Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa
File: 3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa (raw, json)
Hash identifier: hwcFuu1+kFA28czkIOtmo2jED/lM305rAsVBe4lDmU4=
Subject key identifier: 1F:94:58:32:3A:82:2D:A1:F5:C7:01:FC:49:EC:6B:51:82:C0:DA:CA
Certificate issuer: /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial: 729FAADD87E8CA521A6E2B505F7303DC68DCC878
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa
Signing time: Tue 05 Mar 2024 17:48:46 +0000
ROA not before: Tue 05 Mar 2024 17:43:46 +0000
ROA not after: Tue 04 Mar 2025 17:48:46 +0000
asID: 263823
IP address blocks: 138.219.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:9f:aa:dd:87:e8:ca:52:1a:6e:2b:50:5f:73:03:dc:68:dc:c8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Validity
Not Before: Mar 5 17:43:46 2024 GMT
Not After : Mar 4 17:48:46 2025 GMT
Subject: CN=1F9458323A822DA1F5C701FC49EC6B5182C0DACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:cf:98:a6:9e:e6:0b:ac:f8:a5:8d:10:57:
ea:b3:41:52:bf:3c:5c:2a:61:a3:9a:a4:4b:c0:dd:
e9:de:87:0a:2b:95:b4:f5:d1:66:ba:6e:a7:b4:7e:
38:98:22:86:47:ce:4e:07:e0:94:b6:af:ea:6f:44:
11:4f:c2:53:32:33:31:04:d8:5a:dc:d7:d1:a9:16:
44:34:a0:b1:f4:70:7d:26:32:85:75:18:8d:cd:34:
4a:37:08:b9:bc:5d:b2:7d:6a:c1:a9:ce:3c:1c:03:
aa:7c:9f:e2:90:ee:69:e6:fb:32:52:ce:d4:fb:fd:
f1:09:60:da:14:a6:13:26:86:ff:98:d5:b7:df:f3:
59:15:2d:45:c7:06:48:dc:d9:4e:f1:f2:3c:4a:1c:
dd:d3:8e:bb:38:3f:9f:1c:69:80:3b:ec:27:e6:b4:
dd:18:a8:d5:67:7c:5e:3d:73:3d:a3:64:05:1c:6e:
79:1b:4c:a3:00:34:d0:51:fd:30:a5:43:d1:5d:49:
bd:75:0f:6c:c1:02:f0:ef:57:a9:36:c5:0f:ce:30:
40:1e:45:b4:e6:60:e7:90:c3:0e:c8:ef:b4:3c:5d:
7c:e7:e8:01:67:e7:c5:a8:c5:98:6e:f9:ed:20:2f:
83:19:07:73:d8:b8:ce:34:80:5b:ca:c2:68:7d:14:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:94:58:32:3A:82:2D:A1:F5:C7:01:FC:49:EC:6B:51:82:C0:DA:CA
X509v3 Authority Key Identifier:
keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.216.0/23
Signature Algorithm: sha256WithRSAEncryption
20:4c:75:4c:73:5c:b7:4d:6f:2e:64:ac:2f:e9:51:dc:fe:c2:
b9:5d:fe:f4:fd:bf:48:cf:02:b4:60:97:0e:8c:d2:fd:2a:8a:
dc:83:79:e9:47:59:64:1f:b3:e8:59:a9:8e:4a:ad:7d:34:24:
96:f8:9b:f6:9f:6f:62:53:61:cc:99:88:fc:50:2f:b2:bc:d0:
31:2c:41:0b:0b:cc:d8:99:3a:c6:f0:08:a6:bf:e9:b3:f4:9d:
69:91:0e:08:b7:a8:8a:7b:be:12:44:9a:72:dc:75:0c:58:d1:
c1:e4:9b:07:43:41:cf:1c:b2:36:a8:b7:db:7a:14:b1:c1:2e:
85:8d:f9:b9:08:26:f1:24:42:69:db:36:f6:6b:87:43:ca:11:
fb:a3:1e:30:6c:ec:09:77:24:cd:68:93:5d:d2:0a:b6:b6:3f:
4e:02:1b:3f:67:e8:5c:94:d4:9c:13:fc:74:1d:91:3c:66:a9:
6c:07:1c:e6:98:ea:be:d8:55:2e:88:e5:98:65:29:ee:ba:b8:
49:31:44:5c:37:94:0c:d1:b9:92:af:da:5b:32:50:b0:bf:74:
6d:41:aa:be:90:9d:c6:55:e1:3d:5c:c6:90:09:73:c3:eb:fd:
3a:55:a4:e1:be:4e:cc:28:6b:df:b7:b8:5e:e8:b4:f2:22:6f:
62:0e:91:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:09:07 2025 by rpki-client