Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36362e302f32342d3234203d3e203237373733.roa
File: 3138362e33322e36362e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier: GynZlgOU8cZ78aPoGN5QLcRz2ydZOy9IwvTvCS22qaA=
Subject key identifier: A2:7E:E9:7F:1F:E8:68:D7:61:3B:F1:1B:44:41:4D:0F:2D:AD:57:C2
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 3E35AF7859E9364DFED32459CA9682B729B93D45
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36362e302f32342d3234203d3e203237373733.roa
Signing time: Tue 05 Mar 2024 18:10:45 +0000
ROA not before: Tue 05 Mar 2024 18:05:45 +0000
ROA not after: Tue 04 Mar 2025 18:10:45 +0000
asID: 27773
IP address blocks: 186.32.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:35:af:78:59:e9:36:4d:fe:d3:24:59:ca:96:82:b7:29:b9:3d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Mar 5 18:05:45 2024 GMT
Not After : Mar 4 18:10:45 2025 GMT
Subject: CN=A27EE97F1FE868D7613BF11B44414D0F2DAD57C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:92:41:fb:a9:a2:f9:f1:7b:58:ed:f6:ae:
f9:ff:6c:f7:5b:2e:ba:56:78:f2:4a:eb:11:a3:18:
c0:18:1b:eb:d6:2e:ce:2b:46:2d:ed:25:d8:88:c3:
66:66:65:30:3d:7c:18:b0:4f:7d:da:20:42:e5:d3:
0e:72:d1:cb:af:4e:c5:1a:b7:70:e7:00:eb:41:2d:
9b:ba:28:32:c5:b0:be:9a:ff:cf:34:fd:d8:91:54:
fb:5a:01:f4:10:61:c5:0a:6f:8f:e0:45:22:c1:6a:
ee:1d:dd:00:c0:ce:0d:4b:02:14:bd:46:98:96:1f:
32:d8:bd:8f:86:54:c7:24:7e:59:48:6b:a2:7f:c5:
b7:89:4a:5a:b3:f2:88:a2:63:a4:4b:80:be:06:3f:
69:2b:cf:de:08:bf:00:b2:c3:64:71:ba:f8:a6:1a:
6a:16:15:b7:d3:d1:58:33:60:39:9b:79:18:50:40:
85:31:23:0a:25:fd:4b:e2:69:62:1d:6e:f9:4b:bd:
7f:45:6b:06:37:b0:e5:0c:0f:47:91:00:ac:22:07:
cc:53:4d:1b:cc:c2:da:e3:21:ce:ef:57:b0:8c:95:
91:36:bb:89:52:1c:b4:d0:52:d1:af:f4:7e:59:0b:
c4:03:de:3a:e1:e1:9c:86:c0:8a:e2:3e:7a:cb:bc:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7E:E9:7F:1F:E8:68:D7:61:3B:F1:1B:44:41:4D:0F:2D:AD:57:C2
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36362e302f32342d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.32.66.0/24
Signature Algorithm: sha256WithRSAEncryption
18:46:63:c1:9e:80:a9:87:5d:be:15:a0:4c:dd:f4:69:2b:dc:
72:c1:7d:2a:8b:fa:13:5f:c1:78:cc:5d:ac:4e:88:43:2c:82:
22:72:2c:cc:04:89:09:a8:20:13:a8:40:31:81:96:a3:21:c0:
68:78:d2:8d:79:21:44:ab:0d:03:9c:49:cd:ab:e1:46:a8:a2:
f3:69:00:22:f3:9d:75:dc:97:d2:43:56:e6:b5:18:c3:92:0b:
33:95:57:0a:e7:94:b8:dd:fa:60:41:b5:59:41:57:de:ef:31:
ae:ed:06:7b:b7:83:78:12:4f:c3:8b:0a:2d:33:6b:97:44:33:
b7:bc:e2:e1:a0:1b:68:e7:7b:a4:76:49:41:f4:19:f2:de:3a:
1b:d3:69:55:38:23:0b:07:1b:f2:cd:b6:c0:4f:40:f7:21:cc:
41:8c:68:9d:b6:73:14:f4:57:50:a7:30:c0:11:19:3e:38:59:
9a:b5:4f:db:68:d1:2d:4d:4e:58:39:aa:32:61:81:45:02:59:
2e:44:e0:44:4f:b7:73:55:25:ad:bf:1c:b5:99:38:dd:5a:22:
7a:81:0c:52:d5:35:ed:cc:32:17:ae:4c:29:73:b7:49:7b:12:
ab:41:f6:a7:49:59:ad:e7:35:85:8a:bd:2f:c1:21:0e:29:fe:
d4:5f:24:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:34:59 2025 by rpki-client