Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e203437383639.roa
File: 3133382e33362e31362e302f32322d3232203d3e203437383639.roa (raw, json)
Hash identifier: gaEFs2oYebt3N/A4LP3wrrN2exGBqkbMySBCFbGPJPU=
Subject key identifier: 5A:6B:A1:85:45:BC:52:77:D3:63:E6:1E:B1:C4:2D:E3:6A:A2:20:12
Certificate issuer: /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial: 4CF28643259D33A8E650F3C2B1683996DB74F24E
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e203437383639.roa
Signing time: Tue 05 Mar 2024 18:11:16 +0000
ROA not before: Tue 05 Mar 2024 18:06:16 +0000
ROA not after: Tue 04 Mar 2025 18:11:16 +0000
asID: 47869
IP address blocks: 138.36.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f2:86:43:25:9d:33:a8:e6:50:f3:c2:b1:68:39:96:db:74:f2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Validity
Not Before: Mar 5 18:06:16 2024 GMT
Not After : Mar 4 18:11:16 2025 GMT
Subject: CN=5A6BA18545BC5277D363E61EB1C42DE36AA22012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:2a:02:41:51:3e:6b:d5:ad:a9:d6:89:87:
24:82:9e:09:7c:00:7c:16:73:2c:5b:2e:a3:5d:2a:
da:66:33:19:a8:53:4f:61:ed:8a:49:cb:4c:33:39:
c2:ac:58:18:04:97:4f:32:32:b2:c1:dd:a5:ed:d8:
80:4c:a5:ed:4f:98:41:43:74:2b:1b:6b:45:a0:0a:
59:23:c6:94:d5:6a:2f:8f:ab:ea:63:23:f1:b6:62:
5f:d4:cb:51:67:b5:32:f9:e9:64:d1:b7:14:c7:7c:
cb:e4:95:7f:06:71:53:78:82:8d:d2:fa:bf:e2:f5:
19:dc:59:18:22:f4:46:22:b8:51:7f:13:ed:c3:a5:
43:03:2a:d5:83:3f:e3:b1:c9:03:d8:a1:0f:6f:00:
0e:9c:49:bc:1b:1e:5b:b9:75:4d:c3:79:d6:a5:eb:
85:a9:4a:ac:64:80:20:a6:52:03:a7:33:1a:fa:83:
99:b4:d4:39:7b:b5:23:9a:a4:10:67:06:06:95:df:
46:3c:fe:be:32:9c:a5:92:bd:c9:0e:1d:6e:3f:b4:
42:ab:4e:ad:49:9b:5a:c3:b5:2d:47:79:83:b9:73:
5b:d7:a7:57:8d:f8:61:63:26:5e:a7:ff:d5:e2:ec:
0e:23:c9:07:26:13:12:c4:60:fe:20:bb:2d:f7:7c:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:A1:85:45:BC:52:77:D3:63:E6:1E:B1:C4:2D:E3:6A:A2:20:12
X509v3 Authority Key Identifier:
keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e203437383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.16.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:34:b2:d9:4d:3a:44:5f:2e:11:b8:07:39:09:c1:2d:61:57:
8c:f6:ca:01:ae:ba:e3:2a:cb:a3:95:02:30:6a:ca:a4:33:50:
82:5a:58:d3:60:ef:c9:07:05:0e:1b:7d:b3:82:a7:7d:9e:ad:
7c:0d:90:de:bc:67:59:c2:72:69:01:74:c0:b5:85:cf:22:fc:
65:77:97:4b:51:7f:1b:b6:85:00:34:54:ca:fe:ad:3b:4b:4a:
92:3f:55:27:bb:92:3e:d5:39:40:8e:b2:e9:88:50:1f:e6:05:
b8:2e:af:69:18:0c:8d:47:ff:64:7d:85:75:23:d0:14:82:71:
5d:8d:81:73:79:35:1a:78:7b:5b:5c:4b:75:a3:f1:21:0b:a8:
61:87:c0:80:8d:23:c1:bd:17:6f:35:85:3c:89:8c:71:b1:f5:
25:93:87:57:4e:80:ba:08:7d:ec:06:78:2c:cb:75:03:c6:43:
f1:e0:0c:34:da:bf:af:63:4b:ab:91:dc:16:fc:c1:d3:23:3a:
ee:05:e9:c5:b3:ec:cc:a2:4c:02:8c:fe:eb:fa:19:1c:8d:cf:
9f:46:02:8c:e6:d1:6b:f9:13:8b:f5:48:ef:d2:6b:28:e5:c2:
b1:4d:6b:71:be:eb:53:81:60:f0:bb:a4:89:f7:ba:12:9c:5a:
1a:59:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:15 2025 by rpki-client