Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203631343638.roa
File: 3139322e3138382e35382e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier: nK9HhbhKHp/tWxqJEGfoPxsxOmei5bP4zEUr5Rk2R+s=
Subject key identifier: 5D:08:54:22:0D:E3:41:70:A9:E1:7A:2C:10:13:EF:21:67:A1:7B:44
Certificate issuer: /CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
Certificate serial: 1D9459AC7E0B6E4CAE89E0E5896668BA7DCA8216
Authority key identifier: BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203631343638.roa
Signing time: Tue 04 Feb 2025 20:08:58 +0000
ROA not before: Tue 04 Feb 2025 20:03:58 +0000
ROA not after: Tue 03 Feb 2026 20:08:58 +0000
asID: 61468
IP address blocks: 192.188.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:94:59:ac:7e:0b:6e:4c:ae:89:e0:e5:89:66:68:ba:7d:ca:82:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
Validity
Not Before: Feb 4 20:03:58 2025 GMT
Not After : Feb 3 20:08:58 2026 GMT
Subject: CN=5D0854220DE34170A9E17A2C1013EF2167A17B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:e5:41:a4:78:24:de:f2:20:f7:47:d0:9a:
38:8e:88:06:b0:7f:29:4e:f1:e3:1d:58:99:43:a9:
01:d4:a3:c9:1b:e7:67:c9:aa:ff:7d:98:0f:45:50:
53:04:fc:f3:50:ba:b8:34:d2:60:5f:87:43:7a:56:
d6:7d:8e:4b:fe:d6:7b:b6:e0:ab:ed:1e:51:6a:06:
49:24:d7:4a:82:db:4b:50:49:0a:8d:f6:d7:c7:4a:
1e:7b:75:ea:98:19:9c:13:fd:3d:81:32:bf:93:f4:
6f:1b:1e:a3:89:c6:45:6f:c7:85:8e:c7:63:54:24:
b3:22:01:cb:eb:ca:1d:03:e9:51:f6:18:d0:38:a2:
64:7c:a6:d9:0c:39:4c:db:fa:95:64:a8:11:a3:32:
47:0d:d8:61:98:31:74:7b:f1:d2:1f:09:fc:dc:ef:
3d:50:96:fc:8f:43:1b:c3:d0:0b:a8:a2:92:85:ef:
90:3d:74:4e:1a:65:82:30:b6:c8:e6:96:02:04:d3:
66:af:1d:9e:a4:2d:7d:2e:fd:f0:79:1a:ae:5c:b9:
cc:c0:38:a7:9e:86:b3:9b:c4:4f:a1:da:97:e3:f7:
38:17:b8:7b:2f:bb:2a:35:37:3a:0d:4a:25:cd:cf:
80:f3:3c:db:37:39:0c:5c:3f:f7:8c:2f:3e:c0:bd:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:08:54:22:0D:E3:41:70:A9:E1:7A:2C:10:13:EF:21:67:A1:7B:44
X509v3 Authority Key Identifier:
keyid:BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203631343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.58.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0c:a9:7a:32:88:83:ae:f1:9e:9c:34:aa:a4:92:da:54:fb:
c4:1d:99:a3:c7:05:85:1a:88:72:60:41:fb:d1:e8:4a:31:f6:
b4:8c:c7:dc:34:be:ae:9f:97:08:8a:96:0f:97:cd:f4:93:e1:
07:03:3d:54:63:bd:6e:15:0e:42:8d:b6:6d:fa:e0:5d:04:3f:
d0:21:4c:df:eb:9d:e6:d7:91:54:a7:66:44:9d:ec:9b:c2:f8:
71:ac:c5:6c:a0:fb:13:72:a7:f2:ee:13:e9:d4:5b:46:e1:5d:
a2:a9:9c:dd:c0:f7:94:ad:03:46:1a:13:ed:95:4c:61:b4:3c:
d7:83:34:bf:25:e3:36:25:61:6b:f8:11:d0:b0:ad:2b:20:91:
85:f0:01:d6:f4:46:6d:f4:cc:6a:d8:9e:6c:b4:93:75:b9:7d:
dd:42:bd:01:fa:85:85:e1:85:e0:e4:e8:38:51:9f:71:46:85:
11:2f:4e:98:19:93:27:f0:cf:1e:e2:eb:ac:2f:1b:57:48:ef:
13:f0:29:26:96:f3:44:0b:43:9e:2c:86:62:04:8f:fa:e3:4f:
c4:09:e9:9a:23:e7:95:30:b0:c3:40:20:0f:1b:9c:84:42:00:
cc:3e:f4:d0:97:17:09:a3:0e:68:81:80:62:94:13:d8:90:39:
4b:6f:b2:5f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHZRZrH4LbkyuieDliWZoun3KghYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIyQjJFODk4OTEwODVFRTkyNTE0QjVEOTFFRkU5RjU5
MDA1QzkzMzAeFw0yNTAyMDQyMDAzNThaFw0yNjAyMDMyMDA4NThaMDMxMTAvBgNV
BAMTKDVEMDg1NDIyMERFMzQxNzBBOUUxN0EyQzEwMTNFRjIxNjdBMTdCNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwleVBpHgk3vIg90fQmjiOiAaw
fylO8eMdWJlDqQHUo8kb52fJqv99mA9FUFME/PNQurg00mBfh0N6VtZ9jkv+1nu2
4KvtHlFqBkkk10qC20tQSQqN9tfHSh57deqYGZwT/T2BMr+T9G8bHqOJxkVvx4WO
x2NUJLMiAcvryh0D6VH2GNA4omR8ptkMOUzb+pVkqBGjMkcN2GGYMXR78dIfCfzc
7z1QlvyPQxvD0AuoopKF75A9dE4aZYIwtsjmlgIE02avHZ6kLX0u/fB5Gq5cuczA
OKeehrObxE+h2pfj9zgXuHsvuyo1NzoNSiXNz4DzPNs3OQxcP/eMLz7AvdmpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXQhUIg3jQXCp4XosEBPvIWehe0QwHwYDVR0j
BBgwFoAUuysuiYkQhe6SUUtdke/p9ZAFyTMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjgyMjNFNDFGREZDQzhCM0YzMjU1N0IwOUY3RDFENDU4
RTU5QTA2NkZDNzM2ODkxNzQ3OUQ1REEwMTIyOTc0LzAvQkIyQjJFODk4OTEwODVF
RTkyNTE0QjVEOTFFRkU5RjU5MDA1QzkzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQjJCMkU4OTg5MTA4NUVFOTI1
MTRCNUQ5MUVGRTlGNTkwMDVDOTMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY4MjIzRTQxRkRGQ0M4QjNGMzI1NTdCMDlGN0QxRDQ1OEU1OUEwNjZG
QzczNjg5MTc0NzlENURBMDEyMjk3NC8wLzMxMzkzMjJlMzEzODM4MmUzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMC8OjAN
BgkqhkiG9w0BAQsFAAOCAQEAYwypejKIg67xnpw0qqSS2lT7xB2Zo8cFhRqIcmBB
+9HoSjH2tIzH3DS+rp+XCIqWD5fN9JPhBwM9VGO9bhUOQo22bfrgXQQ/0CFM3+ud
5teRVKdmRJ3sm8L4cazFbKD7E3Kn8u4T6dRbRuFdoqmc3cD3lK0DRhoT7ZVMYbQ8
14M0vyXjNiVha/gR0LCtKyCRhfAB1vRGbfTMatiebLSTdbl93UK9AfqFheGF4OTo
OFGfcUaFES9OmBmTJ/DPHuLrrC8bV0jvE/ApJpbzRAtDniyGYgSP+uNPxAnpmiPn
lTCww0AgDxuchEIAzD700JcXCaMOaIGAYpQT2JA5S2+yXw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:38 2025 by rpki-client