Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa
File: 3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa (raw, json)
Hash identifier: 4UX1GylIsJJBdlzCB8bUnAQsKxVb/cqlQp9PLyYNdfs=
Subject key identifier: 29:3A:81:5E:95:8B:01:53:42:8C:1B:CE:C3:30:9A:61:96:3D:93:95
Certificate issuer: /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial: 14B45EA2B6CE152FD9D6191C814E56A1AB1B2307
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa
Signing time: Thu 07 Mar 2024 16:20:00 +0000
ROA not before: Thu 07 Mar 2024 16:15:00 +0000
ROA not after: Thu 06 Mar 2025 16:20:00 +0000
asID: 28317
IP address blocks: 138.121.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b4:5e:a2:b6:ce:15:2f:d9:d6:19:1c:81:4e:56:a1:ab:1b:23:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
Validity
Not Before: Mar 7 16:15:00 2024 GMT
Not After : Mar 6 16:20:00 2025 GMT
Subject: CN=293A815E958B0153428C1BCEC3309A61963D9395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:22:17:c9:e6:b7:c8:5c:50:b2:c8:78:02:
c8:48:d6:87:ba:41:ea:bc:2c:e5:83:48:64:0b:d6:
ce:6e:59:c4:65:8e:dc:30:60:ed:3a:6b:89:c9:d6:
7f:b4:01:ee:f0:e1:1b:c4:86:e9:61:e7:b4:32:ad:
a0:87:d4:66:0d:1b:c5:ac:37:8f:ee:b9:1d:d4:07:
bf:38:45:52:5e:74:95:9d:2e:82:36:d2:78:7a:c3:
55:bc:0e:e4:ff:66:36:6a:0b:ac:57:3a:6e:ea:dd:
6c:16:b5:87:5b:f6:5c:37:9c:f9:45:17:72:25:3e:
6b:55:a3:68:2a:7c:23:4d:bf:0c:54:7c:3f:06:c8:
bd:df:57:7c:e5:fd:50:4e:9b:3e:d8:d0:82:ab:1d:
fc:f8:bb:ad:e1:e3:02:bc:c7:b3:37:ef:9c:f5:de:
8b:ef:3f:16:2c:22:56:13:97:e5:45:5c:81:0a:62:
8d:16:5f:cb:b9:18:1f:89:68:05:60:9a:d0:38:58:
ce:db:eb:75:0f:50:e1:69:1f:e6:fe:2d:46:8a:a0:
b9:e2:d2:00:99:9b:a4:a3:c4:21:e0:8d:c9:df:00:
d6:72:ca:bf:0c:d1:cf:18:b5:9e:00:7c:60:75:a7:
dc:b3:08:52:48:94:49:42:13:4d:7d:d0:20:4f:76:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3A:81:5E:95:8B:01:53:42:8C:1B:CE:C3:30:9A:61:96:3D:93:95
X509v3 Authority Key Identifier:
keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.140.0/22
Signature Algorithm: sha256WithRSAEncryption
72:b9:e6:ef:d6:dc:15:32:e1:33:08:c0:52:d5:92:80:7b:8e:
9e:c7:06:35:2a:e7:bf:91:e6:ac:3a:9d:62:5e:e7:de:8b:fe:
7b:a2:21:2b:83:eb:ba:cb:54:1c:ac:0d:da:6a:6a:97:34:af:
09:32:5a:34:4e:58:f2:af:b2:c4:1c:76:18:70:35:a1:ba:67:
5f:86:2a:64:6c:c1:92:a7:81:40:fb:f7:57:95:b4:63:14:e9:
6d:63:02:c2:32:87:31:9d:33:d7:99:82:45:1b:dc:7d:0a:6b:
94:34:7b:06:a3:85:dd:db:2a:10:c9:1a:96:68:10:ea:72:6d:
63:d2:9e:79:48:eb:5b:59:75:3f:6e:63:6a:9d:77:08:62:ce:
f8:8e:74:e0:1a:e0:94:ba:53:da:4f:5b:e6:ee:a1:01:c6:c5:
50:6f:3f:e1:9d:af:fb:e1:83:b5:3b:b6:53:00:fd:ac:10:7c:
ff:ba:d3:ee:9f:8a:ae:7b:b4:f0:90:52:a4:93:4b:c7:12:6b:
99:4c:36:21:f3:57:3b:a9:2a:eb:7c:7a:72:98:c1:e9:bb:54:
07:19:26:cd:02:45:62:7c:be:dd:2d:8b:6d:79:46:51:da:dd:
d2:90:ca:b1:3d:00:d8:14:47:03:e6:f7:02:8b:9c:8c:05:cb:
b6:52:94:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:55:27 2025 by rpki-client