Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230382e302f32342d3234203d3e20323632313637.roa
File: 3138362e3134382e3230382e302f32342d3234203d3e20323632313637.roa (raw, json)
Hash identifier: 0bAZyVabZ5Byzhys6wJR0tWsBsM11eia/ybKApCU7jM=
Subject key identifier: 25:0A:68:1C:89:7B:03:B7:B8:94:9D:D6:AF:8A:32:25:8F:DE:B3:F5
Certificate issuer: /CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
Certificate serial: 728C34BDE954E87D75DF389DC2BF3497C6799A15
Authority key identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230382e302f32342d3234203d3e20323632313637.roa
Signing time: Tue 04 Feb 2025 18:31:30 +0000
ROA not before: Tue 04 Feb 2025 18:26:30 +0000
ROA not after: Tue 03 Feb 2026 18:31:30 +0000
asID: 262167
IP address blocks: 186.148.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8c:34:bd:e9:54:e8:7d:75:df:38:9d:c2:bf:34:97:c6:79:9a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
Validity
Not Before: Feb 4 18:26:30 2025 GMT
Not After : Feb 3 18:31:30 2026 GMT
Subject: CN=250A681C897B03B7B8949DD6AF8A32258FDEB3F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:f2:db:9c:4f:48:33:a1:5a:74:48:ed:d0:
3e:d6:90:71:55:68:a4:44:ea:c6:97:ee:24:fb:6f:
83:57:94:b0:0d:5f:33:ef:73:8d:b3:50:60:f3:8a:
b3:48:57:69:f2:96:79:82:08:23:59:c9:da:da:da:
2a:a8:c4:d5:6b:95:9f:d2:43:36:25:77:17:eb:96:
02:b0:c5:69:88:ee:74:9e:02:f1:26:04:53:65:c0:
8e:cf:a9:30:d2:3a:c5:d3:bc:1d:e7:0c:13:53:eb:
66:f7:cb:2a:fb:f5:43:35:a6:1a:9c:d3:a9:95:cc:
42:0d:1d:b6:0e:df:00:10:d3:c0:9d:c0:a5:dd:70:
9e:94:86:c1:5b:08:30:5e:4e:d6:84:98:39:40:82:
8e:bc:49:40:75:83:75:3a:c7:38:47:cb:c4:82:ea:
0f:10:f0:aa:a6:9e:09:96:fa:16:78:16:42:98:85:
a6:6f:6d:32:f7:34:f2:d9:cc:3b:10:28:f5:fd:95:
77:97:14:73:0e:e6:eb:11:79:09:bb:0c:c5:14:c5:
fb:d4:71:77:40:b3:38:90:29:05:c0:fb:38:1b:96:
64:86:5e:a0:f8:e8:4e:4e:e4:ac:b1:91:b2:01:5a:
3a:52:7b:02:8b:b7:61:7e:fd:c8:23:a0:11:94:ec:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0A:68:1C:89:7B:03:B7:B8:94:9D:D6:AF:8A:32:25:8F:DE:B3:F5
X509v3 Authority Key Identifier:
keyid:2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230382e302f32342d3234203d3e20323632313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.148.208.0/24
Signature Algorithm: sha256WithRSAEncryption
90:89:49:ae:dd:4b:ed:be:90:03:6c:e0:64:86:e3:0a:26:b1:
47:15:72:3d:4e:28:8b:24:66:37:43:d0:8b:86:48:de:b7:3e:
3d:f0:03:1f:7c:7b:ad:f7:3c:92:3d:b9:1b:c5:1f:a9:2a:1f:
d9:ca:88:0e:70:51:2c:b6:fc:5e:e7:a7:33:1e:55:77:b1:71:
37:b2:df:34:db:fd:f5:c6:22:85:0e:02:9d:7c:f5:50:42:5e:
40:bb:92:c9:bd:02:7a:f1:a0:18:ad:05:f0:75:d1:83:35:7a:
3e:8e:a2:a4:74:ea:ef:71:84:fb:82:fa:a6:ec:6e:c7:a1:62:
0f:d6:44:a6:ed:9e:6b:63:70:98:b5:9b:b2:a3:f9:56:c5:fe:
3e:57:87:ab:6a:58:34:fd:01:ef:97:ce:c1:b6:7d:b2:f2:63:
56:9e:6a:89:55:63:c0:19:a1:92:d9:5f:79:cf:f0:87:b0:3a:
3d:b6:d0:1b:28:89:14:cd:9d:cf:10:22:b2:96:a9:06:9d:57:
45:58:1d:69:4c:f2:52:e2:0c:95:0c:98:99:ef:79:e1:0d:4b:
e2:47:df:e7:fd:56:67:96:0a:2a:b6:47:8b:01:e0:a8:ef:b4:
0e:5a:d9:66:14:03:43:8f:0a:7b:1a:e7:49:cd:8b:24:69:27:
d0:de:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:08 2025 by rpki-client