Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa
File: 3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa (raw, json)
Hash identifier: ywzWbQQ9NrtZvSMc+4GiNCqlSBWgGMpq8Ich85dYpnw=
Subject key identifier: DB:13:A1:28:17:33:DF:BB:BC:01:BF:D5:9B:17:18:14:01:56:AA:E4
Certificate issuer: /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial: 61BBD49D45467076669B400A4D54985378132862
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa
Signing time: Tue 05 Mar 2024 17:58:17 +0000
ROA not before: Tue 05 Mar 2024 17:53:17 +0000
ROA not after: Tue 04 Mar 2025 17:58:17 +0000
asID: 28114
IP address blocks: 186.183.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:bb:d4:9d:45:46:70:76:66:9b:40:0a:4d:54:98:53:78:13:28:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Validity
Not Before: Mar 5 17:53:17 2024 GMT
Not After : Mar 4 17:58:17 2025 GMT
Subject: CN=DB13A1281733DFBBBC01BFD59B1718140156AAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:dd:29:c5:66:c5:cb:59:ee:20:45:cf:a4:
90:a2:18:a4:dc:c6:7f:4b:b0:3c:f8:cf:aa:84:e8:
e3:93:22:7b:fd:7e:8e:c2:2f:e7:ae:3a:40:2f:10:
df:3f:7c:73:62:11:7c:f4:c2:da:56:e2:a6:e9:bc:
1c:c1:f1:61:94:dc:e8:46:af:67:a8:8d:f8:11:77:
9a:07:b4:ff:11:fc:43:50:cd:94:4d:b6:13:8f:16:
5c:00:14:71:c0:67:56:98:49:f0:c9:cb:6f:76:2a:
63:ce:14:c8:c4:2a:05:89:1f:85:4c:e3:19:2a:62:
91:58:46:7a:48:d1:85:7c:42:07:54:69:5d:f0:7b:
ea:62:92:06:f8:46:bf:f4:ae:c7:27:48:ce:36:a4:
49:77:b7:89:4c:dc:ab:20:d9:37:a9:c6:99:a7:35:
3c:95:2e:ce:dd:49:9f:0f:b7:8e:3f:c7:db:f5:27:
8a:cb:df:4f:60:57:e7:14:91:78:40:aa:16:81:f6:
25:b3:e4:4a:5e:06:15:c5:e0:83:da:78:a9:37:18:
ad:af:dc:50:e1:ee:ba:39:33:94:4d:b9:4e:ec:63:
a6:cc:18:f7:e7:2d:6c:2d:d5:29:2e:a0:85:63:eb:
a0:66:fc:d7:eb:24:08:94:da:3b:f8:4f:b9:fc:71:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:13:A1:28:17:33:DF:BB:BC:01:BF:D5:9B:17:18:14:01:56:AA:E4
X509v3 Authority Key Identifier:
keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.183.120.0/21
Signature Algorithm: sha256WithRSAEncryption
21:10:9a:55:5a:bd:c1:6b:86:bc:ca:a1:a2:6e:82:98:49:2d:
52:d6:b2:5b:88:a0:43:a0:b5:58:c0:f0:1d:66:1f:f6:b3:72:
44:1e:71:cf:8f:ba:04:07:54:de:a8:52:54:e5:6a:6c:a9:08:
36:d8:ac:8a:3f:de:e1:98:b2:fd:ad:64:1f:99:af:18:7d:7f:
f9:e8:60:06:94:c3:a7:6f:17:80:06:fd:0c:e3:c5:5d:3a:63:
51:c3:af:1e:49:9e:a2:20:68:19:fb:61:6c:95:63:59:33:b2:
32:cb:8b:cc:26:93:92:76:6b:de:84:76:b9:67:2a:22:93:f1:
65:29:d6:3e:9d:1c:09:1a:e8:9c:97:50:3e:cc:db:09:fa:a9:
73:45:94:2c:bd:48:95:e6:a0:cf:9f:14:81:21:cc:d1:43:e3:
1b:9d:04:ed:8d:8e:fc:60:0c:f0:f0:e9:59:ce:ce:a9:ea:20:
2b:3a:9f:b8:a8:38:02:a2:b0:9f:dc:70:5c:50:7c:e2:3d:6a:
55:ec:ad:b0:bb:d5:b3:91:c1:66:14:85:77:1f:e2:56:bf:6b:
6e:ff:b9:71:90:d8:f3:8b:3a:54:68:bd:a4:fd:be:d7:b5:c2:
2b:6c:c4:7c:67:2a:e3:1b:5c:6d:27:01:5c:96:f7:71:5b:09:
b2:37:93:9e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYbvUnUVGcHZmm0AKTVSYU3gTKGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNDAzMDUxNzUzMTdaFw0yNTAzMDQxNzU4MTdaMDMxMTAvBgNV
BAMTKERCMTNBMTI4MTczM0RGQkJCQzAxQkZENTlCMTcxODE0MDE1NkFBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0t0pxWbFy1nuIEXPpJCiGKTc
xn9LsDz4z6qE6OOTInv9fo7CL+euOkAvEN8/fHNiEXz0wtpW4qbpvBzB8WGU3OhG
r2eojfgRd5oHtP8R/ENQzZRNthOPFlwAFHHAZ1aYSfDJy292KmPOFMjEKgWJH4VM
4xkqYpFYRnpI0YV8QgdUaV3we+pikgb4Rr/0rscnSM42pEl3t4lM3Ksg2Tepxpmn
NTyVLs7dSZ8Pt44/x9v1J4rL309gV+cUkXhAqhaB9iWz5EpeBhXF4IPaeKk3GK2v
3FDh7ro5M5RNuU7sY6bMGPfnLWwt1SkuoIVj66Bm/NfrJAiU2jv4T7n8cQgrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2xOhKBcz37u8Ab/VmxcYFAFWquQwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzgzNjJlMzEzODMzMmUzMTMyMzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzEzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDurd4
MA0GCSqGSIb3DQEBCwUAA4IBAQAhEJpVWr3Ba4a8yqGiboKYSS1S1rJbiKBDoLVY
wPAdZh/2s3JEHnHPj7oEB1TeqFJU5WpsqQg22KyKP97hmLL9rWQfma8YfX/56GAG
lMOnbxeABv0M48VdOmNRw68eSZ6iIGgZ+2FslWNZM7Iyy4vMJpOSdmvehHa5Zyoi
k/FlKdY+nRwJGuicl1A+zNsJ+qlzRZQsvUiV5qDPnxSBIczRQ+MbnQTtjY78YAzw
8OlZzs6p6iArOp+4qDgCorCf3HBcUHziPWpV7K2wu9WzkcFmFIV3H+JWv2tu/7lx
kNjzizpUaL2k/b7XtcIrbMR8ZyrjG1xtJwFclvdxWwmyN5Oe
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:27:03 2025 by rpki-client