Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3133382e3231392e3134302e302f32322d3234203d3e203532323333.roa
File: 3133382e3231392e3134302e302f32322d3234203d3e203532323333.roa (raw, json)
Hash identifier: l79NIVKj2DRv4CsMtXzFXZlmfDBdYQngAxvxzIS27xs=
Subject key identifier: 8E:9A:51:3F:5A:08:97:96:B6:D4:1C:18:37:B8:9C:01:DD:FD:2E:B6
Certificate issuer: /CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
Certificate serial: 34706531C28AC34420B3E59109423C77367B8EAE
Authority key identifier: D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3133382e3231392e3134302e302f32322d3234203d3e203532323333.roa
Signing time: Tue 05 Mar 2024 18:17:53 +0000
ROA not before: Tue 05 Mar 2024 18:12:53 +0000
ROA not after: Tue 04 Mar 2025 18:17:53 +0000
asID: 52233
IP address blocks: 138.219.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:70:65:31:c2:8a:c3:44:20:b3:e5:91:09:42:3c:77:36:7b:8e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
Validity
Not Before: Mar 5 18:12:53 2024 GMT
Not After : Mar 4 18:17:53 2025 GMT
Subject: CN=8E9A513F5A089796B6D41C1837B89C01DDFD2EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:c0:41:83:57:a1:c1:e6:a3:78:3f:af:9e:
c8:59:4e:af:57:92:67:83:ba:69:da:7a:f4:13:ab:
cd:f0:d0:a6:7e:60:9a:aa:62:60:ae:f0:2e:a3:78:
ac:64:a6:c3:ef:4f:c8:54:62:56:f6:e8:05:76:36:
33:a3:cf:77:ac:0e:e4:bd:de:c8:a3:72:be:20:a0:
4e:ee:81:4f:a0:aa:1d:3e:40:e5:d4:7a:9d:bf:9b:
f3:b9:c1:17:a7:78:26:01:7f:38:47:ac:9e:04:74:
72:23:1e:fb:ad:a6:f0:da:df:c7:5d:46:dd:d0:de:
66:ac:2e:37:5f:7a:b8:7f:33:f8:b5:cc:4b:6b:0a:
a3:2f:40:f2:d4:4e:b8:ba:38:63:36:7a:8d:43:7d:
73:ac:8f:1c:86:7c:a2:d2:91:2d:a9:3d:5d:6a:b1:
91:c0:54:0b:2f:31:5c:ac:6c:cc:71:53:27:16:45:
da:a7:48:31:e9:a3:ac:6f:e3:5c:01:f7:06:12:30:
3d:6c:df:8e:c2:19:31:4f:b2:76:9c:08:40:35:c5:
b7:66:9f:65:f7:ec:d5:28:df:25:a3:4b:d3:1a:35:
e7:97:29:8d:f8:67:6b:fc:cb:37:01:05:af:cd:ee:
e2:99:e6:10:08:1c:d8:f3:43:a4:f3:1b:1f:f7:c1:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9A:51:3F:5A:08:97:96:B6:D4:1C:18:37:B8:9C:01:DD:FD:2E:B6
X509v3 Authority Key Identifier:
keyid:D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3133382e3231392e3134302e302f32322d3234203d3e203532323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.140.0/22
Signature Algorithm: sha256WithRSAEncryption
81:4e:9b:41:b3:81:d9:ae:26:fe:77:d5:c2:52:ed:1f:83:a0:
a5:15:e2:80:2c:4e:67:1f:0f:57:f4:89:b8:3d:82:17:e2:0b:
2d:1f:bc:58:b0:82:be:85:50:58:af:1b:01:b1:4f:a8:0e:76:
73:62:fd:ca:4b:31:d0:cd:5a:5c:ed:55:8d:27:05:24:e2:89:
22:af:b3:21:e2:6a:72:3d:a2:8e:bc:77:9d:57:e7:d5:88:3a:
fd:0f:d5:80:63:a0:58:b1:c7:ee:b1:dc:95:b0:c7:59:46:18:
5d:45:65:68:5f:77:b7:6c:14:5b:1f:ad:9f:a1:5d:7c:22:8d:
64:bd:95:d0:5a:3e:1b:ba:21:b2:6e:6b:ef:c3:b4:8d:2d:72:
c1:84:2d:d6:29:74:32:74:81:ad:8d:99:a5:5a:5e:61:c8:f9:
3b:4e:29:bf:51:07:1e:bc:3f:0d:53:3e:d0:62:01:b5:ac:5a:
f1:93:17:9e:fe:88:1c:0d:56:d7:d3:6c:7d:21:e7:4b:53:70:
78:77:3c:cd:ab:a4:7b:2c:b4:d7:46:46:36:d6:71:a3:37:17:
32:0b:76:9e:c4:66:18:5b:ea:24:b8:69:e6:d4:e8:e3:6d:0f:
ce:58:bd:28:71:17:2e:4f:4a:40:81:99:f9:ab:b8:36:54:87:
93:fd:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:16 2025 by rpki-client