Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa
File: 3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa (raw, json)
Hash identifier: fYCfx5q6EzM0SUn0LEJET5VWJ4N9E0m0JImJiRoZ+jA=
Subject key identifier: 73:D2:CB:29:EB:46:C9:34:0E:6E:90:82:64:DD:79:DD:E4:E7:D0:28
Certificate issuer: /CN=35D619733A3D3A776B2D5FB84305186B942E249A
Certificate serial: 0935F6FDBF19C67EDBEDF21196BB076CD1ADE8B7
Authority key identifier: 35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa
Signing time: Tue 05 Mar 2024 18:00:44 +0000
ROA not before: Tue 05 Mar 2024 17:55:44 +0000
ROA not after: Tue 04 Mar 2025 18:00:44 +0000
asID: 270156
IP address blocks: 138.255.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:35:f6:fd:bf:19:c6:7e:db:ed:f2:11:96:bb:07:6c:d1:ad:e8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35D619733A3D3A776B2D5FB84305186B942E249A
Validity
Not Before: Mar 5 17:55:44 2024 GMT
Not After : Mar 4 18:00:44 2025 GMT
Subject: CN=73D2CB29EB46C9340E6E908264DD79DDE4E7D028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:fd:57:5c:4d:e1:8f:bd:9f:67:44:62:54:
73:41:f6:3f:5c:62:7e:c1:58:c3:b2:e3:34:9f:14:
70:9c:bb:25:7c:d5:5d:13:4c:34:63:ab:b7:13:3b:
38:01:3d:c8:f8:be:5b:eb:2d:c5:02:b3:fe:db:03:
1b:74:67:bc:ab:d2:75:69:a8:49:9f:6a:7f:94:11:
bd:90:53:9c:31:6c:2f:70:e6:7f:14:a4:ce:a6:6d:
d5:ea:d9:a3:0b:8b:9a:ec:33:e6:ff:d8:f0:30:ca:
65:41:ea:bc:9c:7b:8f:78:da:2c:87:f5:de:47:2b:
59:55:f7:9e:94:94:a2:53:35:40:0d:ba:8e:56:a6:
22:d6:f4:bc:34:c0:a1:42:5d:68:7c:2e:5a:b9:c1:
d7:05:e8:b5:c3:a0:e1:e8:9a:5e:75:f4:00:49:29:
ed:e9:bf:89:ab:46:ea:da:47:97:c0:54:35:01:9d:
38:d8:93:e7:f3:58:29:08:04:fe:97:ea:2b:62:55:
4a:35:c4:50:27:b6:36:b7:e4:67:df:87:45:4d:d9:
e6:c2:95:1f:6e:ca:34:43:8c:25:72:1c:f8:0d:90:
e3:5c:4b:5c:ae:19:31:10:ee:fd:55:0d:19:36:02:
4c:e9:fe:34:98:db:4f:56:c9:b9:88:d1:ac:60:93:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:CB:29:EB:46:C9:34:0E:6E:90:82:64:DD:79:DD:E4:E7:D0:28
X509v3 Authority Key Identifier:
keyid:35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.116.0/22
Signature Algorithm: sha256WithRSAEncryption
29:3a:c2:8e:52:a8:2f:0b:98:30:29:7b:1b:f2:ae:a0:ac:ab:
8f:db:63:76:1c:1c:fe:31:bc:be:cc:8a:80:21:f7:7c:59:40:
2c:fc:39:f3:5a:b3:bf:8a:79:4f:ed:86:0a:53:a3:ae:42:15:
fa:ba:ce:25:94:a3:07:ed:ce:d2:cc:0d:80:b0:3b:48:3f:aa:
c2:01:4a:88:30:d6:1d:9f:cc:72:38:3a:3d:2b:b0:af:4b:3e:
73:6e:ce:44:ab:66:65:35:b1:1a:9b:63:e9:40:0e:15:ca:7b:
40:80:f6:4b:92:fc:a9:1d:4c:d5:4b:dc:fd:ec:a3:4b:8e:5b:
e8:96:df:08:13:c4:b3:38:6e:c8:b7:fc:b1:86:e2:ba:cc:b5:
2a:5b:35:12:55:c8:37:9d:cd:fe:ec:7e:a5:ba:a1:2c:f3:0a:
15:31:cd:92:b0:00:87:ee:cf:8c:37:1a:81:b1:bb:06:8c:c7:
06:e9:de:bc:39:fb:4d:5a:e1:fc:f3:49:5e:49:95:a4:4d:9e:
90:f5:62:04:59:e0:31:c4:b1:4c:83:28:d4:78:5a:c1:a2:89:
29:e2:da:30:d7:10:55:d5:b4:42:56:c8:70:12:5d:5c:67:45:
6a:99:8e:94:56:76:e3:95:76:8d:a7:a6:52:a0:e0:8a:fe:eb:
28:3f:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:36:15 2025 by rpki-client