Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e302e302f31362d3234203d3e203237393235.roa
File: 3139302e39312e302e302f31362d3234203d3e203237393235.roa (raw, json)
Hash identifier: qdkxi1JZrBnFdz5iUkc5Aalo9UUxhyIZMCK+NmCZ/2w=
Subject key identifier: CB:5A:6D:3F:78:DC:AA:04:58:C8:9E:E8:D2:1C:42:21:BF:0F:E0:0D
Certificate issuer: /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial: 534133045DD5A7FD8F483FC009E58CDC86B4F825
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e302e302f31362d3234203d3e203237393235.roa
Signing time: Tue 04 Feb 2025 18:44:26 +0000
ROA not before: Tue 04 Feb 2025 18:39:26 +0000
ROA not after: Tue 03 Feb 2026 18:44:26 +0000
asID: 27925
IP address blocks: 190.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:41:33:04:5d:d5:a7:fd:8f:48:3f:c0:09:e5:8c:dc:86:b4:f8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
Validity
Not Before: Feb 4 18:39:26 2025 GMT
Not After : Feb 3 18:44:26 2026 GMT
Subject: CN=CB5A6D3F78DCAA0458C89EE8D21C4221BF0FE00D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:81:1d:2e:72:3a:89:65:65:b7:a6:66:3f:
45:14:ee:e2:7a:bf:57:25:5f:7d:1b:ba:c5:87:7f:
4c:a5:ab:eb:f1:21:a3:11:ef:ce:c9:08:ea:e1:8a:
5c:db:54:4c:8f:55:ce:4c:15:27:f3:0e:ba:81:5c:
7f:3b:87:db:ab:3b:5a:eb:e4:2a:25:04:b3:3a:e1:
4b:c3:cc:1c:f5:28:4f:4a:cb:80:60:c4:91:92:ae:
a7:d6:39:bd:c0:9a:d2:5b:09:31:cf:43:13:c0:bd:
bb:02:ca:99:85:8e:ff:e9:74:89:e6:a2:ac:22:b4:
ed:6a:4c:7d:9f:b7:2b:f5:6e:80:50:e5:24:5e:6f:
04:49:d1:1d:cd:b2:69:ca:81:e2:31:9a:57:b8:3c:
51:bf:98:86:af:e0:7d:5d:92:e7:8f:d1:e1:47:65:
2a:07:1f:83:b0:57:7d:09:48:db:3b:2b:b7:a0:3b:
05:16:66:71:62:a9:8b:6f:d7:d1:01:c2:c2:87:a5:
89:e7:19:fb:a0:48:f8:16:b0:b1:72:ac:bf:d6:fc:
13:85:fe:7b:6e:17:60:42:6f:d7:4f:39:2b:50:c7:
ff:e5:39:3e:e5:e0:e1:3c:d9:87:4b:88:f4:3c:29:
43:ba:ef:66:6e:74:10:27:08:f0:28:87:88:b1:d2:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:6D:3F:78:DC:AA:04:58:C8:9E:E8:D2:1C:42:21:BF:0F:E0:0D
X509v3 Authority Key Identifier:
keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e302e302f31362d3234203d3e203237393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.91.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:f5:57:94:04:0b:cc:92:13:bd:f5:58:52:32:ba:c7:1a:ca:
fa:0b:41:82:1a:53:47:62:e0:2c:4b:43:92:94:81:96:e6:6a:
47:3e:98:92:27:b2:c9:c9:4f:6f:12:01:96:6e:4c:df:05:ba:
35:b4:8e:7a:36:cf:02:f3:fa:cb:be:65:98:4a:a5:36:74:69:
3b:34:0a:d4:f0:79:d6:34:3a:60:18:79:7b:3f:10:4a:3e:c3:
89:1a:78:92:c8:c6:c9:3d:30:1d:53:5b:24:23:e6:8b:ab:c7:
e3:b6:bc:b8:ca:8c:cb:9a:a5:3c:54:cb:f0:e3:7c:d1:9c:82:
58:63:f6:6d:60:06:d9:c3:f6:35:80:0b:00:ad:aa:59:9f:fd:
d4:a7:39:c8:52:4d:22:37:9a:b7:9e:5f:c3:66:20:d6:f0:10:
c9:ad:91:c7:45:c8:91:c0:4e:d5:7f:6b:a9:77:e8:c9:c8:ed:
31:83:7c:03:26:79:28:89:f8:2f:ee:76:73:f3:31:c4:91:71:
0d:90:ab:a8:39:8c:58:5c:9f:a4:59:20:12:4f:dd:3f:44:66:
67:fd:5b:8b:84:0b:43:f1:67:24:4c:f6:44:ed:69:86:f4:b5:
7c:9a:77:ef:58:05:27:c2:f5:c8:3a:48:19:77:ff:81:56:de:
9f:a4:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:38 2025 by rpki-client