Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e31342e33322e302f32322d3234203d3e203532333534.roa
File: 3139302e31342e33322e302f32322d3234203d3e203532333534.roa (raw, json)
Hash identifier: jyreCXTmc6THFdiIXgjoDdeKEW/qgL+1dnWi+jERQ5c=
Subject key identifier: 72:43:DD:C6:70:14:9D:D1:70:14:96:3D:5D:73:CB:BD:C5:E3:4C:4C
Certificate issuer: /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial: 656808C9399DC8BBA2EEB190DEBA8330FF41448A
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e31342e33322e302f32322d3234203d3e203532333534.roa
Signing time: Tue 04 Feb 2025 18:18:46 +0000
ROA not before: Tue 04 Feb 2025 18:13:46 +0000
ROA not after: Tue 03 Feb 2026 18:18:46 +0000
asID: 52354
IP address blocks: 190.14.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:68:08:c9:39:9d:c8:bb:a2:ee:b1:90:de:ba:83:30:ff:41:44:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
Validity
Not Before: Feb 4 18:13:46 2025 GMT
Not After : Feb 3 18:18:46 2026 GMT
Subject: CN=7243DDC670149DD17014963D5D73CBBDC5E34C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:ad:0a:c1:ff:25:01:c7:14:0c:f8:7c:60:
73:38:85:da:29:a0:be:10:07:c4:05:20:69:3b:e1:
3a:1e:5f:2a:3f:e3:10:ac:54:2a:74:28:8a:68:b0:
4d:17:b0:60:07:63:9d:e9:08:f3:a0:d8:e0:0f:3c:
c6:31:37:f6:da:83:3b:86:f9:75:96:3b:d9:16:d2:
72:cf:f7:d4:ae:cc:f5:ae:85:3e:22:f0:6c:5d:8e:
10:fe:6c:1f:44:b0:65:23:19:1a:8c:15:2b:93:3f:
29:f7:c3:de:a8:ed:a8:c1:ad:db:9f:c9:8d:a0:35:
48:21:74:93:70:e3:34:3a:9e:d8:02:18:ca:19:12:
c2:19:eb:32:aa:8c:4c:79:cd:64:83:cb:d1:39:a2:
dc:4a:92:94:bc:5d:ad:d0:20:37:57:86:42:89:f7:
74:8b:67:67:e4:bd:00:31:b7:b3:3a:e2:1f:bc:fe:
df:6d:47:0c:19:bf:ff:ba:9e:51:87:65:87:22:46:
71:74:a7:68:1f:2e:0f:f3:32:3d:37:cc:90:0c:37:
29:bc:bb:97:1f:47:fa:7b:4c:a1:0c:89:35:7c:5e:
01:fd:95:de:cb:61:70:b5:64:c7:93:94:b2:04:e1:
d5:e3:37:45:8d:91:3b:22:66:8b:8f:e9:dd:ad:c5:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:DD:C6:70:14:9D:D1:70:14:96:3D:5D:73:CB:BD:C5:E3:4C:4C
X509v3 Authority Key Identifier:
keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e31342e33322e302f32322d3234203d3e203532333534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:96:e9:87:88:c1:17:a5:87:a1:1c:7b:7b:52:f9:4e:1c:9e:
87:ad:1f:43:eb:32:be:8a:9a:49:33:81:c0:cd:1a:3f:4d:7e:
08:ec:53:69:b4:ce:7f:dd:ee:89:43:ff:e8:df:99:36:96:d4:
12:b9:65:07:1b:4a:97:1e:43:ff:c5:60:19:b3:0c:d2:aa:da:
88:b4:04:2b:63:4c:53:8c:95:6e:81:bf:0a:12:7b:e4:25:16:
16:74:c2:ed:41:18:e0:1e:c2:28:74:8b:16:37:b8:24:d8:49:
80:9a:d3:76:fa:fa:dc:fe:24:cd:43:bc:0a:d1:48:a6:e6:12:
8a:07:fc:a9:1c:32:0e:7d:65:d1:e9:6d:14:29:13:ec:6b:96:
44:8b:68:bd:bc:4f:d4:0f:b1:35:46:b6:87:88:69:ac:60:39:
d4:a8:7c:be:e2:e9:b7:fd:64:b5:80:5d:17:7a:6e:49:e6:7c:
b5:2f:bc:41:5f:69:7c:91:91:e4:b8:4c:a2:f2:ad:d4:a0:bb:
6f:03:cf:80:0d:50:8c:db:a1:dd:13:80:8a:ba:53:fd:ab:48:
29:9f:5b:b0:1f:45:39:35:f6:14:37:b9:2c:c1:8b:36:67:54:
59:c1:32:53:fb:f5:69:b1:a0:ba:0b:33:16:e5:b3:a4:1b:07:
ca:6d:35:23
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZWgIyTmdyLui7rGQ3rqDMP9BRIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU1ODNBMDUyNTYzREY4MTgwQkU0NTI5NUQ2N0ZBQTVB
M0ExODk5NjAeFw0yNTAyMDQxODEzNDZaFw0yNjAyMDMxODE4NDZaMDMxMTAvBgNV
BAMTKDcyNDNEREM2NzAxNDlERDE3MDE0OTYzRDVENzNDQkJEQzVFMzRDNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7La0Kwf8lAccUDPh8YHM4hdop
oL4QB8QFIGk74ToeXyo/4xCsVCp0KIposE0XsGAHY53pCPOg2OAPPMYxN/bagzuG
+XWWO9kW0nLP99SuzPWuhT4i8GxdjhD+bB9EsGUjGRqMFSuTPyn3w96o7ajBrduf
yY2gNUghdJNw4zQ6ntgCGMoZEsIZ6zKqjEx5zWSDy9E5otxKkpS8Xa3QIDdXhkKJ
93SLZ2fkvQAxt7M64h+8/t9tRwwZv/+6nlGHZYciRnF0p2gfLg/zMj03zJAMNym8
u5cfR/p7TKEMiTV8XgH9ld7LYXC1ZMeTlLIE4dXjN0WNkTsiZouP6d2txUiRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUckPdxnAUndFwFJY9XXPLvcXjTEwwHwYDVR0j
BBgwFoAUNVg6BSVj34GAvkUpXWf6paOhiZYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjA1NTY5RDIzMEZBMzgyM0FBNkJEM0Q0NTBEQUMyQTI1
M0VGRTBCRDY5NkQ3NEJDQzFFRjcyRUYwN0MwRjdCLzAvMzU1ODNBMDUyNTYzREY4
MTgwQkU0NTI5NUQ2N0ZBQTVBM0ExODk5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTU4M0EwNTI1NjNERjgxODBC
RTQ1Mjk1RDY3RkFBNUEzQTE4OTk2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDYwNTU2OUQyMzBGQTM4MjNBQTZCRDNENDUwREFDMkEyNTNFRkUwQkQ2
OTZENzRCQ0MxRUY3MkVGMDdDMEY3Qi8wLzMxMzkzMDJlMzEzNDJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+DiAwDQYJ
KoZIhvcNAQELBQADggEBADqW6YeIwRelh6Ece3tS+U4cnoetH0PrMr6KmkkzgcDN
Gj9NfgjsU2m0zn/d7olD/+jfmTaW1BK5ZQcbSpceQ//FYBmzDNKq2oi0BCtjTFOM
lW6BvwoSe+QlFhZ0wu1BGOAewih0ixY3uCTYSYCa03b6+tz+JM1DvArRSKbmEooH
/KkcMg59ZdHpbRQpE+xrlkSLaL28T9QPsTVGtoeIaaxgOdSofL7i6bf9ZLWAXRd6
bknmfLUvvEFfaXyRkeS4TKLyrdSgu28Dz4ANUIzbod0TgIq6U/2rSCmfW7AfRTk1
9hQ3uSzBizZnVFnBMlP79WmxoLoLMxbls6QbB8ptNSM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:55:31 2025 by rpki-client