Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/3133312e3139362e3231322e302f32322d3234203d3e20323635363936.roa
File: 3133312e3139362e3231322e302f32322d3234203d3e20323635363936.roa (raw, json)
Hash identifier: z9Um9QtlmLenm5K/f5jTtURDFs84jVF6KKZ0yLO/e98=
Subject key identifier: EE:D5:C3:77:81:0C:13:B3:0B:4F:AF:FD:97:68:08:BA:80:45:30:CF
Certificate issuer: /CN=1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9
Certificate serial: 017411D3D56997C63F01BFFAF5AD222C7CCB71FE
Authority key identifier: 1B:90:66:B2:C8:92:3E:D7:0E:1B:BD:9C:8E:E1:5F:27:3D:67:16:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/3133312e3139362e3231322e302f32322d3234203d3e20323635363936.roa
Signing time: Tue 04 Feb 2025 18:23:28 +0000
ROA not before: Tue 04 Feb 2025 18:18:28 +0000
ROA not after: Tue 03 Feb 2026 18:23:28 +0000
asID: 265696
IP address blocks: 131.196.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:74:11:d3:d5:69:97:c6:3f:01:bf:fa:f5:ad:22:2c:7c:cb:71:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9
Validity
Not Before: Feb 4 18:18:28 2025 GMT
Not After : Feb 3 18:23:28 2026 GMT
Subject: CN=EED5C377810C13B30B4FAFFD976808BA804530CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:75:8e:10:c8:33:81:27:83:8b:1c:95:e9:
30:12:10:55:17:e8:f6:61:bc:c8:95:24:4f:d4:3e:
08:1a:ef:9f:2f:a0:0c:96:b1:d1:3d:a2:bf:42:ef:
c2:52:34:bd:43:76:e4:3c:77:30:4f:15:b9:b0:e5:
5f:60:ae:be:8d:7c:7e:8e:c9:9a:b8:10:42:19:8d:
7e:e9:54:3b:c5:25:8d:d4:fc:9d:a7:19:37:a0:7e:
d5:3c:1a:49:51:71:a1:dd:64:af:3c:df:5f:8e:43:
36:a1:ff:e1:a3:fc:00:9e:b5:e9:ed:16:1b:81:c4:
fd:75:79:25:cb:f6:b4:29:df:16:68:26:19:55:4f:
ba:9c:14:37:1d:01:75:4f:61:d5:33:20:11:7e:1a:
3a:c3:6a:ab:50:bd:af:40:b6:86:65:a8:cb:9d:a3:
67:4f:87:30:24:85:68:af:29:b6:de:56:d7:bb:65:
b0:94:5f:dc:00:43:43:82:f5:32:e9:b8:24:93:1b:
53:04:57:63:38:21:ed:d5:23:c4:ea:19:04:71:81:
a3:77:cd:ea:3d:02:5c:4e:38:fc:19:9e:7a:2e:c7:
43:7c:fc:f1:8b:04:42:ef:16:7d:8b:84:c0:3a:71:
86:b1:d9:16:f9:0d:9f:1c:17:6a:9f:11:d9:88:38:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D5:C3:77:81:0C:13:B3:0B:4F:AF:FD:97:68:08:BA:80:45:30:CF
X509v3 Authority Key Identifier:
keyid:1B:90:66:B2:C8:92:3E:D7:0E:1B:BD:9C:8E:E1:5F:27:3D:67:16:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/3133312e3139362e3231322e302f32322d3234203d3e20323635363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:b7:4e:a3:5c:96:02:19:51:d2:74:27:8b:e8:9c:4e:6f:c5:
28:e3:98:e0:74:fb:6f:71:d1:ad:e9:a2:fe:54:02:82:aa:e6:
3d:83:6b:9b:3f:e0:38:fd:78:c0:43:cc:38:9c:28:c6:0b:62:
c5:d3:bf:8c:11:47:ed:79:65:0d:d6:91:fc:15:5b:04:29:44:
b6:40:4a:84:14:45:ad:23:e0:10:ca:4e:e0:f8:97:1c:97:63:
6f:ef:92:fb:1d:89:3a:68:48:b8:d3:41:bb:ce:11:c2:98:d3:
19:55:c2:52:41:84:97:f1:94:ee:60:e7:04:27:ff:38:24:01:
f5:e6:11:15:8a:df:47:55:18:14:1d:8c:39:6c:fd:65:63:9d:
dd:ff:d8:c0:23:bd:41:a0:ad:a0:d2:35:5a:b1:c5:32:68:82:
0e:12:40:7f:58:ef:50:95:f9:f0:5b:c5:d3:9e:2c:33:e0:bf:
d0:85:37:4f:f7:da:24:96:a2:63:47:37:e3:ae:81:7b:5f:eb:
20:14:52:a1:fd:4c:51:17:9f:63:21:54:b6:18:be:26:36:67:
a8:7a:4b:53:e4:87:d3:00:d0:7c:31:ff:26:6f:ed:a9:28:e9:
73:9c:bc:78:2c:9c:bc:0a:49:88:30:7f:e5:8e:91:e6:81:8e:
32:af:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:23 2025 by rpki-client