Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/aec339fa85518ce0afc9bbd72deb4b4316b8465f.roa
File: aec339fa85518ce0afc9bbd72deb4b4316b8465f.roa (raw, json)
Hash identifier: JQyLn/UCw0m4PKGPtJYOH7YS/PYBeeqc14jiwr7P0ic=
Subject key identifier: 72:02:3E:BA:04:58:29:3F:38:AF:10:05:82:CD:CA:BA:58:9F:E1:4D
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 1F2428
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/aec339fa85518ce0afc9bbd72deb4b4316b8465f.roa
Signing time: Fri 24 Mar 2023 09:46:05 +0000
ROA not before: Tue 23 Mar 2021 14:41:42 +0000
ROA not after: Tue 24 Mar 2026 14:41:42 +0000
asID: 263761
IP address blocks: 138.117.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040872 (0x1f2428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 23 14:41:42 2021 GMT
Not After : Mar 24 14:41:42 2026 GMT
Subject: CN=aec339fa85518ce0afc9bbd72deb4b4316b8465f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9e:96:43:b5:82:37:fd:25:4d:19:1e:6b:45:
e2:51:a2:94:c7:e4:bc:ed:cd:48:01:59:a2:31:2e:
c5:d8:f7:f8:28:43:9a:86:e2:9d:b1:f9:19:2d:9a:
7c:1c:03:b3:1b:ea:6f:c6:1d:f3:ac:be:3e:21:03:
d9:1d:db:08:26:ae:1c:8c:cd:7c:0c:57:d2:f0:0b:
fc:70:71:a0:a2:84:14:4f:4a:4c:7a:36:e7:c1:9d:
55:60:e6:67:2d:70:42:39:97:66:f4:1a:42:50:29:
11:32:6f:7a:76:50:1b:1f:56:95:d9:c1:1a:34:c0:
6a:83:d1:b1:8b:c2:e4:ed:e6:44:2c:64:64:8d:74:
41:3e:a7:f3:5e:9b:9c:3d:11:6b:40:b1:43:b0:9b:
ee:af:bf:55:23:30:1d:d9:12:8a:15:e0:c1:3e:2f:
76:ec:f4:8b:b8:c9:9a:7e:58:ae:89:74:4f:36:63:
5a:dc:48:78:fc:53:ca:5c:9c:35:3e:d6:26:47:fa:
a8:f0:51:3b:4a:44:ec:23:a7:82:0f:9c:43:c4:6f:
62:8a:a1:c1:47:a4:b9:ac:de:77:b1:aa:fd:0f:4b:
21:24:74:7f:69:9d:da:5f:20:56:1c:b0:be:15:57:
8d:fe:37:e7:c0:c9:be:39:59:d9:38:fe:7e:55:3d:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:02:3E:BA:04:58:29:3F:38:AF:10:05:82:CD:CA:BA:58:9F:E1:4D
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/aec339fa85518ce0afc9bbd72deb4b4316b8465f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.142.0/24
Signature Algorithm: sha256WithRSAEncryption
37:03:1a:69:f3:6b:6d:ac:db:88:a3:d3:08:49:51:5e:a8:b4:
24:2c:14:bc:12:e6:4b:6c:21:5f:ca:67:c4:71:a7:f8:84:d1:
04:32:02:cb:71:9b:10:ce:50:0d:ae:3d:64:de:77:d9:90:47:
bc:8b:06:46:1e:96:89:86:2c:63:b8:fd:a1:41:d0:ef:14:9a:
03:05:3b:a5:e6:a0:c4:7f:e7:15:b2:c1:7d:4d:96:8c:bb:71:
3d:a8:73:3d:8d:e1:a7:ce:bf:e8:01:c1:c8:12:e0:0b:e7:0b:
30:62:bd:16:08:bc:e3:13:bd:8b:e5:64:dd:e2:c1:38:8f:6a:
78:ef:7a:8b:6f:a8:c5:71:54:87:55:3a:d3:71:47:64:a2:20:
41:25:39:1e:c7:2d:bd:e2:3a:4e:91:1b:ac:a0:10:bc:26:19:
d7:46:00:b1:75:49:e6:19:65:e8:a3:79:a0:6c:a0:1f:92:48:
eb:ee:73:3f:07:ce:68:e3:21:28:ed:c7:25:bc:e5:03:dd:cc:
12:43:ba:28:98:05:9f:f2:3b:7b:ac:80:60:d7:97:40:e9:88:
58:31:d0:4a:d9:0b:f0:11:fe:ae:f4:8c:36:5a:f9:c2:22:5b:
02:65:c4:fd:ab:99:36:82:10:7b:f7:42:09:8a:df:df:e8:8a:
33:44:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:58:40 2025 by rpki-client