Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3234302e302f32312d3234203d3e203139343232.roa
File: 3138362e382e3234302e302f32312d3234203d3e203139343232.roa (raw, json)
Hash identifier: yRVVcxfnIX5eAbq7eVuwTWoPciu9m8QgvKeUKoNcduM=
Subject key identifier: FD:BF:C4:19:ED:E2:0F:C0:28:DD:40:3F:2A:B2:BC:7D:E9:BA:D6:60
Certificate issuer: /CN=88041F15365A423BC08F92BC69A5F909644042C2
Certificate serial: 51B78B3D1A1943802CFD3FB59232AC7A8F8161FD
Authority key identifier: 88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3234302e302f32312d3234203d3e203139343232.roa
Signing time: Wed 08 Jan 2025 07:45:00 +0000
ROA not before: Wed 08 Jan 2025 07:40:00 +0000
ROA not after: Wed 07 Jan 2026 07:45:00 +0000
asID: 19422
IP address blocks: 186.8.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b7:8b:3d:1a:19:43:80:2c:fd:3f:b5:92:32:ac:7a:8f:81:61:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88041F15365A423BC08F92BC69A5F909644042C2
Validity
Not Before: Jan 8 07:40:00 2025 GMT
Not After : Jan 7 07:45:00 2026 GMT
Subject: CN=FDBFC419EDE20FC028DD403F2AB2BC7DE9BAD660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7a:b9:b5:6e:8a:cc:25:7e:ce:58:7d:99:ef:
0b:4c:6d:bc:83:bf:9b:fa:18:16:5d:75:ac:49:a6:
c4:3f:1f:02:ea:c6:76:34:4f:69:39:04:8f:a9:f8:
e7:97:4f:3f:1d:80:3b:64:80:fe:ac:cd:e5:1b:36:
3c:46:4c:d5:11:55:df:a8:c1:8f:73:84:22:df:54:
eb:be:f7:e3:a2:50:10:17:77:9e:b4:56:81:96:42:
f5:3a:5f:45:cc:c7:3d:ec:c1:12:ee:2d:fe:dd:d2:
18:c2:10:9d:a0:ef:3e:14:52:1b:cd:8e:02:38:e8:
ad:38:57:45:fe:41:ca:c1:79:9b:45:07:5f:ae:e7:
50:ac:49:e0:55:f0:a4:d5:52:c6:20:c4:4b:b2:be:
60:d3:33:bb:3e:8d:e6:a3:ca:c3:b4:b2:66:b7:44:
f7:1a:63:91:23:be:94:70:27:06:62:22:3e:61:bf:
c9:b5:98:ae:d4:e3:ff:50:83:0b:26:fc:36:59:4c:
45:b1:af:eb:2d:70:48:fe:ef:99:33:e2:4d:95:d5:
fc:3c:66:45:ec:db:c6:20:e3:6f:72:69:10:73:16:
8c:7c:87:59:80:1b:0e:40:cf:b2:12:78:de:56:ab:
47:7e:9e:22:9d:61:5f:f8:da:fa:29:5c:74:80:52:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BF:C4:19:ED:E2:0F:C0:28:DD:40:3F:2A:B2:BC:7D:E9:BA:D6:60
X509v3 Authority Key Identifier:
keyid:88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3234302e302f32312d3234203d3e203139343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.8.240.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:b8:0e:65:d8:ca:fe:d3:a6:9a:e9:65:0f:f6:42:ab:3c:2a:
a7:7b:55:b4:3b:8d:51:ae:03:7b:d5:13:1d:64:f5:15:72:4f:
f9:bc:a4:ea:71:b6:56:94:ea:54:a4:62:b6:b3:8a:dc:f2:c5:
72:1f:39:90:aa:16:40:2a:ae:19:b9:2b:e3:83:d8:d9:f2:5a:
32:ba:d3:0a:cd:fa:04:85:cd:1c:36:ab:f3:bb:1f:3d:e8:ee:
a6:7f:df:83:ee:9c:07:cb:23:95:b1:b1:6f:52:a1:51:cd:84:
5b:c9:8f:fd:28:c0:86:ae:e3:c7:dd:28:bc:5e:29:11:fe:31:
1d:64:93:49:eb:57:ff:a9:c0:4e:43:b1:56:d7:6e:6d:8b:49:
36:d5:b9:12:a9:dd:90:47:a3:d4:9e:8f:49:52:6b:3c:98:f7:
2b:73:91:eb:35:21:7a:b4:aa:27:62:0b:de:0d:e6:98:b2:97:
73:15:1c:a7:e0:d3:7e:a0:4e:c4:8e:95:8b:4b:f5:22:ed:55:
72:78:7c:b5:09:5e:9e:07:cf:fe:3f:cb:97:6c:41:30:53:3d:
07:3c:e5:85:1f:35:d4:7d:a8:fd:d6:93:ee:4c:a3:46:b8:83:
a8:50:bc:47:52:1e:89:e8:2d:c1:02:12:1b:24:a6:28:c0:19:
55:ee:a4:61
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUbeLPRoZQ4As/T+1kjKseo+BYf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgwNDFGMTUzNjVBNDIzQkMwOEY5MkJDNjlBNUY5MDk2
NDQwNDJDMjAeFw0yNTAxMDgwNzQwMDBaFw0yNjAxMDcwNzQ1MDBaMDMxMTAvBgNV
BAMTKEZEQkZDNDE5RURFMjBGQzAyOERENDAzRjJBQjJCQzdERTlCQUQ2NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFerm1borMJX7OWH2Z7wtMbbyD
v5v6GBZddaxJpsQ/HwLqxnY0T2k5BI+p+OeXTz8dgDtkgP6szeUbNjxGTNURVd+o
wY9zhCLfVOu+9+OiUBAXd560VoGWQvU6X0XMxz3swRLuLf7d0hjCEJ2g7z4UUhvN
jgI46K04V0X+QcrBeZtFB1+u51CsSeBV8KTVUsYgxEuyvmDTM7s+jeajysO0sma3
RPcaY5EjvpRwJwZiIj5hv8m1mK7U4/9Qgwsm/DZZTEWxr+stcEj+75kz4k2V1fw8
ZkXs28Yg429yaRBzFox8h1mAGw5Az7ISeN5Wq0d+niKdYV/42vopXHSAUktNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU/b/EGe3iD8Ao3UA/KrK8fem61mAwHwYDVR0j
BBgwFoAUiAQfFTZaQjvAj5K8aaX5CWRAQsIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOUY0Mzg1QThERjg4NzY4QkE2QzVBQjlCOUFFQkM5QjEw
ODgzMzJDRDU2QkU1OUE5RTJFQjUzMDIxNzEyNjY4LzAvODgwNDFGMTUzNjVBNDIz
QkMwOEY5MkJDNjlBNUY5MDk2NDQwNDJDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODA0MUYxNTM2NUE0MjNCQzA4
RjkyQkM2OUE1RjkwOTY0NDA0MkMyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTlGNDM4NUE4REY4ODc2OEJBNkM1QUI5QjlBRUJDOUIxMDg4MzMyQ0Q1
NkJFNTlBOUUyRUI1MzAyMTcxMjY2OC8wLzMxMzgzNjJlMzgyZTMyMzQzMDJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzkzNDMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO6CPAwDQYJ
KoZIhvcNAQELBQADggEBAL+4DmXYyv7TpprpZQ/2Qqs8Kqd7VbQ7jVGuA3vVEx1k
9RVyT/m8pOpxtlaU6lSkYrazitzyxXIfOZCqFkAqrhm5K+OD2NnyWjK60wrN+gSF
zRw2q/O7Hz3o7qZ/34PunAfLI5WxsW9SoVHNhFvJj/0owIau48fdKLxeKRH+MR1k
k0nrV/+pwE5DsVbXbm2LSTbVuRKp3ZBHo9Sej0lSazyY9ytzkes1IXq0qidiC94N
5piyl3MVHKfg036gTsSOlYtL9SLtVXJ4fLUJXp4Hz/4/y5dsQTBTPQc85YUfNdR9
qP3Wk+5Mo0a4g6hQvEdSHonoLcECEhskpijAGVXupGE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:25:38 2025 by rpki-client