Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa
File: 3133382e302e382e302f32322d3234203d3e203532333439.roa (raw, json)
Hash identifier: u9VjYK9+WbjWgvYUXZm/gfl8Xg4lm1A75TfKg8rZjQw=
Subject key identifier: 22:19:69:41:A0:93:C6:65:7D:03:63:FB:CC:5C:44:7A:E1:EA:3C:DF
Certificate issuer: /CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
Certificate serial: 55937E0BE1D66CD6B9402B07829672CA751AF356
Authority key identifier: 43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa
Signing time: Tue 05 Mar 2024 17:58:19 +0000
ROA not before: Tue 05 Mar 2024 17:53:19 +0000
ROA not after: Tue 04 Mar 2025 17:58:19 +0000
asID: 52349
IP address blocks: 138.0.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:93:7e:0b:e1:d6:6c:d6:b9:40:2b:07:82:96:72:ca:75:1a:f3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
Validity
Not Before: Mar 5 17:53:19 2024 GMT
Not After : Mar 4 17:58:19 2025 GMT
Subject: CN=22196941A093C6657D0363FBCC5C447AE1EA3CDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:08:e1:c4:f9:da:32:37:ed:53:b0:b9:10:
8d:21:33:15:a3:aa:31:96:e7:62:37:18:aa:1c:97:
a5:75:29:97:5d:d1:ad:b5:56:f7:5c:6b:2b:7d:e1:
f7:9d:da:93:8c:36:5b:7f:1f:c3:f1:b9:01:f9:cb:
6f:ae:62:e9:7e:99:e8:83:9b:9d:e8:d7:8a:f7:d5:
94:24:68:64:8a:60:1f:51:a9:1a:82:c2:3f:2d:72:
5e:33:3f:60:db:bd:19:7a:1f:07:ae:8a:26:eb:d7:
c2:e8:68:4d:9a:fe:73:b8:58:3c:56:20:68:cb:b2:
c0:36:1c:7d:ed:ac:69:16:a8:a5:6f:70:f1:e3:55:
2b:f0:d4:4a:85:1b:76:5e:b3:dc:78:83:9e:ad:2b:
fd:ec:bd:59:2c:b3:01:44:c6:75:e9:60:74:ba:65:
20:08:a1:23:9b:f7:69:9c:4c:e4:ed:36:99:38:fd:
34:5e:dd:e2:b7:16:a2:c5:b9:e1:df:d4:ff:1b:fb:
30:e9:a3:bc:68:67:20:84:d5:63:ff:ee:d8:9a:99:
0c:ae:d5:7e:2d:66:83:be:07:07:26:b7:3f:63:66:
6e:4b:59:32:5f:ca:bb:da:dc:e8:4e:ba:7f:b1:a1:
f6:ba:96:41:73:bb:0b:46:e9:9a:b1:eb:ee:cb:ac:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:19:69:41:A0:93:C6:65:7D:03:63:FB:CC:5C:44:7A:E1:EA:3C:DF
X509v3 Authority Key Identifier:
keyid:43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:e6:fd:ce:d6:cb:c1:4c:3e:4b:b9:03:bf:21:6f:9b:a9:d3:
92:e3:7b:7b:4f:ca:bc:22:d1:02:c5:2e:a4:5b:25:42:6c:03:
fb:e0:91:59:32:d9:f6:ac:ac:53:19:be:85:d9:57:4c:b5:91:
0d:ed:52:db:76:c0:a2:d2:ae:18:78:79:9c:c4:c5:3f:ef:e2:
90:8e:10:37:9f:39:94:f9:84:c5:76:12:e8:f4:cf:0a:40:af:
87:c5:56:d6:50:c3:ed:97:dd:e9:44:e1:77:de:73:e9:e2:55:
f0:14:04:0c:ca:81:90:df:60:66:eb:3e:ec:f5:9f:9c:ca:c0:
f2:e3:9e:60:1b:8f:0b:7e:7b:59:30:08:ce:43:6f:32:54:bc:
de:c8:02:49:85:9e:f5:90:6c:52:18:80:2f:75:e5:de:84:01:
87:5a:19:75:07:4d:cf:14:9b:30:54:78:c0:51:4f:a0:13:78:
62:0b:9f:2e:e2:34:82:99:0c:36:c7:27:34:bd:cf:bb:19:08:
4c:85:89:bd:dc:61:94:e2:a8:4e:bf:e6:5f:39:6c:ae:4b:85:
65:40:e9:0d:e8:67:1e:be:51:7a:9d:5d:cf:05:bd:ac:34:45:
a3:d5:6e:09:97:c9:e7:a4:a1:6e:12:c0:b6:d1:ee:f2:f1:5b:
3f:95:e2:8d
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUVZN+C+HWbNa5QCsHgpZyynUa81YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNENzE2Q0RCNTY1RUJFMzNCMjRGOTk1QkZCNzRGQkJF
MTQ5MzA5OTAeFw0yNDAzMDUxNzUzMTlaFw0yNTAzMDQxNzU4MTlaMDMxMTAvBgNV
BAMTKDIyMTk2OTQxQTA5M0M2NjU3RDAzNjNGQkNDNUM0NDdBRTFFQTNDREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsQjhxPnaMjftU7C5EI0hMxWj
qjGW52I3GKocl6V1KZdd0a21Vvdcayt94fed2pOMNlt/H8PxuQH5y2+uYul+meiD
m53o14r31ZQkaGSKYB9RqRqCwj8tcl4zP2DbvRl6Hweuiibr18LoaE2a/nO4WDxW
IGjLssA2HH3trGkWqKVvcPHjVSvw1EqFG3Zes9x4g56tK/3svVksswFExnXpYHS6
ZSAIoSOb92mcTOTtNpk4/TRe3eK3FqLFueHf1P8b+zDpo7xoZyCE1WP/7tiamQyu
1X4tZoO+Bwcmtz9jZm5LWTJfyrva3OhOun+xofa6lkFzuwtG6Zqx6+7LrNu5AgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUIhlpQaCTxmV9A2P7zFxEeuHqPN8wHwYDVR0j
BBgwFoAUQ9cWzbVl6+M7JPmVv7dPu+FJMJkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0EyOENDRkI4Njg1ODUwQkE5NzlEQzExRDE1OTUyNTI0
QTU0NkNDOTY2NzZERkIwQTA1QUY4QUFBQTJCRDdDLzAvNDNENzE2Q0RCNTY1RUJF
MzNCMjRGOTk1QkZCNzRGQkJFMTQ5MzA5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0Q3MTZDREI1NjVFQkUzM0Iy
NEY5OTVCRkI3NEZCQkUxNDkzMDk5LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdBMjhDQ0ZCODY4NTg1MEJBOTc5REMxMUQxNTk1MjUyNEE1NDZDQzk2
Njc2REZCMEEwNUFGOEFBQUEyQkQ3Qy8wLzMxMzMzODJlMzAyZTM4MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzUzMjMzMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAooACDANBgkqhkiG
9w0BAQsFAAOCAQEAHOb9ztbLwUw+S7kDvyFvm6nTkuN7e0/KvCLRAsUupFslQmwD
++CRWTLZ9qysUxm+hdlXTLWRDe1S23bAotKuGHh5nMTFP+/ikI4QN585lPmExXYS
6PTPCkCvh8VW1lDD7Zfd6UThd95z6eJV8BQEDMqBkN9gZus+7PWfnMrA8uOeYBuP
C357WTAIzkNvMlS83sgCSYWe9ZBsUhiAL3Xl3oQBh1oZdQdNzxSbMFR4wFFPoBN4
YgufLuI0gpkMNscnNL3PuxkITIWJvdxhlOKoTr/mXzlsrkuFZUDpDehnHr5Rep1d
zwW9rDRFo9VuCZfJ56ShbhLAttHu8vFbP5XijQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:18:44 2025 by rpki-client