Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa
File: 3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa (raw, json)
Hash identifier: cZcyYdlU6p40X7wEE9BNNWSf6Pp+1XRzVeiM/LAH9hU=
Subject key identifier: 7E:A5:C1:85:D6:69:1C:03:80:E3:0D:24:7F:F4:34:36:5C:9F:74:A5
Certificate issuer: /CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
Certificate serial: 640DBF8C88DD9FA5604AFAE706DE4F3DE90123C3
Authority key identifier: 89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa
Signing time: Tue 05 Mar 2024 18:19:41 +0000
ROA not before: Tue 05 Mar 2024 18:14:41 +0000
ROA not after: Tue 04 Mar 2025 18:19:41 +0000
asID: 262207
IP address blocks: 186.64.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0d:bf:8c:88:dd:9f:a5:60:4a:fa:e7:06:de:4f:3d:e9:01:23:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
Validity
Not Before: Mar 5 18:14:41 2024 GMT
Not After : Mar 4 18:19:41 2025 GMT
Subject: CN=7EA5C185D6691C0380E30D247FF434365C9F74A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:bd:e0:6a:10:68:ad:50:f1:04:cd:12:b1:
25:0e:f0:d9:87:9a:e4:c7:26:95:cb:e6:48:b5:a9:
d3:8d:35:31:d3:80:79:db:ba:85:fa:e0:76:fe:6e:
9f:39:65:30:d7:ec:86:eb:50:6f:95:d3:c4:97:38:
41:4f:e3:7b:b2:ca:bc:c9:84:0e:97:0d:ae:ac:a0:
ee:a0:0a:13:da:4c:af:43:3d:a2:6e:13:34:5c:c3:
99:7d:e9:22:53:cc:32:e6:7d:62:92:9d:d5:99:8d:
0f:4c:df:6c:5e:98:45:74:98:34:30:df:5c:ec:92:
4d:f2:28:0a:6b:34:f3:e5:18:e0:38:d1:ee:57:8f:
c9:f1:e8:bc:41:e7:45:f1:e3:3e:52:b3:42:72:d7:
44:43:9f:2d:e4:8d:76:49:01:37:87:f9:ad:7d:b5:
9f:b0:9b:e1:40:0c:54:d3:cc:39:2c:b1:81:09:1b:
5f:a5:e5:51:b9:9a:14:f5:e5:08:e7:71:ed:93:0c:
d6:a1:6c:7b:93:a0:26:26:d6:d8:8c:ac:c6:b0:1a:
ea:cb:9f:2c:23:28:b8:55:6e:87:a0:98:8f:bf:6f:
10:50:57:61:a3:31:f7:dc:0a:6c:ff:7d:56:f8:ef:
91:9f:b0:8f:9c:25:e6:a5:67:98:4c:ee:5d:96:8c:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:C1:85:D6:69:1C:03:80:E3:0D:24:7F:F4:34:36:5C:9F:74:A5
X509v3 Authority Key Identifier:
keyid:89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.64.104.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:d1:ea:c2:ee:c4:a8:ca:4d:80:3d:b7:e9:20:25:2c:b6:18:
a9:14:26:93:24:d8:d4:8b:a4:d3:be:f7:b8:5f:13:a5:4f:8e:
11:53:fb:bf:a9:db:8f:79:d0:d2:3b:ed:4f:11:27:d3:67:80:
e0:f5:85:9f:e3:d9:70:28:1f:37:d0:07:11:67:63:ef:ba:35:
45:43:57:5e:0e:44:c9:32:61:c8:18:b0:29:80:5b:35:df:d8:
0b:81:14:f1:12:fc:02:42:86:58:99:fe:5f:2a:51:b3:c9:de:
ae:90:f3:f9:de:45:ff:7a:9a:b9:02:ba:8a:cc:c8:0c:16:72:
70:c0:dd:54:10:99:fd:94:32:00:31:4f:e0:70:ac:40:f6:88:
3f:17:19:1c:8d:cd:3f:a1:61:20:a4:5c:be:d0:9d:51:11:b1:
fa:f1:3f:35:e3:4f:52:7e:a9:f1:85:37:a7:d3:67:aa:25:7d:
40:3a:ab:aa:0e:c6:a3:b3:d7:94:64:fa:dc:36:c2:88:fb:d0:
ef:d8:90:a2:8c:c8:0f:1b:28:ff:b6:c6:15:bc:fa:f0:11:37:
f8:7a:bf:1c:15:7b:98:8a:10:83:ca:58:62:b6:30:81:ce:e6:
96:96:73:39:8e:82:1b:85:dd:79:8f:a6:d7:f7:bc:9d:a8:8a:
5e:d6:b3:0f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZA2/jIjdn6VgSvrnBt5PPekBI8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlCRTFCOTQ4RUFERkNGQ0ZERjQ1N0EwQTkwM0YzNTc4
NjVBMjU1MzAeFw0yNDAzMDUxODE0NDFaFw0yNTAzMDQxODE5NDFaMDMxMTAvBgNV
BAMTKDdFQTVDMTg1RDY2OTFDMDM4MEUzMEQyNDdGRjQzNDM2NUM5Rjc0QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Xr3gahBorVDxBM0SsSUO8NmH
muTHJpXL5ki1qdONNTHTgHnbuoX64Hb+bp85ZTDX7IbrUG+V08SXOEFP43uyyrzJ
hA6XDa6soO6gChPaTK9DPaJuEzRcw5l96SJTzDLmfWKSndWZjQ9M32xemEV0mDQw
31zskk3yKAprNPPlGOA40e5Xj8nx6LxB50Xx4z5Ss0Jy10RDny3kjXZJATeH+a19
tZ+wm+FADFTTzDkssYEJG1+l5VG5mhT15Qjnce2TDNahbHuToCYm1tiMrMawGurL
nywjKLhVboegmI+/bxBQV2GjMffcCmz/fVb475GfsI+cJealZ5hM7l2WjJz5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfqXBhdZpHAOA4w0kf/Q0NlyfdKUwHwYDVR0j
BBgwFoAUib4blI6t/Pz99FegqQPzV4ZaJVMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTY1NzU4RDE0RTBDOTcyRjhCQTU2MDMzMDI1MDdGRThB
Njc3RTcyMjNENzJBODIxMUFFNjJEQkQ1NTY1RTdELzAvODlCRTFCOTQ4RUFERkNG
Q0ZERjQ1N0EwQTkwM0YzNTc4NjVBMjU1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUJFMUI5NDhFQURGQ0ZDRkRG
NDU3QTBBOTAzRjM1Nzg2NUEyNTUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDE2NTc1OEQxNEUwQzk3MkY4QkE1NjAzMzAyNTA3RkU4QTY3N0U3MjIz
RDcyQTgyMTFBRTYyREJENTU2NUU3RC8wLzMxMzgzNjJlMzYzNDJlMzEzMDM0MmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMyMzIzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDukBo
MA0GCSqGSIb3DQEBCwUAA4IBAQAa0erC7sSoyk2APbfpICUsthipFCaTJNjUi6TT
vve4XxOlT44RU/u/qduPedDSO+1PESfTZ4Dg9YWf49lwKB830AcRZ2PvujVFQ1de
DkTJMmHIGLApgFs139gLgRTxEvwCQoZYmf5fKlGzyd6ukPP53kX/epq5ArqKzMgM
FnJwwN1UEJn9lDIAMU/gcKxA9og/Fxkcjc0/oWEgpFy+0J1REbH68T81409Sfqnx
hTen02eqJX1AOquqDsajs9eUZPrcNsKI+9Dv2JCijMgPGyj/tsYVvPrwETf4er8c
FXuYihCDylhitjCBzuaWlnM5joIbhd15j6bX97ydqIpe1rMP
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:18:03 2025 by rpki-client