Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35372e302f32342d3234203d3e203532353130.roa
File: 3133382e3231392e35372e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier: AmbxcWscwh6Kvep0MvncuSufX+nbasYgUffMaXw2zWU=
Subject key identifier: AD:BC:25:53:2B:CC:D7:31:AE:CE:F1:F1:4F:D7:FC:CE:5F:3D:FB:5A
Certificate issuer: /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial: 39B7E96C15AC0C8057C96DF620C2EA40E0204C22
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35372e302f32342d3234203d3e203532353130.roa
Signing time: Tue 05 Mar 2024 17:52:45 +0000
ROA not before: Tue 05 Mar 2024 17:47:45 +0000
ROA not after: Tue 04 Mar 2025 17:52:45 +0000
asID: 52510
IP address blocks: 138.219.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b7:e9:6c:15:ac:0c:80:57:c9:6d:f6:20:c2:ea:40:e0:20:4c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Validity
Not Before: Mar 5 17:47:45 2024 GMT
Not After : Mar 4 17:52:45 2025 GMT
Subject: CN=ADBC25532BCCD731AECEF1F14FD7FCCE5F3DFB5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4f:f6:7f:ff:bc:0f:5e:db:4f:24:89:70:69:
c0:46:26:02:2e:da:48:c0:66:55:a8:a8:97:dc:d9:
4b:3a:92:cc:5d:28:03:af:be:6f:cd:a6:f4:71:58:
45:87:e5:1f:93:17:b3:08:84:5a:10:ff:02:d7:57:
f5:ec:6c:28:e8:0d:2b:4f:85:cc:b7:62:ba:fa:be:
ab:53:1b:7c:97:d3:08:f8:0b:08:63:21:9c:98:15:
83:77:2f:c9:44:63:66:7a:5e:e6:58:98:61:94:fc:
8d:77:a9:b6:79:da:6a:76:f5:ab:cb:65:04:62:bb:
3d:a9:e8:5c:58:c9:01:26:07:e1:29:99:03:ac:fa:
f4:c7:8c:a3:f1:91:0e:0c:d3:da:a0:5c:ac:4a:10:
09:01:7d:78:a0:25:be:97:e3:56:1b:39:05:a3:da:
fb:b5:a1:fe:b9:10:88:89:c0:64:72:a1:0c:f8:c6:
98:a1:35:ed:eb:e1:d3:d0:77:e0:e8:71:c0:8f:f9:
9a:f5:e7:86:8f:9f:22:28:4c:ee:fa:a8:69:64:06:
3a:cf:ce:2f:dd:05:18:72:b4:ac:84:f0:52:85:6b:
8f:db:f9:14:6a:19:b4:e4:56:57:02:9a:73:7b:ba:
cf:1f:ed:ea:0c:35:c9:c0:74:0f:d4:34:17:2e:84:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:25:53:2B:CC:D7:31:AE:CE:F1:F1:4F:D7:FC:CE:5F:3D:FB:5A
X509v3 Authority Key Identifier:
keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35372e302f32342d3234203d3e203532353130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.57.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cd:a5:12:6a:f5:0d:c8:51:bf:a9:8a:61:66:cc:fc:1b:a0:
fb:ed:09:e6:4f:52:d0:c9:86:a6:23:04:d2:c6:b8:32:eb:8e:
27:3a:7c:5a:af:22:da:73:61:15:97:4a:ef:8d:99:1d:cd:a2:
9b:c0:15:98:07:74:4d:66:a6:38:5a:f3:4e:3e:c9:c2:80:16:
18:da:ac:02:77:93:64:d8:85:ce:33:1c:d0:a4:fc:28:7a:17:
b0:63:b8:cf:1d:16:7e:f4:f9:24:e4:e2:b3:4b:17:13:3e:05:
6a:c2:a0:a7:68:a9:e5:0b:e3:c8:cb:d9:23:7d:4e:5e:b1:69:
48:8a:9d:57:9b:d7:3b:f2:ef:4f:bd:4f:16:89:02:91:14:02:
77:12:5b:14:90:09:a1:fe:bc:2a:26:74:9b:4b:76:05:64:8b:
a0:c1:36:44:21:77:76:92:eb:a0:df:ba:62:4a:c9:22:9f:a2:
1a:e6:a0:be:c3:0f:ea:fe:db:b2:df:22:36:99:a7:0f:13:83:
b4:b3:f8:a5:6b:c5:67:c4:81:fb:0e:a6:82:18:8d:f0:fc:5a:
16:ba:ec:ea:0c:9e:4d:16:f4:18:e5:90:b5:24:29:55:96:b8:
53:72:04:0e:76:60:b1:96:75:20:15:f2:fe:81:b1:55:0b:d0:
27:09:9d:41
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUObfpbBWsDIBXyW32IMLqQOAgTCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYzNkQ0Q0JFREJFN0EwRjRENDNEQzE2MjFERTNEMTkz
NjY0NUYzRDAeFw0yNDAzMDUxNzQ3NDVaFw0yNTAzMDQxNzUyNDVaMDMxMTAvBgNV
BAMTKEFEQkMyNTUzMkJDQ0Q3MzFBRUNFRjFGMTRGRDdGQ0NFNUYzREZCNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYT/Z//7wPXttPJIlwacBGJgIu
2kjAZlWoqJfc2Us6ksxdKAOvvm/NpvRxWEWH5R+TF7MIhFoQ/wLXV/XsbCjoDStP
hcy3Yrr6vqtTG3yX0wj4CwhjIZyYFYN3L8lEY2Z6XuZYmGGU/I13qbZ52mp29avL
ZQRiuz2p6FxYyQEmB+EpmQOs+vTHjKPxkQ4M09qgXKxKEAkBfXigJb6X41YbOQWj
2vu1of65EIiJwGRyoQz4xpihNe3r4dPQd+DoccCP+Zr154aPnyIoTO76qGlkBjrP
zi/dBRhytKyE8FKFa4/b+RRqGbTkVlcCmnN7us8f7eoMNcnAdA/UNBcuhEatAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUrbwlUyvM1zGuzvHxT9f8zl89+1owHwYDVR0j
BBgwFoAUJjbUy+2+eg9NQ9wWId49GTZkXz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTAyNUFERTYzQTkxNzc4OThEN0UxRUYxMTAzMDg5RTgy
RDE4Q0UwNTQxMDUwRjRDODQ5NTE2QTYwRjc3NDIzLzAvMjYzNkQ0Q0JFREJFN0Ew
RjRENDNEQzE2MjFERTNEMTkzNjY0NUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjM2RDRDQkVEQkU3QTBGNEQ0
M0RDMTYyMURFM0QxOTM2NjQ1RjNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREUwMjVBREU2M0E5MTc3ODk4RDdFMUVGMTEwMzA4OUU4MkQxOENFMDU0
MTA1MEY0Qzg0OTUxNkE2MEY3NzQyMy8wLzMxMzMzODJlMzIzMTM5MmUzNTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM1MzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrbOTAN
BgkqhkiG9w0BAQsFAAOCAQEABc2lEmr1DchRv6mKYWbM/Bug++0J5k9S0MmGpiME
0sa4MuuOJzp8Wq8i2nNhFZdK742ZHc2im8AVmAd0TWamOFrzTj7JwoAWGNqsAneT
ZNiFzjMc0KT8KHoXsGO4zx0WfvT5JOTis0sXEz4FasKgp2ip5QvjyMvZI31OXrFp
SIqdV5vXO/LvT71PFokCkRQCdxJbFJAJof68KiZ0m0t2BWSLoME2RCF3dpLroN+6
YkrJIp+iGuagvsMP6v7bst8iNpmnDxODtLP4pWvFZ8SB+w6mghiN8PxaFrrs6gye
TRb0GOWQtSQpVZa4U3IEDnZgsZZ1IBXy/oGxVQvQJwmdQQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:07:21 2025 by rpki-client