Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/eb06861d9ae3c5ef354ca38b0c9087d60feb834b.roa
File: eb06861d9ae3c5ef354ca38b0c9087d60feb834b.roa (raw, json)
Hash identifier: Q8mivSYbT566jQonDxa6DQahDEL0yyp9mr2LVPKuaMM=
Subject key identifier: 4A:8F:5C:74:F3:55:04:84:B0:DE:2C:DC:0C:77:D8:4D:18:74:D6:65
Certificate issuer: /CN=cec1e6d8a1f33037dace1b9778780270c02863f0
Certificate serial: 1721FE
Authority key identifier: A6:DC:CB:1E:24:96:F6:51:2D:02:3C:A1:39:91:D2:85:E5:63:D2:2C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec1e6d8a1f33037dace1b9778780270c02863f0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/eb06861d9ae3c5ef354ca38b0c9087d60feb834b.roa
Signing time: Wed 05 Apr 2023 18:51:35 +0000
ROA not before: Tue 23 Mar 2021 14:31:59 +0000
ROA not after: Tue 24 Mar 2026 14:31:59 +0000
asID: 263790
IP address blocks: 138.121.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1516030 (0x1721fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec1e6d8a1f33037dace1b9778780270c02863f0
Validity
Not Before: Mar 23 14:31:59 2021 GMT
Not After : Mar 24 14:31:59 2026 GMT
Subject: CN=eb06861d9ae3c5ef354ca38b0c9087d60feb834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:2c:f9:29:28:30:e3:13:b3:3c:72:8e:39:
72:14:eb:b2:b8:2c:2f:07:f5:d8:24:a4:4d:95:ef:
b6:cb:31:4f:f7:03:71:d1:6d:48:a1:d7:7e:00:fd:
fa:92:f5:cb:ad:d6:d1:9d:ee:e9:50:a5:eb:ff:96:
71:79:9e:ab:aa:41:bf:7b:c9:55:0b:1d:66:08:85:
d5:db:ce:89:b5:62:e8:a8:73:d3:b9:2d:e5:74:b3:
7a:84:70:6a:f4:76:0c:78:da:f3:52:f0:9e:e0:be:
56:65:eb:11:bd:da:7f:c0:2d:a8:89:a6:0f:32:7a:
25:97:c4:5e:e5:a9:22:dd:e5:d8:c9:d6:92:af:49:
69:6a:e4:14:74:cd:9e:4a:41:b2:7e:ed:52:b1:b6:
e2:06:b7:31:40:26:ab:26:da:aa:38:e9:7c:ea:5d:
17:67:7a:ed:08:bc:67:aa:61:40:0b:75:9a:29:1e:
9d:09:4a:5a:a6:90:cd:0c:57:11:a4:20:b4:f5:96:
e1:21:18:1c:55:22:08:6a:1d:fa:59:5a:c2:c4:df:
2e:1c:6a:c6:04:d4:91:c8:79:b6:b5:7b:ba:2f:3e:
89:ea:3f:0a:68:24:f2:92:11:f5:85:c0:85:b7:3b:
bb:d0:97:c7:6f:9a:a7:f7:4d:65:40:66:8c:ae:1a:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:5C:74:F3:55:04:84:B0:DE:2C:DC:0C:77:D8:4D:18:74:D6:65
X509v3 Authority Key Identifier:
keyid:A6:DC:CB:1E:24:96:F6:51:2D:02:3C:A1:39:91:D2:85:E5:63:D2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec1e6d8a1f33037dace1b9778780270c02863f0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/eb06861d9ae3c5ef354ca38b0c9087d60feb834b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cec1e6d8a1f33037dace1b9778780270c02863f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:6e:0f:a6:0e:ec:40:dc:0b:11:58:ba:23:1b:a6:31:5e:ff:
d5:d9:94:93:72:a8:f0:6a:c5:d1:6f:f7:8c:7f:76:82:49:c4:
66:9d:29:f8:6c:3a:bf:13:e9:5d:17:08:17:ad:51:54:28:2b:
3f:c6:12:0c:40:4f:63:6b:1b:88:e4:36:87:be:b4:ca:eb:36:
a4:ed:84:80:b1:e9:5c:9f:f3:73:9e:4a:db:74:55:f3:f5:f1:
8b:c6:65:53:d8:3a:df:ae:4a:52:3e:cd:72:37:61:19:96:cd:
8a:58:18:ea:5a:8a:5b:eb:7c:48:52:76:c2:01:ae:cd:56:db:
c8:25:bb:22:51:28:11:51:47:9b:e0:6b:6f:d7:45:8e:0a:ad:
4b:08:fe:42:3b:f4:1e:02:f0:27:1f:65:0c:b1:ba:9e:46:b7:
e5:3f:5a:2c:1b:c1:19:12:bf:ad:6b:ba:22:55:64:4f:ba:7d:
ed:60:64:d8:b6:ec:96:40:07:fc:07:c5:7a:f9:ed:74:2e:b2:
05:5c:40:c9:4c:d9:24:d7:22:2c:10:3b:c7:af:0c:bf:83:3a:
77:b4:83:32:aa:40:75:4d:5a:69:ed:c6:b6:54:49:a1:43:41:
73:90:3d:c6:a0:d1:21:34:39:13:64:93:2d:12:e3:66:7a:48:
44:d8:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:53:35 2025 by rpki-client