Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138302e302e302f31372d3234203d3e203235363230.roa
File: 3139302e3138302e302e302f31372d3234203d3e203235363230.roa (raw, json)
Hash identifier: hqaHH4xdwxA1ZoiTpOo4Z/gqoKltbmCSQJ99TlkdPAo=
Subject key identifier: 5D:27:53:C5:C0:7D:07:4C:C8:1B:52:28:08:A4:07:D3:32:5D:E2:38
Certificate issuer: /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial: 65B6C4D4E5E3974F567528E5407034A373389881
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138302e302e302f31372d3234203d3e203235363230.roa
Signing time: Tue 04 Feb 2025 18:28:01 +0000
ROA not before: Tue 04 Feb 2025 18:23:01 +0000
ROA not after: Tue 03 Feb 2026 18:28:01 +0000
asID: 25620
IP address blocks: 190.180.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b6:c4:d4:e5:e3:97:4f:56:75:28:e5:40:70:34:a3:73:38:98:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Validity
Not Before: Feb 4 18:23:01 2025 GMT
Not After : Feb 3 18:28:01 2026 GMT
Subject: CN=5D2753C5C07D074CC81B522808A407D3325DE238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:89:6c:c7:cd:b4:5c:cc:ac:f2:d5:3a:02:
bc:f0:c6:85:1b:1f:b8:6a:65:37:59:5a:c8:0d:11:
f5:f5:ba:eb:d2:40:f3:3f:b1:8e:de:2a:00:3b:34:
38:48:45:f9:8f:47:e1:10:d6:52:11:21:8c:bb:19:
f4:ad:a7:01:8f:5e:b9:23:50:3d:3f:b4:53:d8:f1:
f5:ab:c4:27:c1:dc:03:e8:f0:70:77:b2:12:db:2d:
55:81:4a:8b:76:f7:7b:54:0d:b6:89:eb:2c:d6:4a:
b2:56:c3:d6:5b:c5:6b:c0:a7:20:4a:2c:ae:c8:ca:
51:22:13:51:ca:42:81:33:3c:73:73:7b:6d:c4:29:
05:b0:a3:dc:23:25:58:2f:6e:e2:9c:bb:69:b2:c9:
68:df:0e:44:8e:fe:bc:04:2f:e3:90:97:f4:5c:ee:
21:2a:b2:cb:f4:82:99:05:c8:1a:62:43:b2:69:4d:
72:d0:ba:7a:86:d2:52:21:10:b5:0d:73:4b:6f:47:
83:4f:02:5f:0b:e6:04:68:3d:c7:61:35:95:ca:58:
fa:4a:89:48:17:da:3e:22:2c:32:c8:55:28:c5:0b:
96:d1:2e:f0:38:ae:1a:25:ce:43:d5:db:1d:68:b5:
3f:7d:bb:dc:e1:94:20:82:a7:1e:f7:35:73:f1:74:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:53:C5:C0:7D:07:4C:C8:1B:52:28:08:A4:07:D3:32:5D:E2:38
X509v3 Authority Key Identifier:
keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138302e302e302f31372d3234203d3e203235363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.180.0.0/17
Signature Algorithm: sha256WithRSAEncryption
43:ab:b4:e4:05:98:17:73:3d:98:57:a1:99:f7:cd:f9:f7:ec:
18:84:e8:8f:02:e7:f2:8c:71:94:a5:f1:28:09:07:d6:c7:d4:
7d:61:6c:0d:02:74:3d:0c:ee:41:52:25:64:e1:df:50:9f:48:
e4:6e:81:1d:5a:3c:8d:1c:ad:96:8c:13:70:6a:49:49:7f:08:
d2:f8:9e:ec:5f:56:cf:2b:8f:df:ae:5c:05:68:c1:bc:08:30:
65:46:ef:03:41:2c:83:43:4e:37:51:bb:ff:0f:d9:e8:dc:e8:
a7:dd:bf:8f:94:f4:1d:74:47:35:f3:de:23:a6:e9:c9:3a:86:
0c:1d:f9:14:d2:83:f4:f2:58:7f:7f:a3:58:24:bd:cb:fb:7c:
84:e4:7d:16:62:e0:88:93:00:29:17:2a:b4:d7:6e:0f:fb:79:
cf:52:0e:a8:ed:24:e6:88:81:19:da:d3:90:fe:d3:bb:3c:93:
02:ad:21:62:d7:a8:50:f6:36:1d:8e:e5:ac:7d:e1:b0:7f:5f:
a3:41:0e:4d:3c:d7:ba:5b:c9:fc:e1:40:82:c1:0d:ec:09:1f:
7c:d0:e5:7e:5f:b5:ab:ae:dd:38:50:a0:23:42:98:83:72:b6:
7e:bd:f4:97:a6:a5:70:87:ce:d2:3f:c2:74:dc:14:59:16:ca:
3d:dc:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:13:36 2025 by rpki-client