Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa
File: 3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa (raw, json)
Hash identifier: ErJc+KXSTA+0BVmOnBItawIg4HUOTgzR/+HFf822XRw=
Subject key identifier: 93:82:CB:5A:86:04:B2:3E:21:26:E0:BC:7C:CB:EF:20:A0:46:38:71
Certificate issuer: /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial: 2FF72862245CE253B28D19C757AFB0A1723EC2BB
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa
Signing time: Tue 05 Mar 2024 17:54:27 +0000
ROA not before: Tue 05 Mar 2024 17:49:27 +0000
ROA not after: Tue 04 Mar 2025 17:54:27 +0000
asID: 52228
IP address blocks: 186.159.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f7:28:62:24:5c:e2:53:b2:8d:19:c7:57:af:b0:a1:72:3e:c2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Validity
Not Before: Mar 5 17:49:27 2024 GMT
Not After : Mar 4 17:54:27 2025 GMT
Subject: CN=9382CB5A8604B23E2126E0BC7CCBEF20A0463871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:74:3e:3c:41:28:4f:3f:7d:aa:9a:c0:5c:
ca:27:c3:69:dd:20:8e:97:bc:5d:14:4e:bd:3a:b7:
6e:12:e6:28:23:44:96:f9:86:3a:0f:a0:41:82:7d:
06:7c:d7:62:ef:29:b3:33:7c:d2:38:92:44:48:cb:
dd:4f:e9:bb:4f:c0:24:42:b4:16:41:d3:de:98:27:
1a:b1:6e:92:ee:b6:f4:52:19:90:f4:44:f4:50:2f:
da:82:a9:b5:f5:19:61:dc:b6:b4:f4:c1:3a:bb:2a:
a6:13:fb:84:5b:ea:bd:45:6b:14:b2:c4:6e:07:86:
40:76:6f:d6:c2:af:89:ba:d7:6c:2a:c6:82:38:fa:
47:62:c4:45:01:cf:70:94:60:0f:45:21:1c:35:ba:
77:4e:3f:17:da:f2:c8:96:5c:a3:dd:ec:9a:3d:7c:
02:39:74:b0:fb:06:77:ef:ae:5f:b6:c4:cc:b3:78:
99:8a:ef:4e:af:0c:d9:0e:e5:01:a5:ff:99:e2:a1:
03:87:c1:1d:5b:b5:6a:ae:f5:55:21:8d:d0:a3:2f:
93:14:a5:74:5d:36:40:db:09:22:53:f5:b4:0d:2d:
b2:59:67:a3:8a:7b:04:e8:4e:f9:9d:c1:69:42:08:
07:9f:da:05:68:23:3c:0c:ea:28:de:a2:72:6c:4c:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:CB:5A:86:04:B2:3E:21:26:E0:BC:7C:CB:EF:20:A0:46:38:71
X509v3 Authority Key Identifier:
keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.159.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:be:65:d5:22:ec:7b:52:36:02:16:4a:06:29:1f:5d:54:8a:
11:32:35:34:5e:bc:ac:bd:0e:c5:d6:9e:46:59:7a:9b:81:18:
35:19:bb:fa:41:7c:f8:8d:aa:0e:ec:90:f6:4a:de:e1:ea:71:
3b:55:87:fe:f0:d5:96:56:af:4d:5c:c4:21:42:d2:2c:b9:24:
c4:33:bd:e4:6d:7d:01:ce:66:1c:6b:0c:76:5c:5b:7c:9f:dc:
c5:4a:8b:9c:12:64:ef:2c:4a:27:3d:e3:1e:2b:13:2f:11:1c:
bd:f1:34:52:28:08:f9:8b:d7:7b:e1:ab:82:fb:cd:bf:03:5a:
63:46:bd:bc:ab:0d:55:d5:22:0a:69:44:f1:9c:b8:bb:98:06:
8b:e3:23:3b:18:26:19:b2:da:0a:38:c9:bb:aa:30:a3:cf:01:
8d:79:d9:41:9f:3a:52:a0:36:f4:db:5a:cb:6a:75:2f:26:a5:
28:72:00:cf:9a:85:96:ce:9e:8f:3a:ab:4a:88:4a:dc:dc:73:
f8:bf:d9:f1:96:57:bf:1e:30:91:75:5a:da:b6:fe:0e:1f:ef:
6e:b1:92:46:cd:9f:47:7e:f1:1f:82:31:1e:f2:5c:ee:eb:24:
13:e0:a1:21:b4:fb:df:9d:06:67:cf:2c:eb:9c:f3:c6:5d:6e:
7f:29:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:30:36 2025 by rpki-client