOEM3ODI0MDg4QzNCREI0Q0Y2
OTBEMTU5MEI0OEM3NURFMkUzOEExQy8wLzMxMzMzODJlMzIzMTM5MmUzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM3MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAorbDDAN
BgkqhkiG9w0BAQsFAAOCAQEAifHMEWW2rtBhaeUqn/PcRAlOZrVmE8k8ffGYuP3K
FfakXyHxffj7fS+TQR+/qCjA1ahTSUS9WmCR0utC+NhrS9IkMbfqCiFvZZ8X6Qfg
+aHsUMP59Us5n07FnQibfxGo/Sffk8jZ7U2MUFWfmyuzdgJ5721PnFsDBVvh2DFL
H5o2VeTkErVd8VEvgaB6WBtcWye8koJYOrY6pAPQmAd8ZN/oPhH3KP6vD3uhM+Ky
lIJrPlk2+Wm78baYBAHHtX2Fr0V9ATJK88esskl3iWm3I+lWPIrSk/slcvMXXW1k
f//rt7yU3ftPOEmfP+lU6tVm20+w6K5048TRs2f2BRajlg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:22 2025 by rpki-client