Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38342e302f32322d3232203d3e203232313232.roa
File: 3134382e3230392e38342e302f32322d3232203d3e203232313232.roa (raw, json)
Hash identifier: MH7CwhQbuqMggvLhQSnIYliDXJBRGZVXzU8Zn3DUt+k=
Subject key identifier: 00:FE:A8:EF:5E:53:74:E9:9D:18:5D:8D:5B:45:B7:9C:39:29:DE:FE
Certificate issuer: /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial: 5BB3217E4B753EB37EC18A30ABDF6AF0CCDED2F3
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38342e302f32322d3232203d3e203232313232.roa
Signing time: Tue 05 Mar 2024 17:46:44 +0000
ROA not before: Tue 05 Mar 2024 17:41:44 +0000
ROA not after: Tue 04 Mar 2025 17:46:44 +0000
asID: 22122
IP address blocks: 148.209.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b3:21:7e:4b:75:3e:b3:7e:c1:8a:30:ab:df:6a:f0:cc:de:d2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Validity
Not Before: Mar 5 17:41:44 2024 GMT
Not After : Mar 4 17:46:44 2025 GMT
Subject: CN=00FEA8EF5E5374E99D185D8D5B45B79C3929DEFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:60:8f:60:bf:f6:c2:59:14:da:75:5a:49:
ca:73:7d:58:ee:25:e2:fd:6c:71:5d:74:20:ed:d3:
f7:54:cf:59:3b:5f:90:3b:60:22:2e:eb:9b:9c:86:
ed:60:dc:b6:19:61:d0:46:8f:1e:22:4e:f9:ac:62:
1c:b7:66:09:a7:06:f0:b2:54:6d:af:5d:07:13:63:
fc:1a:72:66:7e:0f:16:fd:8b:85:75:d4:23:ba:3d:
63:98:6b:05:be:e7:aa:d8:6c:ca:eb:95:59:42:44:
7d:5d:8c:2b:53:0d:fd:7c:a9:e3:2e:6c:27:81:99:
bb:80:fd:7c:4d:e5:fe:d0:6b:9c:e0:04:be:64:28:
7c:31:fe:43:78:ac:0e:96:18:20:67:b5:26:f1:68:
f1:2a:08:b8:5f:9d:0d:42:68:e3:be:6a:77:a9:cd:
12:f7:cc:cd:6d:aa:eb:32:fe:04:0f:aa:3e:85:7b:
e4:b9:17:c4:b1:3d:7e:61:73:df:6b:fb:d4:d3:05:
d6:ba:59:5c:bd:21:0a:0e:44:e8:cd:be:17:66:a7:
6f:80:2a:c0:78:e1:30:52:ac:87:41:1e:a3:a0:81:
2f:2a:e9:02:90:4b:84:c8:8a:b5:1f:52:d0:16:ba:
cc:f4:4d:9b:ce:c8:79:7f:b9:06:a7:63:18:e3:4b:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FE:A8:EF:5E:53:74:E9:9D:18:5D:8D:5B:45:B7:9C:39:29:DE:FE
X509v3 Authority Key Identifier:
keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38342e302f32322d3232203d3e203232313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.84.0/22
Signature Algorithm: sha256WithRSAEncryption
14:65:05:e5:38:48:56:29:1f:1c:9e:09:12:ed:24:2b:f9:aa:
9f:a7:2f:cc:47:0b:8a:42:84:1a:08:ca:e5:3f:33:44:5a:05:
78:c3:39:42:06:34:98:be:d7:cc:12:83:af:40:3d:62:58:71:
5a:2b:2b:72:6f:17:6a:b5:0a:8c:f3:c0:6f:20:d0:46:98:cd:
ff:0f:7a:9d:33:bc:20:2c:b9:32:f6:b8:b8:db:3a:52:0b:a5:
d2:c4:5e:3e:7b:d6:d1:44:0a:b9:fd:f5:b5:eb:4f:29:cc:4e:
18:d2:58:88:12:5f:95:e3:b7:af:69:9f:2d:b5:40:32:7d:93:
e6:8b:a0:77:fb:13:12:f4:d4:d7:17:69:ca:66:47:9d:67:64:
21:48:f1:c6:c2:fa:59:7d:71:ba:7d:45:a0:0b:ad:67:9c:83:
7e:d2:a0:b5:b3:c9:3a:52:e6:5f:fd:9e:3a:6b:21:a8:fd:73:
cc:c4:32:ed:8f:11:7b:57:38:d4:3d:dc:d1:07:19:f3:ab:4d:
85:50:da:8c:7a:b4:a8:2a:8a:8d:91:2c:b9:64:24:a3:ac:1a:
96:5c:53:3e:bd:5a:2f:0d:bb:d3:f7:fa:83:03:c9:ed:4b:28:
38:c6:0e:b7:9e:98:49:c0:1a:e2:96:cb:54:7b:40:42:5c:94:
72:15:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:02:21 2025 by rpki-client