Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e302e302f31362d3234203d3e203237393437.roa
File: 3138362e332e302e302f31362d3234203d3e203237393437.roa (raw, json)
Hash identifier: nqnPUgV13qTrkzjaO23vJsqqvSrmL2LmvbpT72glnss=
Subject key identifier: C4:3E:8D:94:82:2A:11:B2:5B:74:7D:98:76:51:2E:7A:70:66:A5:8F
Certificate issuer: /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial: 5D9F9809B56A18FFBCBB028677C2DF86EFE942F2
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e302e302f31362d3234203d3e203237393437.roa
Signing time: Tue 04 Feb 2025 18:11:23 +0000
ROA not before: Tue 04 Feb 2025 18:06:23 +0000
ROA not after: Tue 03 Feb 2026 18:11:23 +0000
asID: 27947
IP address blocks: 186.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9f:98:09:b5:6a:18:ff:bc:bb:02:86:77:c2:df:86:ef:e9:42:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Validity
Not Before: Feb 4 18:06:23 2025 GMT
Not After : Feb 3 18:11:23 2026 GMT
Subject: CN=C43E8D94822A11B25B747D9876512E7A7066A58F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:98:2a:ac:3a:cc:fa:f5:8c:7c:3f:84:8b:
9f:76:f1:2d:ca:bc:68:85:88:b1:2e:74:1c:a9:e7:
61:a7:7d:22:89:ba:a3:9b:ac:49:32:1c:82:71:36:
55:e5:0c:5f:00:34:be:2f:4e:8f:af:21:e4:aa:43:
0a:df:40:5f:bf:9e:cb:ce:d8:26:46:5c:6a:f1:da:
20:e9:03:c4:40:42:66:62:86:21:4c:c7:71:8d:83:
cb:46:ba:42:51:d2:5a:09:9b:b7:96:d9:6b:4f:92:
07:16:fe:40:e9:8d:a4:3d:4a:59:d4:96:f8:b9:46:
34:7e:5d:d8:3e:f2:19:73:af:62:57:64:40:33:f7:
74:03:3a:1c:01:ae:b2:d6:4f:fa:3c:42:5c:4f:7f:
e0:57:8b:ae:96:72:14:c6:8b:62:12:fb:a5:d1:d4:
7f:8e:32:98:c5:a8:6f:86:55:7e:45:c4:79:62:15:
cb:94:2e:e9:2d:64:2d:b4:69:01:32:ac:18:09:d7:
27:bc:8a:88:fb:28:e6:db:8f:0b:1a:d4:ba:39:72:
11:d0:7c:02:a6:fe:ca:a4:8b:c1:99:0f:b3:a8:da:
dd:cb:f4:73:32:c4:20:63:4c:56:bf:b3:d7:5f:a0:
03:46:ea:76:21:b3:3c:f1:ac:64:0e:c0:ca:4e:b2:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:8D:94:82:2A:11:B2:5B:74:7D:98:76:51:2E:7A:70:66:A5:8F
X509v3 Authority Key Identifier:
keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e302e302f31362d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:38:e7:56:0b:9e:08:43:59:4f:6d:bf:3e:4c:88:ce:d1:1c:
eb:95:c3:43:5e:3c:38:9a:24:ca:4b:ef:50:3f:f1:a1:b7:fd:
7c:bb:1d:fc:11:ef:52:67:11:db:e1:17:5a:9d:20:1a:ad:b3:
5c:00:27:e8:8f:a9:43:92:82:74:75:dd:a2:e5:13:f0:3c:76:
57:07:63:45:46:73:aa:a0:61:6a:a4:0f:1c:c3:a5:06:7e:1e:
88:ba:df:c1:d0:64:ac:c1:9d:02:27:d1:3a:93:03:6e:ec:95:
4f:fa:a5:14:77:7b:d7:63:2b:ce:f2:08:0e:a6:b8:d8:a8:0f:
c6:7b:62:fe:f1:75:09:69:05:66:b2:68:ca:70:37:a6:0e:81:
25:b8:ad:b9:73:78:cb:d3:32:c0:da:92:a2:18:34:1d:b6:06:
13:ed:f5:6d:69:f4:a0:95:18:5b:eb:ac:c4:3e:d9:1d:b6:bd:
b9:d8:91:44:09:ec:ed:00:88:0a:26:cd:82:fb:ba:85:51:ec:
cf:c1:95:8b:2b:30:72:c8:20:bc:1c:80:1f:98:27:98:7d:30:
ef:f3:f0:08:52:6d:38:62:f8:7a:83:68:40:fa:d8:34:a1:09:
9d:95:c5:0d:e4:16:e3:6c:fa:09:f7:a5:96:5d:82:03:ce:29:
5c:3e:70:50
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUXZ+YCbVqGP+8uwKGd8Lfhu/pQvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNTAyMDQxODA2MjNaFw0yNjAyMDMxODExMjNaMDMxMTAvBgNV
BAMTKEM0M0U4RDk0ODIyQTExQjI1Qjc0N0Q5ODc2NTEyRTdBNzA2NkE1OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhJgqrDrM+vWMfD+Ei5928S3K
vGiFiLEudByp52GnfSKJuqObrEkyHIJxNlXlDF8ANL4vTo+vIeSqQwrfQF+/nsvO
2CZGXGrx2iDpA8RAQmZihiFMx3GNg8tGukJR0loJm7eW2WtPkgcW/kDpjaQ9SlnU
lvi5RjR+Xdg+8hlzr2JXZEAz93QDOhwBrrLWT/o8QlxPf+BXi66WchTGi2IS+6XR
1H+OMpjFqG+GVX5FxHliFcuULuktZC20aQEyrBgJ1ye8ioj7KObbjwsa1Lo5chHQ
fAKm/sqki8GZD7Oo2t3L9HMyxCBjTFa/s9dfoANG6nYhszzxrGQOwMpOslNhAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUxD6NlIIqEbJbdH2YdlEuenBmpY8wHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzNjJlMzMyZTMwMmUzMDJmMzEz
NjJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALoDMA0GCSqGSIb3
DQEBCwUAA4IBAQA5OOdWC54IQ1lPbb8+TIjO0RzrlcNDXjw4miTKS+9QP/Ght/18
ux38Ee9SZxHb4RdanSAarbNcACfoj6lDkoJ0dd2i5RPwPHZXB2NFRnOqoGFqpA8c
w6UGfh6Iut/B0GSswZ0CJ9E6kwNu7JVP+qUUd3vXYyvO8ggOprjYqA/Ge2L+8XUJ
aQVmsmjKcDemDoEluK25c3jL0zLA2pKiGDQdtgYT7fVtafSglRhb66zEPtkdtr25
2JFECeztAIgKJs2C+7qFUezPwZWLKzByyCC8HIAfmCeYfTDv8/AIUm04Yvh6g2hA
+tg0oQmdlcUN5BbjbPoJ96WWXYIDzilcPnBQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:51:56 2025 by rpki-client