Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/3e972d90896e32aeee25ddb70b656698797b933c.roa
File: 3e972d90896e32aeee25ddb70b656698797b933c.roa (raw, json)
Hash identifier: TAkNXv7bI8VP2kL5ssy3eXli4rjicsbs+8fekV7JH+M=
Subject key identifier: AD:5F:1F:BE:ED:27:96:21:B5:3D:EF:D3:11:52:71:90:43:B7:7A:6F
Certificate issuer: /CN=a7656fd167ae72596f765a4f9b74e1606a1dea00
Certificate serial: 16B3A2
Authority key identifier: 94:00:8D:C0:79:4A:49:31:5C:ED:14:83:90:36:2B:CF:7E:5C:F9:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7656fd167ae72596f765a4f9b74e1606a1dea00.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/3e972d90896e32aeee25ddb70b656698797b933c.roa
Signing time: Mon 02 Oct 2023 17:54:52 +0000
ROA not before: Sun 01 Oct 2023 17:54:52 +0000
ROA not after: Thu 02 Oct 2025 18:54:52 +0000
asID: 19863
IP address blocks: 181.199.224.0/19 maxlen: 24
181.41.64.0/18 maxlen: 22
190.80.0.0/17 maxlen: 24
2800:3c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1487778 (0x16b3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7656fd167ae72596f765a4f9b74e1606a1dea00
Validity
Not Before: Oct 1 17:54:52 2023 GMT
Not After : Oct 2 18:54:52 2025 GMT
Subject: CN=3e972d90896e32aeee25ddb70b656698797b933c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:2a:2f:92:15:ab:b3:4b:90:63:ac:c8:a0:
b5:a5:00:ec:ab:eb:db:90:70:4f:27:d4:7f:47:e3:
42:74:35:2e:c5:0c:42:50:15:ea:50:a6:4a:5d:21:
61:55:75:d8:3b:6b:04:d8:6e:ce:d4:20:21:72:0f:
71:ba:e3:56:6b:5d:f0:9a:77:f6:e3:fc:33:31:90:
78:c2:3a:19:a0:0a:8f:30:28:f0:dc:9b:2e:2a:e0:
bd:22:d1:f9:12:9d:79:e8:c4:77:3f:aa:18:6e:88:
e3:5a:08:31:d4:67:49:c5:5f:d2:09:09:ea:bd:14:
fa:b6:66:58:83:61:67:4a:73:d6:ab:39:b7:e2:3a:
0f:c5:27:91:9f:78:1b:26:9b:ba:5d:88:02:00:eb:
c5:e6:19:e2:66:95:ca:9d:92:7d:3a:71:30:6c:6c:
52:28:a1:d1:cc:31:99:dd:22:3f:a1:38:dc:88:b9:
7c:64:b5:67:c4:62:d2:93:5a:50:53:e8:b9:81:08:
e1:10:b6:9f:c5:72:66:b1:ca:23:f5:80:02:1b:fb:
e3:04:8c:71:f5:d3:6b:b0:41:8a:bb:06:da:2d:f2:
0e:a7:62:48:7b:af:63:eb:4e:64:30:0f:e8:05:5e:
02:4d:a6:26:a8:fb:41:60:de:7b:d3:9b:93:61:8c:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5F:1F:BE:ED:27:96:21:B5:3D:EF:D3:11:52:71:90:43:B7:7A:6F
X509v3 Authority Key Identifier:
keyid:94:00:8D:C0:79:4A:49:31:5C:ED:14:83:90:36:2B:CF:7E:5C:F9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7656fd167ae72596f765a4f9b74e1606a1dea00.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/3e972d90896e32aeee25ddb70b656698797b933c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ac8b89a0-d805-4341-8346-44331adc661c/a7656fd167ae72596f765a4f9b74e1606a1dea00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.64.0/18
181.199.224.0/19
190.80.0.0/17
IPv6:
2800:3c0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:fa:be:6c:6e:c1:52:da:34:ce:ba:48:be:61:c1:3b:82:5f:
3e:ad:2a:76:70:89:67:36:fb:95:cb:2a:e2:59:7f:ed:1e:f5:
1d:fb:db:85:71:c3:36:21:83:35:56:39:b7:fb:86:94:36:b1:
ef:c9:fe:d5:d3:6f:4f:68:7a:e2:98:05:e3:e3:fa:28:a9:84:
76:24:e9:1c:56:88:18:4f:b4:82:46:cb:77:93:19:96:47:09:
0c:7c:0f:67:2b:15:94:fd:35:e6:f6:54:ed:46:53:a4:e7:6d:
c5:c3:b2:a3:5c:5f:a7:55:7e:05:81:ae:60:8e:7e:b3:5f:a8:
31:75:55:d3:83:de:e3:c8:ae:7c:e7:5a:2c:3e:0d:a4:57:47:
24:79:76:1d:9f:d5:7f:f7:e0:5c:df:ad:ca:8b:e6:51:e6:15:
c5:45:45:67:a7:73:3d:89:12:e0:ae:7b:a8:1d:77:71:18:1a:
6d:d3:c8:51:b9:4f:68:71:ab:aa:60:93:6c:0a:c6:74:f8:3f:
93:24:b6:02:ef:de:a9:f5:ad:07:9d:0a:aa:dd:b4:f1:d4:68:
4c:f0:05:fc:d2:dc:3a:f2:6b:3e:39:4a:be:80:16:9a:cb:9b:
13:39:c2:5e:30:cd:1e:bc:86:93:d3:89:f3:e5:21:d1:6a:9e:
10:d5:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:02:37 2025 by rpki-client