Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/3133312e3139362e3231342e302f32332d3233203d3e20323635363936.roa
File: 3133312e3139362e3231342e302f32332d3233203d3e20323635363936.roa (raw, json)
Hash identifier: lQKsYWgww9WZdIrb2vlx8THv90BvSz8gWygRM+SbY6Q=
Subject key identifier: D2:24:06:3B:0F:BE:49:E2:1C:79:D9:BF:A6:07:92:13:2E:B3:E1:25
Certificate issuer: /CN=1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9
Certificate serial: 2C10F4B7B42F76D47C70096F80A8DC58B1302F86
Authority key identifier: 1B:90:66:B2:C8:92:3E:D7:0E:1B:BD:9C:8E:E1:5F:27:3D:67:16:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/3133312e3139362e3231342e302f32332d3233203d3e20323635363936.roa
Signing time: Tue 04 Feb 2025 18:23:28 +0000
ROA not before: Tue 04 Feb 2025 18:18:28 +0000
ROA not after: Tue 03 Feb 2026 18:23:28 +0000
asID: 265696
IP address blocks: 131.196.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:10:f4:b7:b4:2f:76:d4:7c:70:09:6f:80:a8:dc:58:b1:30:2f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9
Validity
Not Before: Feb 4 18:18:28 2025 GMT
Not After : Feb 3 18:23:28 2026 GMT
Subject: CN=D224063B0FBE49E21C79D9BFA60792132EB3E125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:14:02:07:50:94:db:58:14:c0:1e:e0:67:
e0:41:c8:20:4e:e2:9a:65:3e:07:62:62:b0:4f:5b:
69:5d:3d:50:5f:24:28:15:f4:ab:d6:af:b2:c1:4f:
65:d0:5f:6d:b8:c0:40:2b:43:b5:19:43:b0:ba:ec:
ed:38:14:1f:28:3b:c8:4b:d7:5f:50:95:19:9f:9f:
a5:5c:4b:23:ae:a0:0a:4c:59:d5:a2:19:63:11:64:
72:87:61:30:ec:a1:9e:2f:5c:c3:19:33:d0:16:98:
e5:de:ce:98:ef:51:56:24:10:38:59:6a:aa:f4:a9:
67:68:ba:3e:3d:40:d9:fb:5b:69:2e:9f:31:97:96:
06:a3:32:75:d8:c5:51:56:bb:43:a7:3f:57:0a:e6:
34:9c:1b:58:ba:27:87:db:5d:cc:70:c8:51:d8:89:
f3:02:8b:43:3c:84:a7:cc:0a:49:2b:e9:4c:7e:41:
94:16:2f:91:a6:f3:67:c5:86:9e:8e:44:51:5d:74:
3a:8c:b5:93:3d:8f:54:03:8e:85:d0:ee:80:5c:9c:
89:bb:44:52:f0:f9:bb:77:14:1e:18:7a:5e:f4:72:
a5:df:8b:8e:1e:82:fa:45:02:db:c0:a4:56:2d:fb:
c1:b3:02:fb:f4:30:4d:af:0a:22:57:48:c2:7a:96:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:06:3B:0F:BE:49:E2:1C:79:D9:BF:A6:07:92:13:2E:B3:E1:25
X509v3 Authority Key Identifier:
keyid:1B:90:66:B2:C8:92:3E:D7:0E:1B:BD:9C:8E:E1:5F:27:3D:67:16:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B9066B2C8923ED70E1BBD9C8EE15F273D6716E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/090546218E9321C949CA5DB7B29F5A997FB047519B3E67B5D3CABDB9B936B5D0/0/3133312e3139362e3231342e302f32332d3233203d3e20323635363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.214.0/23
Signature Algorithm: sha256WithRSAEncryption
13:ed:df:8a:5d:03:db:f5:d5:ef:05:42:37:59:05:4b:f3:9c:
00:9f:3c:a7:88:d4:21:64:e5:07:80:0e:a6:2a:77:47:50:c1:
b2:bc:d5:2d:e8:e4:c7:b4:76:85:bb:ae:a5:7a:16:ee:58:6c:
03:df:10:b6:eb:7d:e9:66:5f:3f:27:39:22:e4:47:11:ed:5e:
b6:71:1b:ee:01:fe:00:0f:18:73:d8:44:26:08:a3:db:78:dd:
4f:59:66:ea:e2:a6:0f:3a:4b:56:99:4a:3c:d5:86:e4:36:31:
7b:1b:cc:a4:fe:75:ba:65:c5:8a:43:e0:64:a6:77:87:9c:d8:
81:fe:0f:22:38:4f:63:b0:30:24:78:aa:e9:0d:a4:eb:99:75:
0d:51:ae:d0:ff:10:af:ff:43:b3:37:95:7e:62:71:e4:6e:d1:
46:8e:5f:f3:59:1f:60:ee:9b:4c:cb:c5:d0:0d:23:16:84:1c:
49:a2:63:08:8f:31:42:e6:22:f3:e4:e2:5a:23:c5:25:cc:eb:
10:76:88:99:27:a0:c5:6e:8f:dd:2d:52:6b:d2:ce:60:d2:1e:
aa:4c:52:0e:c6:04:40:1b:15:51:4c:a3:0e:78:ac:e6:48:2d:
cc:19:1a:e0:be:46:ac:74:b5:58:ae:90:5b:ef:0e:46:c6:b9:
bb:e7:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:24 2025 by rpki-client