Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e35372e3232342e302f31392d3234203d3e203230323037.roa
File: 3139302e35372e3232342e302f31392d3234203d3e203230323037.roa (raw, json)
Hash identifier: cclPc0YrEb/NZ1Dwu/oeu+nw0VEKsY4Rzb04Q9aSvkY=
Subject key identifier: A4:D4:1E:29:4C:08:7C:F5:62:AD:D5:5C:FA:CA:63:CF:05:6E:14:E5
Certificate issuer: /CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Certificate serial: 143621041E3C702807BF2C49E73BBECC3B3A779C
Authority key identifier: 4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e35372e3232342e302f31392d3234203d3e203230323037.roa
Signing time: Tue 04 Feb 2025 20:00:38 +0000
ROA not before: Tue 04 Feb 2025 19:55:38 +0000
ROA not after: Tue 03 Feb 2026 20:00:38 +0000
asID: 20207
IP address blocks: 190.57.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:36:21:04:1e:3c:70:28:07:bf:2c:49:e7:3b:be:cc:3b:3a:77:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Validity
Not Before: Feb 4 19:55:38 2025 GMT
Not After : Feb 3 20:00:38 2026 GMT
Subject: CN=A4D41E294C087CF562ADD55CFACA63CF056E14E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:22:57:2d:20:9f:cf:24:cf:c1:da:f5:c3:f9:
9a:6c:d3:fb:13:2f:39:84:d2:55:52:6b:14:6f:0f:
02:e4:4e:d6:ff:cd:26:f0:7e:85:3b:72:21:3a:7c:
70:29:ad:8d:c2:25:f7:02:b4:12:0e:fb:3d:bb:48:
a0:9b:9b:c8:89:e3:c6:90:1b:77:ae:1d:62:d5:27:
bf:4c:58:0f:a0:71:a0:1d:67:38:e9:fb:24:5f:9a:
fc:7a:52:4b:7e:a7:12:5d:fa:78:4d:9d:c3:8b:c4:
88:ea:f0:87:b4:af:75:9e:e8:14:39:76:e8:3a:8f:
38:c3:66:d8:c3:c7:5b:2e:ef:29:7f:94:bb:74:cb:
3e:3d:86:48:32:68:e1:d7:05:e3:2c:05:17:93:bc:
34:99:d9:13:de:26:97:1b:3d:a7:8b:f5:e1:bb:ef:
40:44:de:de:e6:f4:ce:19:e5:f0:89:83:90:e7:e4:
08:26:4a:72:af:ca:ae:34:ca:a6:72:95:d7:df:77:
57:58:02:38:0d:65:5c:36:48:9e:94:5c:d0:94:b6:
5d:36:82:ae:ff:98:2b:52:7f:50:35:8c:c4:18:00:
fe:35:ef:e7:6b:78:6c:d5:d2:6e:3c:37:a4:76:95:
58:e1:4d:3f:be:42:d9:c4:f0:e9:9e:ff:8d:f6:b6:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D4:1E:29:4C:08:7C:F5:62:AD:D5:5C:FA:CA:63:CF:05:6E:14:E5
X509v3 Authority Key Identifier:
keyid:4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e35372e3232342e302f31392d3234203d3e203230323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.57.224.0/19
Signature Algorithm: sha256WithRSAEncryption
25:d0:0e:56:59:f6:26:f5:2e:9d:12:06:5d:49:ab:de:3f:77:
95:80:d0:8e:3e:23:a3:ec:66:4e:f9:76:74:cf:4e:c3:ab:e5:
cf:f9:ab:0e:da:0a:44:5a:c6:8c:f8:db:ac:8a:d2:40:e9:41:
44:d7:d1:0a:9c:f5:43:7c:17:30:e0:4a:bc:90:3d:f5:6f:8d:
68:7d:55:ac:f9:cb:75:54:4d:f1:39:20:22:f3:be:0e:de:0e:
95:42:62:f7:28:33:a1:b4:61:d7:37:57:7f:d4:eb:66:a3:f1:
dc:1f:f7:05:fc:5b:40:65:ee:d6:da:78:12:d2:e8:be:3d:c0:
25:88:77:9d:3e:ad:ec:ed:8e:a3:6a:79:8f:82:64:a6:ed:59:
2b:b0:54:53:66:df:5a:9c:a7:6e:4b:22:e1:02:7c:ed:77:10:
7a:50:4e:0d:e4:bb:f4:15:29:fc:57:eb:47:85:d3:d8:37:15:
28:6e:b6:96:2b:6d:b3:aa:a7:48:10:c4:0a:d8:74:88:b2:47:
54:00:1b:f3:88:f9:96:fb:6f:05:bb:1c:d3:8d:f0:9c:a6:c4:
23:8f:fa:b5:aa:a3:98:73:e1:da:02:a0:98:8f:11:e2:22:8d:
ef:25:8b:0f:6e:e3:48:5c:ca:85:1d:d5:a1:a7:cb:eb:f2:27:
56:af:b1:66
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFDYhBB48cCgHvyxJ5zu+zDs6d5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY5OUEyQTU1OEJFQjM1OUU5MkFDMzkwOEU5MDk4QzM4
NERFNzJGNzAeFw0yNTAyMDQxOTU1MzhaFw0yNjAyMDMyMDAwMzhaMDMxMTAvBgNV
BAMTKEE0RDQxRTI5NEMwODdDRjU2MkFERDU1Q0ZBQ0E2M0NGMDU2RTE0RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxIlctIJ/PJM/B2vXD+Zps0/sT
LzmE0lVSaxRvDwLkTtb/zSbwfoU7ciE6fHAprY3CJfcCtBIO+z27SKCbm8iJ48aQ
G3euHWLVJ79MWA+gcaAdZzjp+yRfmvx6Ukt+pxJd+nhNncOLxIjq8Ie0r3We6BQ5
dug6jzjDZtjDx1su7yl/lLt0yz49hkgyaOHXBeMsBReTvDSZ2RPeJpcbPaeL9eG7
70BE3t7m9M4Z5fCJg5Dn5AgmSnKvyq40yqZyldffd1dYAjgNZVw2SJ6UXNCUtl02
gq7/mCtSf1A1jMQYAP417+dreGzV0m48N6R2lVjhTT++QtnE8Ome/432tv7fAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUpNQeKUwIfPVirdVc+spjzwVuFOUwHwYDVR0j
BBgwFoAUT5mipVi+s1npKsOQjpCYw4TecvcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOUJBNDE4OEJGNDM2NTYwMTM2ODBDNzkzRjZBNDg0NkE1
NjE3MThFRkM3Rjk3QjJGQzEwNUJGNTA0QTg2N0FELzAvNEY5OUEyQTU1OEJFQjM1
OUU5MkFDMzkwOEU5MDk4QzM4NERFNzJGNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Rjk5QTJBNTU4QkVCMzU5RTky
QUMzOTA4RTkwOThDMzg0REU3MkY3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDlCQTQxODhCRjQzNjU2MDEzNjgwQzc5M0Y2QTQ4NDZBNTYxNzE4RUZD
N0Y5N0IyRkMxMDVCRjUwNEE4NjdBRC8wLzMxMzkzMDJlMzUzNzJlMzIzMjM0MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzMDMyMzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb454DAN
BgkqhkiG9w0BAQsFAAOCAQEAJdAOVln2JvUunRIGXUmr3j93lYDQjj4jo+xmTvl2
dM9Ow6vlz/mrDtoKRFrGjPjbrIrSQOlBRNfRCpz1Q3wXMOBKvJA99W+NaH1VrPnL
dVRN8TkgIvO+Dt4OlUJi9ygzobRh1zdXf9TrZqPx3B/3BfxbQGXu1tp4EtLovj3A
JYh3nT6t7O2Oo2p5j4Jkpu1ZK7BUU2bfWpynbksi4QJ87XcQelBODeS79BUp/Ffr
R4XT2DcVKG62litts6qnSBDECth0iLJHVAAb84j5lvtvBbsc043wnKbEI4/6taqj
mHPh2gKgmI8R4iKN7yWLD27jSFzKhR3VoafL6/InVq+xZg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:01 2025 by rpki-client