Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3139302e31332e3131362e302f32322d3234203d3e203631343636.roa
File: 3139302e31332e3131362e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier: v3izHfslv7k6wl+AkkdFnv8p0rHeUqnthIN0wPLAAfw=
Subject key identifier: 45:C9:49:19:A3:0F:B5:27:3E:7F:64:47:87:0F:CD:E5:7A:38:DA:5F
Certificate issuer: /CN=B3AC8703592539ADD492A1BDC08E997B67459567
Certificate serial: 31550CBFA85C31DF0263B5FEBE6928A2101BF77C
Authority key identifier: B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3139302e31332e3131362e302f32322d3234203d3e203631343636.roa
Signing time: Tue 04 Feb 2025 18:25:10 +0000
ROA not before: Tue 04 Feb 2025 18:20:10 +0000
ROA not after: Tue 03 Feb 2026 18:25:10 +0000
asID: 61466
IP address blocks: 190.13.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:55:0c:bf:a8:5c:31:df:02:63:b5:fe:be:69:28:a2:10:1b:f7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3AC8703592539ADD492A1BDC08E997B67459567
Validity
Not Before: Feb 4 18:20:10 2025 GMT
Not After : Feb 3 18:25:10 2026 GMT
Subject: CN=45C94919A30FB5273E7F6447870FCDE57A38DA5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:d0:d3:b7:c0:ac:b5:be:fe:fa:3d:c8:01:
61:ef:77:08:8b:14:88:8f:a3:ff:44:d3:ff:79:6d:
01:d2:64:c0:3d:7f:ca:c0:7a:40:ba:e8:55:8e:d5:
4b:f7:56:2e:de:d1:5c:1a:3e:be:b1:6a:35:7d:97:
04:b2:07:c6:aa:13:f4:61:1b:35:f7:44:93:ac:67:
ce:dd:d6:b2:41:69:b3:ec:86:9d:46:4d:7a:6d:01:
a2:bb:7c:e7:bd:71:6b:81:07:80:21:44:5a:ab:58:
81:27:20:56:c2:97:e6:0d:dc:f8:2e:be:dc:da:60:
12:5c:71:b9:ca:40:28:7b:4f:b0:b7:c0:fe:c7:af:
f6:54:7d:90:57:c4:8b:66:c2:50:ea:a9:3d:ec:74:
94:94:98:40:c3:68:fe:ce:39:b3:4b:5a:b4:e2:ff:
b1:db:2d:62:c9:5a:65:84:ae:b9:99:c5:84:aa:77:
bf:7a:5c:21:84:f0:9f:83:c3:43:89:47:33:28:85:
66:f7:66:b4:7e:6a:15:f1:4e:74:87:f1:d2:bd:83:
ef:0f:3a:3a:e9:70:9e:36:1f:11:d7:ed:a5:2e:f3:
b0:73:9d:cc:63:fa:ec:f5:8b:9f:9f:11:e3:50:f8:
3f:b1:4b:1a:f0:f6:4a:91:cf:63:7d:00:88:76:fa:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:49:19:A3:0F:B5:27:3E:7F:64:47:87:0F:CD:E5:7A:38:DA:5F
X509v3 Authority Key Identifier:
keyid:B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3139302e31332e3131362e302f32322d3234203d3e203631343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.13.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:a2:86:f9:5c:01:74:2e:79:14:a3:b2:b2:25:13:e9:84:cb:
7e:97:90:a9:82:4f:e8:97:03:1a:a8:d3:f0:f5:38:e4:ef:91:
9c:17:2d:0e:be:c0:ed:70:34:7b:26:75:0e:a1:32:35:6b:ef:
ca:42:1f:7d:e2:52:a4:03:d7:00:13:a8:be:0a:1e:16:11:4f:
0a:e4:94:cc:26:67:0a:38:9e:1c:e2:28:b2:6c:47:8c:c6:8d:
88:9e:80:b3:33:f1:dc:02:a0:a2:48:90:f4:84:a2:a2:a8:ef:
f1:87:2c:7d:a8:ca:f0:aa:95:08:c2:ad:f0:7e:5a:a9:60:98:
2f:7c:db:25:3e:88:2a:c2:4e:54:a8:54:bb:aa:b6:cf:00:85:
2b:44:c8:95:d5:3a:ae:9a:9e:6b:6c:52:f8:fd:1b:9d:e9:30:
3c:08:16:48:e4:d2:d9:8a:57:dc:62:d7:f6:ee:1d:6b:61:f0:
3a:ea:41:71:10:eb:ea:65:45:57:9b:e7:0b:f6:96:43:41:56:
cd:40:eb:d9:aa:39:88:ba:5f:d6:d2:34:5c:32:cd:80:e8:2c:
12:49:2b:1a:91:c6:c9:f5:f6:cd:3b:1d:1b:a2:09:2a:f7:d5:
18:08:55:1d:1c:01:eb:1c:b6:fa:3b:27:42:b8:e4:ac:cf:c8:
e4:bc:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:52:28 2025 by rpki-client