Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/3133382e3131382e3134342e302f32322d3234203d3e20323633373730.roa
File: 3133382e3131382e3134342e302f32322d3234203d3e20323633373730.roa (raw, json)
Hash identifier: E5jDx8a/oylV67USqCw333/9XZ3HWoNcm/f9r4WAYYk=
Subject key identifier: DD:B1:4B:C9:4A:C5:46:70:A1:35:A6:CE:04:D4:2A:06:8A:6D:32:4B
Certificate issuer: /CN=8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A
Certificate serial: 15249624D15DE06A86F41311CF883489053D0AA9
Authority key identifier: 80:99:61:1B:7B:F0:F6:A8:CA:74:DF:D3:74:E3:ED:F2:C8:9F:BD:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/3133382e3131382e3134342e302f32322d3234203d3e20323633373730.roa
Signing time: Tue 05 Mar 2024 17:42:03 +0000
ROA not before: Tue 05 Mar 2024 17:37:03 +0000
ROA not after: Tue 04 Mar 2025 17:42:03 +0000
asID: 263770
IP address blocks: 138.118.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:24:96:24:d1:5d:e0:6a:86:f4:13:11:cf:88:34:89:05:3d:0a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A
Validity
Not Before: Mar 5 17:37:03 2024 GMT
Not After : Mar 4 17:42:03 2025 GMT
Subject: CN=DDB14BC94AC54670A135A6CE04D42A068A6D324B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:42:1d:c6:82:7b:58:ca:5a:4e:7f:1a:7f:
1c:1c:9d:69:89:48:0b:e9:75:1a:db:18:33:93:76:
25:0e:ec:d9:f3:3b:fa:09:70:b6:94:c0:fe:94:16:
4a:f5:66:f5:90:e7:49:b9:e3:39:c7:cc:45:f7:e7:
f8:2e:48:49:17:04:2e:90:bf:73:ed:02:c6:79:6a:
10:74:40:1c:77:88:4e:ab:ad:f4:dd:37:ad:4c:92:
3f:ff:92:a1:17:82:f5:c6:9b:61:fa:6a:f8:98:b3:
fe:59:5e:5d:f8:bf:44:ba:62:50:2e:c3:34:a1:3b:
8a:31:fc:5a:2e:8e:1e:64:67:89:07:d6:00:69:54:
b3:71:d8:f9:13:8a:8d:6f:3c:b8:1f:43:8b:db:b1:
2b:a3:18:17:67:9f:39:eb:a4:b1:60:8d:c1:95:c2:
c5:21:e0:20:c5:e0:0b:e6:7c:b9:56:a3:c6:68:a5:
3f:60:42:7d:7d:1e:e7:48:ed:eb:11:3b:fa:28:8b:
68:fa:ac:63:41:0c:a4:4c:1d:66:05:12:88:3e:79:
d5:4a:1c:e0:20:75:04:7c:76:68:5f:93:82:d9:38:
35:fe:09:dd:a7:a0:61:9c:16:74:9f:a1:78:a6:b4:
0f:19:7f:80:01:aa:2d:97:96:7c:ba:2a:a0:48:ad:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B1:4B:C9:4A:C5:46:70:A1:35:A6:CE:04:D4:2A:06:8A:6D:32:4B
X509v3 Authority Key Identifier:
keyid:80:99:61:1B:7B:F0:F6:A8:CA:74:DF:D3:74:E3:ED:F2:C8:9F:BD:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/3133382e3131382e3134342e302f32322d3234203d3e20323633373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.144.0/22
Signature Algorithm: sha256WithRSAEncryption
01:47:57:ff:0d:1d:70:41:13:32:74:fa:8f:bc:88:46:2a:88:
4e:3c:39:df:0f:dc:07:41:e9:a0:b4:e4:37:e1:12:34:7e:95:
80:8f:14:22:4b:b0:a9:50:91:03:a0:ae:58:a0:cb:75:69:e0:
0e:ed:33:f6:d8:cc:9c:53:96:c1:a6:c3:a3:3a:cc:c7:e8:f0:
41:9d:49:07:84:3f:3a:f8:e4:d1:ad:bf:63:64:ad:83:d9:e5:
dc:f3:24:91:2e:5c:6c:8a:a8:02:ab:de:15:21:d7:75:7b:86:
5f:09:ef:82:17:09:bf:3d:9f:2f:d2:a4:c1:8c:eb:8e:9a:03:
34:bb:6e:c6:9f:e5:39:7d:3a:ca:c1:16:15:6a:81:fd:42:58:
50:4d:de:d2:92:c8:2a:10:36:72:a4:fe:ee:b5:47:ce:4f:98:
5b:1b:9e:33:ec:23:83:53:e2:5e:3c:a7:d6:c2:d6:e2:f6:95:
03:73:5e:89:ff:ba:6b:55:b9:9b:ab:94:09:8c:be:fd:36:77:
47:f0:3c:78:68:89:fa:bc:e2:9c:4f:68:4e:3f:af:9a:67:cf:
e5:05:ca:4d:fd:d8:8c:7c:55:07:1f:6d:61:44:74:77:e1:28:
e3:bf:50:de:2c:c5:20:79:b5:d4:9e:e6:51:26:48:b4:22:28:
ef:25:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:13:10 2025 by rpki-client