Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139322e302f32342d3234203d3e20323633323138.roa
File: 3139312e39382e3139322e302f32342d3234203d3e20323633323138.roa (raw, json)
Hash identifier: pu9PUUBVhlBbuPFufoDQGNpfI9apmDMLBWbvn/tPfw0=
Subject key identifier: 0E:67:FD:98:B2:41:07:D0:8A:99:81:E4:24:EC:99:FD:65:FC:C6:44
Certificate issuer: /CN=D6578B90795CFC3357FE4AF953B5F071689073D0
Certificate serial: 4E7B138BDCA9ACCFDCE013208FEC8ED1EAD6F201
Authority key identifier: D6:57:8B:90:79:5C:FC:33:57:FE:4A:F9:53:B5:F0:71:68:90:73:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6578B90795CFC3357FE4AF953B5F071689073D0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139322e302f32342d3234203d3e20323633323138.roa
Signing time: Tue 05 Mar 2024 18:23:13 +0000
ROA not before: Tue 05 Mar 2024 18:18:13 +0000
ROA not after: Tue 04 Mar 2025 18:23:13 +0000
asID: 263218
IP address blocks: 191.98.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:7b:13:8b:dc:a9:ac:cf:dc:e0:13:20:8f:ec:8e:d1:ea:d6:f2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6578B90795CFC3357FE4AF953B5F071689073D0
Validity
Not Before: Mar 5 18:18:13 2024 GMT
Not After : Mar 4 18:23:13 2025 GMT
Subject: CN=0E67FD98B24107D08A9981E424EC99FD65FCC644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:8a:be:b4:6f:3b:4c:ab:3a:7e:e5:30:d1:
12:44:3a:08:02:78:bf:f2:e3:45:2b:ab:e4:50:e8:
1f:2c:aa:05:9c:46:b5:dd:bb:ac:e7:d5:12:cf:0f:
ad:e4:18:2c:06:5b:6a:e5:75:c6:de:11:01:5a:19:
48:cf:fc:bc:9a:21:b3:80:2e:65:41:07:ae:cd:f8:
f3:69:3f:0c:ee:c4:9e:82:44:e6:c5:9d:79:7b:d1:
e5:bc:c9:8a:b3:a1:c4:92:9b:9e:d2:45:6e:67:d4:
aa:85:fc:90:e6:7c:78:34:71:7a:69:41:c7:32:04:
10:53:a6:11:af:21:25:f9:da:65:13:11:14:37:ed:
8a:d7:a3:b8:c8:b3:ab:b0:f0:1d:b5:0a:c1:0b:de:
11:06:10:8b:6f:02:18:5c:37:27:54:ec:70:0c:9a:
38:5c:22:26:d3:4a:5e:bc:70:92:68:a2:0e:24:d6:
d3:e7:16:06:da:3d:1c:9f:36:96:a5:e9:ac:d7:84:
e1:b6:73:2e:94:32:7d:bb:15:1a:f3:85:53:dd:f8:
d0:0d:08:50:68:63:a9:d1:a0:21:ef:30:b0:8d:95:
29:52:8f:fa:aa:22:44:b6:db:33:8c:08:9d:19:33:
ec:fe:11:fd:28:31:93:18:ec:06:92:1f:37:0a:69:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:67:FD:98:B2:41:07:D0:8A:99:81:E4:24:EC:99:FD:65:FC:C6:44
X509v3 Authority Key Identifier:
keyid:D6:57:8B:90:79:5C:FC:33:57:FE:4A:F9:53:B5:F0:71:68:90:73:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/D6578B90795CFC3357FE4AF953B5F071689073D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6578B90795CFC3357FE4AF953B5F071689073D0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139322e302f32342d3234203d3e20323633323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.98.192.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3d:32:49:22:ac:6a:d3:a8:c9:cb:6f:9e:91:e4:27:8e:fd:
7a:e4:4a:d6:d5:55:94:7b:22:56:60:9a:0e:15:4c:2d:88:5c:
bd:75:7d:e0:67:14:ca:c9:0f:d1:4b:ac:06:b0:32:c3:58:23:
ad:4e:b9:8b:2c:3b:02:0b:19:f0:b6:f4:39:a6:e6:b5:14:0c:
38:55:91:03:e2:38:76:ca:77:24:56:f7:7a:67:ec:24:ef:05:
2a:12:d8:48:b3:7a:6c:d4:61:0b:73:cc:d9:9f:b5:e3:d0:1d:
53:d0:90:a0:d9:9b:6c:4c:2a:f9:fa:85:51:bb:0d:7e:9d:01:
6a:e8:9a:80:8a:b4:25:58:36:e1:a0:86:f3:ef:98:dc:c0:41:
69:13:01:0d:44:4c:d1:08:77:ef:77:e8:ad:00:70:3b:80:e0:
56:b1:19:4c:6a:f7:8f:ea:6e:d1:ea:7f:dd:7a:a9:a4:d9:13:
d2:16:1a:89:37:7e:a5:0b:72:ea:1f:a8:f7:71:d9:da:4c:2f:
47:a9:ac:6a:f0:77:5a:4b:ec:ee:4d:af:71:9d:78:83:92:74:
f7:b1:3f:49:9d:07:41:e3:c0:6d:5f:5a:70:10:23:3a:27:59:
dd:a8:63:e4:67:72:f9:2b:18:6a:dd:2f:cc:5d:a0:9a:02:ef:
36:d9:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:37:57 2025 by rpki-client