Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa
File: 3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier: KCXNr57XmbMuV9iahwbsWGFmZPP4j5+dC6SV77BRPdk=
Subject key identifier: EC:03:B3:73:26:5C:61:ED:0D:58:0D:57:21:27:B6:79:E6:AE:01:87
Certificate issuer: /CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Certificate serial: 1745E7A02E642701C66E001338E2206C5A699AB7
Authority key identifier: EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa
Signing time: Tue 05 Mar 2024 17:40:40 +0000
ROA not before: Tue 05 Mar 2024 17:35:40 +0000
ROA not after: Tue 04 Mar 2025 17:40:40 +0000
asID: 400039
IP address blocks: 138.99.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:45:e7:a0:2e:64:27:01:c6:6e:00:13:38:e2:20:6c:5a:69:9a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Validity
Not Before: Mar 5 17:35:40 2024 GMT
Not After : Mar 4 17:40:40 2025 GMT
Subject: CN=EC03B373265C61ED0D580D572127B679E6AE0187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:c7:30:97:b2:e0:00:c4:6b:df:ee:db:9a:
5f:db:bc:b8:56:fe:ca:f2:e0:30:c5:33:e4:4f:bc:
49:7c:cf:08:5a:92:ad:d9:6a:ca:aa:3d:8a:2c:13:
42:04:66:36:9d:7c:b5:1b:13:ba:e1:6a:7b:63:7f:
5b:ff:a5:c7:23:03:36:20:83:23:c3:bc:53:34:c0:
94:e0:f9:ef:bc:01:e0:cd:c5:b3:fb:f7:83:a5:1a:
5f:59:5f:b0:ba:9d:50:59:24:7c:a8:b2:99:7a:5c:
dc:12:f6:d2:cc:7d:fa:ba:cf:18:8e:ba:e4:77:2c:
ca:02:7a:f4:db:96:32:d9:6d:6e:4b:e3:85:ce:2f:
36:20:27:d8:67:b1:7b:c7:e3:e2:0f:e7:de:b8:42:
38:b8:83:25:1a:6c:bb:9e:b1:ed:8c:86:83:c1:a6:
8b:25:6d:8f:95:1c:23:8b:f8:21:74:f9:0d:7f:ea:
b4:7d:c7:fd:09:52:61:ea:c4:c2:3b:01:f2:5f:54:
79:68:7e:00:54:ac:7b:5e:10:96:51:47:85:aa:7c:
d9:e6:c7:5f:2a:20:f2:89:22:e7:cb:d6:ef:72:c9:
fa:dd:e0:fd:76:98:78:db:26:b9:29:f0:0c:e3:30:
90:7c:75:a5:0a:4c:b1:b0:02:4c:33:83:92:20:76:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:03:B3:73:26:5C:61:ED:0D:58:0D:57:21:27:B6:79:E6:AE:01:87
X509v3 Authority Key Identifier:
keyid:EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.144.0/24
Signature Algorithm: sha256WithRSAEncryption
97:94:e9:8f:30:3a:ad:67:4e:50:5d:44:d8:a0:14:0b:b3:35:
ef:dd:b5:f3:78:7e:9b:ac:5d:e8:66:6b:a0:93:6e:4e:e5:c4:
5c:00:31:6b:53:48:2a:9f:ba:e2:f2:14:00:1a:34:2f:7e:8c:
19:6f:42:74:92:3d:1d:3a:0b:4f:84:55:e7:68:b7:80:41:a6:
f3:de:6c:19:95:79:db:1a:bd:9f:29:6a:f4:9a:aa:f6:07:fa:
19:73:33:f8:1e:8d:24:f6:34:f3:49:72:25:43:ef:97:d3:5f:
fc:73:09:17:44:40:7f:f8:65:1a:d7:d8:11:9b:fe:de:53:69:
09:0d:a3:93:94:40:52:3b:2f:f5:74:ce:3e:e3:c1:75:e3:9f:
2b:fd:44:c6:22:aa:c7:db:e1:cb:f7:16:d7:93:07:21:41:ae:
3f:b2:ad:01:7e:e3:b8:7a:97:1c:24:69:ef:2a:d4:44:da:61:
ce:be:79:4c:89:0f:d7:36:6f:bd:0e:02:6d:54:4b:5c:6e:54:
75:18:e0:89:f8:d1:7f:d2:2c:3e:d8:d4:0d:df:05:2e:dc:49:
55:24:c4:02:b5:0a:41:69:1d:1e:53:3a:f0:1a:b8:2c:37:3c:
fa:98:aa:a3:59:98:f8:bf:23:8a:6a:56:5c:f8:9e:ac:66:3d:
27:78:66:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:08:13 2025 by rpki-client