Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa
File: 3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (raw, json)
Hash identifier: nAlIq8Imsva/hGiNGY1F5AlzIAoCx0BlIMSVHvrB7HQ=
Subject key identifier: 58:6C:10:6F:12:52:05:1C:4F:59:47:24:5D:B8:DD:5E:94:E8:1B:29
Certificate issuer: /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial: 09B73BDF33BA748F5D96CA4C3DDC7CC2224A8BD2
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa
Signing time: Tue 05 Mar 2024 17:55:34 +0000
ROA not before: Tue 05 Mar 2024 17:50:34 +0000
ROA not after: Tue 04 Mar 2025 17:55:34 +0000
asID: 263244
IP address blocks: 138.99.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b7:3b:df:33:ba:74:8f:5d:96:ca:4c:3d:dc:7c:c2:22:4a:8b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Validity
Not Before: Mar 5 17:50:34 2024 GMT
Not After : Mar 4 17:55:34 2025 GMT
Subject: CN=586C106F1252051C4F5947245DB8DD5E94E81B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:f0:85:b1:2d:2d:2f:bc:ac:c7:6a:10:3a:
32:4f:35:69:54:5d:04:9f:56:80:3e:b9:0f:e8:a4:
de:c6:ef:9e:73:52:b7:9c:0f:90:d9:3d:95:35:f0:
7f:d3:05:96:46:97:28:1a:04:40:d9:c5:fc:37:ac:
7b:31:86:fc:d3:41:bd:ca:de:35:36:2a:20:7c:24:
fd:85:16:ce:51:63:7b:cf:86:39:cc:eb:b1:04:60:
a0:f8:0d:3c:8c:b1:dd:84:a2:72:53:3e:5c:0b:10:
5d:fd:52:75:88:94:81:1f:2c:72:5a:8f:26:6b:46:
22:34:4f:28:9a:ad:28:9d:18:24:95:53:d7:1b:42:
76:18:0d:d4:55:84:1a:22:58:ec:ea:c1:31:91:c0:
9b:7a:44:b3:78:fb:b1:aa:3a:00:7f:8b:1d:00:0e:
6f:b6:07:bb:5e:11:73:87:48:9b:2d:e4:13:eb:04:
ad:75:8c:8d:9c:52:2c:e5:db:23:55:d7:85:ce:0c:
c3:44:75:3c:64:27:e6:73:db:30:e6:64:8e:04:f0:
65:2e:10:37:79:98:25:56:4c:fc:d2:38:68:47:7b:
cf:78:10:19:64:de:88:72:2d:1d:eb:b9:50:a0:0b:
cf:ca:64:7c:e6:3b:09:f3:f5:c8:82:21:ea:3e:f7:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:10:6F:12:52:05:1C:4F:59:47:24:5D:B8:DD:5E:94:E8:1B:29
X509v3 Authority Key Identifier:
keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:c5:7e:62:6a:47:2b:a1:87:e7:75:ad:1b:fa:a1:f7:b8:d6:
8b:b6:43:35:83:88:ac:30:5d:ae:5e:5e:34:60:05:09:af:b6:
81:60:74:6e:81:35:5e:96:b6:34:f3:df:ae:67:60:00:ce:b2:
a2:a3:a5:0a:4f:89:90:66:b7:f1:3e:14:f4:22:f3:4a:a4:db:
c6:d5:db:90:16:38:ef:cd:6d:1c:d2:64:2c:29:db:c1:71:a7:
32:64:03:bc:4e:58:dd:79:f8:1f:94:a4:d0:ae:fd:83:b1:af:
f2:f7:04:4f:ad:b9:f8:bf:6b:3e:e2:d7:53:69:81:de:02:9a:
84:07:f7:c6:04:31:78:e4:8d:7e:0a:e2:d9:ba:bb:f6:f4:8e:
1c:c4:79:e4:89:eb:68:ea:4d:f3:7a:f8:97:fe:e2:66:fb:a7:
01:35:fc:f6:66:1d:2c:e1:f6:9f:90:c0:df:eb:67:2c:85:0c:
dc:03:00:6c:7c:0f:2f:8c:f2:63:89:3e:fe:b4:bf:69:10:42:
38:c3:4f:3d:98:ea:05:5c:14:87:8a:37:0d:7a:c4:09:65:1d:
6d:f7:8a:80:56:ed:74:b7:e1:33:c8:94:23:54:14:5a:3e:eb:
dc:63:19:e0:92:d5:35:6c:73:b1:4b:12:f1:b8:54:b4:5e:fa:
dc:3b:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:15:22 2025 by rpki-client