Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133382e302f32342d3234203d3e20323732333233.roa
File: 3134382e3230382e3133382e302f32342d3234203d3e20323732333233.roa (raw, json)
Hash identifier: XjO7kQztLNuHWm5UYon4ktgZ8bzuCY/xzWym0TV8lsA=
Subject key identifier: AE:3F:E3:E4:D5:F9:EC:66:D5:BB:28:60:D5:89:2C:83:BB:95:BB:6B
Certificate issuer: /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial: 6AB4C2AE2633E07E046D2CF9D79BB6D02D4C0B32
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133382e302f32342d3234203d3e20323732333233.roa
Signing time: Thu 26 Sep 2024 23:50:01 +0000
ROA not before: Thu 26 Sep 2024 23:45:01 +0000
ROA not after: Thu 25 Sep 2025 23:50:01 +0000
asID: 272323
IP address blocks: 148.208.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b4:c2:ae:26:33:e0:7e:04:6d:2c:f9:d7:9b:b6:d0:2d:4c:0b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Validity
Not Before: Sep 26 23:45:01 2024 GMT
Not After : Sep 25 23:50:01 2025 GMT
Subject: CN=AE3FE3E4D5F9EC66D5BB2860D5892C83BB95BB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:f8:fb:1e:18:b8:29:da:96:93:0a:d1:1d:
84:10:ba:c9:cc:d9:da:1d:2e:8f:43:88:78:f5:1d:
63:03:d2:a8:da:4c:d3:3f:49:2d:0a:e3:72:4c:7d:
c7:64:97:88:83:4e:db:59:08:87:18:b8:ff:3a:74:
7c:cd:89:d1:38:39:4e:fc:de:01:9f:74:e7:71:e4:
03:90:b5:33:6d:3d:7c:63:87:0b:05:1c:37:e8:78:
fd:d4:35:7f:b6:60:7f:f3:55:b2:10:1a:b0:2b:8e:
59:1b:be:92:4d:69:cd:72:ed:3f:7c:7c:c1:ab:64:
53:2d:a6:87:4b:19:c5:26:b2:e4:df:a6:27:0a:c8:
cf:9d:9f:22:16:1b:9a:c9:d8:a2:c1:29:c8:b6:0d:
89:e0:ca:b4:b0:db:66:f9:4d:e7:f1:d7:eb:59:d2:
be:d8:cc:81:f2:f6:52:b6:08:9c:ce:cd:e3:93:4a:
91:bf:c1:42:82:ee:a8:cd:2b:6e:9b:c2:d3:1c:ce:
54:fb:19:57:d8:00:c0:8e:da:c4:12:3c:a1:13:0a:
58:13:e1:d4:63:fe:af:ea:76:3a:1d:2c:ff:a5:6e:
2d:3d:08:94:7f:f2:f1:6e:e3:fd:e3:ab:66:af:10:
cb:03:5f:f7:61:ef:af:9c:47:63:c9:62:7d:4b:13:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:E3:E4:D5:F9:EC:66:D5:BB:28:60:D5:89:2C:83:BB:95:BB:6B
X509v3 Authority Key Identifier:
keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133382e302f32342d3234203d3e20323732333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.208.138.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:05:74:a3:0b:e2:fa:fc:07:90:aa:de:2c:17:78:f9:02:c5:
f8:8d:c8:bf:6e:1a:b5:ed:64:3f:6c:68:8b:eb:c3:df:e1:87:
e3:89:55:c4:e8:b2:86:3c:4d:3e:9b:83:69:fc:27:ba:47:ff:
ba:36:93:e0:60:54:38:23:23:2b:e5:d6:b2:d1:95:03:b1:a5:
f1:41:33:62:7d:85:39:84:70:83:8d:08:47:19:a9:f9:b5:6b:
a0:e6:68:ba:58:f7:b9:a5:43:85:ce:df:d7:e0:29:5d:28:1e:
b8:90:e5:2b:51:88:6b:82:34:ce:d4:74:4d:20:bf:eb:83:9b:
7c:15:5e:b1:20:1d:aa:2b:85:e4:3a:d7:e7:6c:61:b7:96:d8:
d4:db:cb:8e:fe:51:18:54:75:82:fa:fe:a1:19:0e:5d:8c:f6:
28:4a:3a:68:7b:9f:fe:7c:29:bc:64:37:06:e7:3c:2c:8f:36:
84:59:0f:b0:95:8d:7d:17:a8:91:67:af:10:b5:45:ac:53:84:
b6:91:7c:7b:ec:3e:0c:46:2a:24:19:30:49:73:30:25:06:04:
e0:a8:df:7d:06:6c:e3:98:a2:8e:3f:09:ab:e9:ee:66:60:2e:
d7:d4:6b:0c:cf:00:7f:ef:91:dd:3a:2e:63:69:33:42:e7:b6:
58:dd:00:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:20:19 2025 by rpki-client