Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/f5357bcf96874b8a2789f3f2e30e7ccdb3af98ac.roa
File: f5357bcf96874b8a2789f3f2e30e7ccdb3af98ac.roa (raw, json)
Hash identifier: 9VSPozTTpIKRaoL/lYUbn8bzUb7PnF4wHRbvEur+8JE=
Subject key identifier: A5:7F:AA:43:43:80:6B:2D:78:12:A6:0F:42:96:7C:79:4F:81:CA:0B
Certificate issuer: /CN=61678bdd44acebd11355abc32f79a39e0ab6e968
Certificate serial: 20412A
Authority key identifier: 53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/f5357bcf96874b8a2789f3f2e30e7ccdb3af98ac.roa
Signing time: Mon 12 Jun 2023 16:14:50 +0000
ROA not before: Sun 11 Jun 2023 16:14:49 +0000
ROA not after: Thu 12 Jun 2025 16:14:49 +0000
asID: 263824
IP address blocks: 138.185.76.0/22 maxlen: 24
170.254.16.0/22 maxlen: 24
2803:9a40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113834 (0x20412a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61678bdd44acebd11355abc32f79a39e0ab6e968
Validity
Not Before: Jun 11 16:14:49 2023 GMT
Not After : Jun 12 16:14:49 2025 GMT
Subject: CN=f5357bcf96874b8a2789f3f2e30e7ccdb3af98ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:da:c9:b7:b1:d9:80:22:2e:1e:3e:8d:75:
37:ed:55:a0:36:4f:70:f4:eb:e3:b0:df:97:05:99:
ea:b5:dc:87:e8:c3:11:c9:7d:16:3f:ed:fa:51:87:
bf:95:6a:f3:10:d6:dc:af:89:4e:a8:67:6b:27:05:
91:1e:db:28:99:64:98:fa:82:3c:c9:0f:1c:2a:4b:
c7:2e:2d:6d:89:71:f8:f0:16:27:14:7d:1b:a0:c1:
f0:0b:31:fa:cf:65:fd:fe:fb:e8:03:6f:fb:b3:28:
0c:a9:04:03:e6:cf:6c:2a:ba:52:0a:86:a8:a2:75:
5d:89:3a:2e:f2:71:7e:17:9f:7c:da:05:aa:77:7f:
ed:45:c4:00:ae:34:6f:56:2d:c2:2d:ea:ec:1c:2c:
c4:1c:02:17:b8:42:c0:fe:b1:54:55:d7:90:79:0b:
b3:d1:2d:e2:c9:af:dd:42:bc:4a:ab:63:ee:ff:57:
aa:f7:a8:69:f4:ef:85:bb:07:14:be:c3:11:84:3b:
34:41:bb:a2:01:74:8c:e4:62:79:bd:f0:a6:50:32:
15:c9:8d:e7:9d:88:84:f1:bc:79:a9:f6:e8:d7:f9:
a6:24:fc:1e:c0:4c:41:b7:0c:08:0f:d9:5d:8c:64:
23:df:ad:24:b3:34:7d:ad:29:78:8e:44:32:8b:97:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7F:AA:43:43:80:6B:2D:78:12:A6:0F:42:96:7C:79:4F:81:CA:0B
X509v3 Authority Key Identifier:
keyid:53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/f5357bcf96874b8a2789f3f2e30e7ccdb3af98ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/61678bdd44acebd11355abc32f79a39e0ab6e968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.76.0/22
170.254.16.0/22
IPv6:
2803:9a40::/32
Signature Algorithm: sha256WithRSAEncryption
50:99:80:8b:1e:01:7a:4c:98:37:0e:80:fb:42:10:33:23:e7:
2b:08:34:5d:67:23:31:73:5d:a5:bd:40:50:8a:1c:2e:5e:96:
61:b6:7d:57:87:e2:ee:c9:05:08:17:64:87:7a:10:99:77:d0:
d7:a7:9a:49:72:db:04:13:65:13:c2:95:45:65:06:bb:b3:64:
7d:58:61:fd:fa:3d:91:75:5d:38:5d:81:b3:a7:61:10:31:c0:
c6:8b:dc:96:ae:a6:ff:94:e4:f5:3f:7e:b1:a4:ed:44:7a:ec:
45:b9:a6:93:61:6c:85:fb:2a:96:d3:8f:6f:71:1c:89:0f:a5:
60:ed:f3:20:0d:b2:4d:3f:e7:bd:79:60:7c:f5:67:8d:a8:64:
17:cd:7b:cd:42:0e:9d:2f:3c:53:1f:c3:9b:de:e9:3f:b2:ad:
80:b3:3c:84:df:d8:72:e7:e9:b7:4a:d4:8e:fc:56:37:4f:19:
00:77:93:d2:18:4a:6f:1b:45:69:4d:fd:50:43:65:20:3c:d2:
fa:00:77:49:46:e8:93:dc:43:f1:38:63:42:f5:12:b1:fb:35:
be:03:35:33:be:21:ca:42:6d:47:ed:42:78:1b:b1:36:e3:46:
6b:de:6f:3b:36:56:0a:cd:7d:aa:e7:fa:08:61:c1:e3:53:1b:
be:ea:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:06:42 2025 by rpki-client