Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3133382e39372e3135362e302f32322d3232203d3e203532343439.roa
File: 3133382e39372e3135362e302f32322d3232203d3e203532343439.roa (raw, json)
Hash identifier: jVLdmBHHSOncJUoTopBntW47sGm5BTPwIAWntpUN9Pk=
Subject key identifier: 36:32:9D:7E:5C:DC:85:9A:D8:70:E9:F6:BE:3E:07:93:AE:85:F1:20
Certificate issuer: /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial: 37F35658EEED0CB917DF6EFA8911E0D475A2B29B
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3133382e39372e3135362e302f32322d3232203d3e203532343439.roa
Signing time: Tue 05 Mar 2024 18:06:41 +0000
ROA not before: Tue 05 Mar 2024 18:01:41 +0000
ROA not after: Tue 04 Mar 2025 18:06:41 +0000
asID: 52449
IP address blocks: 138.97.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f3:56:58:ee:ed:0c:b9:17:df:6e:fa:89:11:e0:d4:75:a2:b2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
Validity
Not Before: Mar 5 18:01:41 2024 GMT
Not After : Mar 4 18:06:41 2025 GMT
Subject: CN=36329D7E5CDC859AD870E9F6BE3E0793AE85F120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:94:be:49:d7:ab:6b:46:01:f0:68:f9:36:
73:5f:e8:5a:ac:4c:bc:80:03:c6:35:4f:15:13:39:
47:af:35:05:ce:ea:d8:25:7e:b3:be:72:ee:d8:7e:
18:d1:c7:21:a9:cb:cb:9b:bb:42:bc:de:62:83:ef:
0c:d1:04:64:a4:81:3b:0b:db:75:11:a1:5b:fa:6a:
b9:ce:a0:91:3f:2f:2b:5a:83:4d:1a:5e:ed:8b:89:
44:bd:5e:0f:28:e7:d7:f3:7c:e0:aa:31:1c:ab:5b:
f3:4b:1a:47:51:12:0f:e6:2d:2c:11:71:8d:4e:08:
b6:24:9e:81:9f:90:8b:0a:65:9e:b3:d4:f9:a6:86:
7b:30:c7:16:95:cb:f0:65:ce:11:d4:10:a9:9f:a3:
0d:9c:4d:09:1e:c6:67:3d:a2:e9:77:39:f3:18:26:
20:19:e8:9e:d7:44:91:71:5b:7c:6d:ce:4e:ed:10:
8c:54:83:92:9e:ef:7e:a9:5a:e0:b7:27:8c:20:a6:
56:c4:10:fa:33:ad:62:d6:4a:c9:7d:16:31:e3:5c:
d1:f4:af:aa:eb:da:a0:9c:ea:73:12:92:47:5a:77:
3d:ae:1c:6e:1c:6a:2e:35:e0:f3:1b:1c:26:c8:d8:
c6:12:54:18:62:27:59:30:08:ce:a5:49:a5:1b:e7:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:32:9D:7E:5C:DC:85:9A:D8:70:E9:F6:BE:3E:07:93:AE:85:F1:20
X509v3 Authority Key Identifier:
keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3133382e39372e3135362e302f32322d3232203d3e203532343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.156.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b5:1e:ef:da:b4:bc:2a:ff:90:09:ae:39:82:73:61:43:32:
5e:d9:68:d9:02:1e:9a:9c:02:31:a2:b4:79:85:5f:f1:84:ad:
9c:3f:7a:a3:e5:0f:4a:28:d2:d2:28:0e:bf:2c:bd:17:0b:a2:
c7:c2:2b:56:c3:d5:14:be:c7:6d:a2:f8:3d:fd:d3:43:3a:56:
7a:59:74:7e:27:51:aa:70:e8:14:3b:75:8d:64:2f:5c:d1:87:
04:38:67:08:81:b7:fa:a0:67:d0:04:5c:1b:76:3c:2b:42:fb:
27:cf:df:57:a3:82:66:ca:4e:2d:72:33:44:cb:ca:b8:a7:e6:
e3:b5:4a:67:2a:7a:2c:08:b1:fa:4b:4e:ea:8c:05:ef:6c:c7:
c2:e1:24:17:cb:06:8f:9f:75:b2:86:41:75:34:16:f4:4d:7e:
2f:48:73:4b:5d:de:6d:d6:34:ce:53:4c:ec:58:5c:ea:3e:28:
d8:1d:63:04:a8:1f:5f:29:e7:c5:26:eb:3f:91:8f:05:af:db:
f0:9b:26:1c:70:0c:9e:c1:46:3c:b3:f6:07:b8:c8:c6:21:0c:
ca:f7:10:68:56:0c:31:b5:a8:79:5b:90:3b:44:d4:71:b7:f6:
b8:97:cd:73:a0:a7:e3:8d:82:7b:ed:7b:d2:fd:b2:1f:21:af:
a9:33:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:17:50 2025 by rpki-client