Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231362e302f32322d3233203d3e203232313232.roa
File: 3134382e3230392e3231362e302f32322d3233203d3e203232313232.roa (raw, json)
Hash identifier: KslEcgnp/640fWP680bPecFDGb0wJY1+7+E/BzzaEpo=
Subject key identifier: 42:45:28:DF:2C:AC:28:0B:C9:78:A0:E1:39:92:2B:8D:9C:12:3D:27
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 2A1A28B30CB26ACB9C08C5E163E14C35539588F3
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231362e302f32322d3233203d3e203232313232.roa
Signing time: Tue 05 Mar 2024 17:46:55 +0000
ROA not before: Tue 05 Mar 2024 17:41:55 +0000
ROA not after: Tue 04 Mar 2025 17:46:55 +0000
asID: 22122
IP address blocks: 148.209.216.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1a:28:b3:0c:b2:6a:cb:9c:08:c5:e1:63:e1:4c:35:53:95:88:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Mar 5 17:41:55 2024 GMT
Not After : Mar 4 17:46:55 2025 GMT
Subject: CN=424528DF2CAC280BC978A0E139922B8D9C123D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:d2:1a:dd:8a:03:b0:20:06:2c:a0:60:1b:
9c:d3:ef:18:d6:26:d2:0c:94:87:2f:94:b2:85:b6:
2d:73:ea:ad:19:ef:2e:7d:d9:bf:c2:c9:af:49:09:
4e:eb:18:f3:eb:2a:71:2c:c4:52:99:cd:69:71:b1:
91:71:f2:17:d8:69:fa:70:83:dc:10:d0:26:c3:07:
08:65:0d:51:5c:f6:0c:c7:a3:33:d9:96:d7:61:ea:
09:ac:65:0c:6a:16:ca:47:14:10:eb:84:df:3b:51:
fd:c4:50:71:c0:df:cc:fb:06:c9:25:c0:f0:ab:76:
76:12:7f:58:5c:7e:3d:43:97:38:02:d2:11:1b:36:
af:a9:a2:71:d5:23:53:5f:11:33:cf:05:08:b2:2b:
48:a0:35:af:02:d8:3e:15:77:e3:e9:ca:5c:c1:02:
2e:f3:a5:cf:6a:97:ed:3e:f3:d3:10:82:be:7d:a9:
80:60:68:5c:91:dc:70:5f:ae:dc:84:54:45:34:52:
91:8d:64:24:37:76:e6:31:21:f1:d1:b8:de:94:1c:
50:f4:32:c1:9f:ed:af:1b:dc:2a:2c:55:6b:01:d0:
eb:fe:9a:5f:72:b0:38:c7:54:48:28:8a:2f:63:10:
dc:41:5a:7f:d0:a8:ff:c3:7f:92:d6:71:b5:4e:1a:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:45:28:DF:2C:AC:28:0B:C9:78:A0:E1:39:92:2B:8D:9C:12:3D:27
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231362e302f32322d3233203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.216.0/22
Signature Algorithm: sha256WithRSAEncryption
15:2d:5f:24:2e:db:ec:e7:66:68:7d:16:a6:c1:0d:76:92:65:
3b:64:82:57:88:5a:10:a5:3c:eb:8f:b0:78:ad:9e:c5:9a:3b:
a6:3c:3c:0e:85:53:8e:c6:9b:18:bb:df:97:10:83:6f:f1:90:
4f:dc:10:2e:8c:03:1f:02:42:34:ac:ba:5f:51:49:fe:ab:f4:
49:25:49:c8:c7:b5:50:d0:81:46:e7:b9:32:c7:82:18:53:45:
88:b2:31:c7:bf:fc:f2:6f:b3:bd:fc:0e:aa:6d:56:ad:a5:95:
79:f9:e2:19:29:63:7d:96:ac:e7:4a:d0:b5:3e:bd:95:a1:5a:
ac:a2:4d:84:cf:33:22:65:f2:52:1a:02:e5:00:6f:33:fc:ed:
10:f8:04:c6:db:d7:09:2a:57:48:01:dd:47:89:f6:1c:1e:78:
83:5c:3a:59:46:28:22:52:eb:d7:4e:e2:0d:9b:37:cd:12:65:
a8:06:2f:00:50:45:e7:d7:73:36:a7:d9:1e:66:84:11:d0:74:
de:d5:9e:67:73:50:03:ad:3d:c8:76:cf:6c:34:6f:fb:f2:53:
cb:30:33:85:7b:12:36:03:30:b4:c1:be:f7:2b:82:2b:cd:13:
de:67:87:73:84:af:1b:fe:02:0b:b3:ab:01:ef:0a:74:88:36:
8e:0a:5e:ab
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKhooswyyasucCMXhY+FMNVOViPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNDAzMDUxNzQxNTVaFw0yNTAzMDQxNzQ2NTVaMDMxMTAvBgNV
BAMTKDQyNDUyOERGMkNBQzI4MEJDOTc4QTBFMTM5OTIyQjhEOUMxMjNEMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMNIa3YoDsCAGLKBgG5zT7xjW
JtIMlIcvlLKFti1z6q0Z7y592b/Cya9JCU7rGPPrKnEsxFKZzWlxsZFx8hfYafpw
g9wQ0CbDBwhlDVFc9gzHozPZltdh6gmsZQxqFspHFBDrhN87Uf3EUHHA38z7Bskl
wPCrdnYSf1hcfj1DlzgC0hEbNq+ponHVI1NfETPPBQiyK0igNa8C2D4Vd+PpylzB
Ai7zpc9ql+0+89MQgr59qYBgaFyR3HBfrtyEVEU0UpGNZCQ3duYxIfHRuN6UHFD0
MsGf7a8b3CosVWsB0Ov+ml9ysDjHVEgoii9jENxBWn/QqP/Df5LWcbVOGv0NAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQkUo3yysKAvJeKDhOZIrjZwSPScwHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMjMxMzYy
ZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjMyMzEzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClNHY
MA0GCSqGSIb3DQEBCwUAA4IBAQAVLV8kLtvs52ZofRamwQ12kmU7ZIJXiFoQpTzr
j7B4rZ7FmjumPDwOhVOOxpsYu9+XEINv8ZBP3BAujAMfAkI0rLpfUUn+q/RJJUnI
x7VQ0IFG57kyx4IYU0WIsjHHv/zyb7O9/A6qbVatpZV5+eIZKWN9lqznStC1Pr2V
oVqsok2EzzMiZfJSGgLlAG8z/O0Q+ATG29cJKldIAd1HifYcHniDXDpZRigiUuvX
TuINmzfNEmWoBi8AUEXn13M2p9keZoQR0HTe1Z5nc1ADrT3Ids9sNG/78lPLMDOF
exI2AzC0wb73K4IrzRPeZ4dzhK8b/gILs6sB7wp0iDaOCl6r
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:46:15 2025 by rpki-client