Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203233343837.roa
File: 3139322e3138382e35332e302f32342d3234203d3e203233343837.roa (raw, json)
Hash identifier: h+WCuIwkwr762IXhrd5fV8sGuIxqnI7fbtO4fkJKMls=
Subject key identifier: 27:4E:F9:D6:81:5F:6C:C0:BA:53:4D:47:06:82:5A:36:95:DD:81:2A
Certificate issuer: /CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
Certificate serial: 531B3BA64C8691EDF43631DF688353164AB60CAC
Authority key identifier: D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203233343837.roa
Signing time: Tue 05 Mar 2024 18:22:34 +0000
ROA not before: Tue 05 Mar 2024 18:17:34 +0000
ROA not after: Tue 04 Mar 2025 18:22:34 +0000
asID: 23487
IP address blocks: 192.188.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1b:3b:a6:4c:86:91:ed:f4:36:31:df:68:83:53:16:4a:b6:0c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
Validity
Not Before: Mar 5 18:17:34 2024 GMT
Not After : Mar 4 18:22:34 2025 GMT
Subject: CN=274EF9D6815F6CC0BA534D4706825A3695DD812A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a1:72:94:86:a9:04:31:d3:5e:63:c7:f1:36:
62:a6:7c:77:77:8a:2f:b5:68:0a:2e:f8:b2:1a:b1:
da:ae:43:9b:80:e9:17:8e:0d:e1:47:e0:19:c7:6b:
4c:75:d9:fc:27:f2:a7:d1:8b:98:20:6d:c7:11:91:
fe:51:c8:22:c2:f5:89:24:25:ad:80:7c:0a:31:e3:
97:24:0e:26:df:a3:3e:b2:60:dc:65:23:89:de:1b:
86:38:a3:79:bf:ac:dd:06:14:d3:5b:31:28:80:2e:
78:76:a5:34:c1:cd:53:bd:8d:e0:43:03:6d:1a:06:
5b:0c:c0:29:65:79:83:2c:ed:86:43:3c:bd:9a:5b:
12:b5:9b:97:ec:56:af:91:c8:2c:a6:32:b6:90:09:
4e:8e:5a:0b:5c:65:c1:fa:ae:3f:2c:93:cc:32:aa:
57:8f:3c:32:34:56:3a:ba:a4:b4:34:b8:fe:3d:23:
07:c7:da:bd:8d:85:08:a5:46:e7:34:ed:e8:93:55:
5a:b2:47:a1:d7:58:b1:7d:1f:b6:79:d1:3d:04:32:
c9:24:d2:3b:9f:aa:b4:fc:1a:5f:63:2c:45:07:8b:
db:d0:7e:92:b1:f1:d6:37:fe:79:d7:ab:e4:31:41:
9b:58:58:0c:16:3d:a8:f0:c8:44:19:75:1f:a2:f6:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4E:F9:D6:81:5F:6C:C0:BA:53:4D:47:06:82:5A:36:95:DD:81:2A
X509v3 Authority Key Identifier:
keyid:D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203233343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.53.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ef:cd:d4:98:a6:fd:56:0a:fe:20:3f:18:5f:d8:f4:ff:45:
d5:3a:b3:9f:b2:87:c0:d8:8b:b5:d6:42:d9:4f:10:9a:37:5f:
82:cd:9b:e5:46:7b:28:78:07:9a:f4:67:ea:33:f2:bf:59:7f:
60:72:5e:63:22:51:5b:71:b7:05:83:73:4c:04:f5:cb:7d:8f:
d2:b3:45:f1:12:93:6a:d1:f7:2d:d3:a7:67:45:bf:88:65:1e:
25:2d:06:18:dd:f4:69:4e:c5:40:3a:a6:09:c8:f7:ce:c1:b3:
44:bc:b6:ee:d0:0b:84:40:80:b2:16:42:62:e0:2d:57:55:81:
d7:2e:6c:78:20:23:ff:cc:bc:ff:2e:85:67:b6:10:5f:ca:64:
d5:49:04:76:0b:a5:f6:1a:80:5e:af:84:b0:dd:29:1b:35:3c:
92:bc:aa:04:20:30:03:62:01:25:e2:c6:df:87:28:95:8b:3f:
3a:27:56:d9:c9:23:af:ec:2c:da:1d:02:a5:f9:86:c4:22:39:
ff:8a:cd:2d:aa:75:1f:04:28:29:63:30:19:dc:b5:9d:7c:c7:
77:fe:58:7b:79:07:4f:b0:3b:26:b8:df:0e:a6:ae:92:be:4e:
b8:a5:17:e7:ff:b4:ce:65:fd:e1:50:22:45:d9:79:c4:1f:f3:
12:eb:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:19:07 2025 by rpki-client