Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e39342e302f32332d3234203d3e203233333833.roa
File: 3139312e3130332e39342e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier: RHOxXMVSZRQQRIIc3fb99173J30PWWbnSqjAsbpA6Zw=
Subject key identifier: 0B:BA:8A:48:2F:73:AB:10:EF:BC:56:70:FE:21:C3:A4:E9:DB:99:C3
Certificate issuer: /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial: 48054CEE46AEB341286C651088D2EE05982220A2
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e39342e302f32332d3234203d3e203233333833.roa
Signing time: Tue 04 Feb 2025 18:24:10 +0000
ROA not before: Tue 04 Feb 2025 18:19:10 +0000
ROA not after: Tue 03 Feb 2026 18:24:10 +0000
asID: 23383
IP address blocks: 191.103.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:05:4c:ee:46:ae:b3:41:28:6c:65:10:88:d2:ee:05:98:22:20:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Validity
Not Before: Feb 4 18:19:10 2025 GMT
Not After : Feb 3 18:24:10 2026 GMT
Subject: CN=0BBA8A482F73AB10EFBC5670FE21C3A4E9DB99C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:88:31:f0:ba:2e:d6:e2:c4:0d:c4:e4:9d:
af:dd:36:2b:08:0f:a4:5a:e6:73:62:c2:e5:b4:f6:
f7:68:09:c2:51:b3:d0:9f:96:df:05:66:6e:6d:d2:
4f:44:a8:d8:32:2a:f8:d2:6e:a2:53:c4:d4:87:a4:
88:bb:a5:3f:0a:5b:aa:fb:61:a8:fb:08:a5:25:7f:
08:7f:84:1e:b9:f9:1c:67:fc:56:d2:80:3d:1c:0c:
23:56:08:73:1f:58:c1:75:d3:f7:25:c3:20:b7:6e:
09:ff:5c:6a:de:18:11:f2:17:00:ce:4f:08:b8:f2:
02:50:61:e9:c3:d7:85:2b:84:68:73:e6:82:ee:ee:
58:0a:e8:8b:7b:05:4c:eb:7c:a0:63:7b:6b:71:8f:
4e:a3:12:6a:ee:37:8f:24:75:7c:2b:3c:2e:37:de:
5e:bb:90:2f:9c:53:b5:85:bc:4f:53:de:ef:38:b2:
a0:21:e7:40:ad:a8:37:37:fd:46:9a:b0:98:8c:f5:
58:3e:7d:ac:04:e0:c8:0d:3f:62:ac:9c:d0:a3:22:
3c:46:b1:a2:7b:4f:6d:ba:4e:c0:45:dd:33:fd:f5:
b1:ed:3b:d0:c5:ad:4f:9c:3f:f6:f1:54:92:dd:9d:
58:d4:92:a5:3a:14:be:e2:cd:ae:23:4b:65:fc:fd:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BA:8A:48:2F:73:AB:10:EF:BC:56:70:FE:21:C3:A4:E9:DB:99:C3
X509v3 Authority Key Identifier:
keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e39342e302f32332d3234203d3e203233333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.103.94.0/23
Signature Algorithm: sha256WithRSAEncryption
00:3f:d0:98:ba:0e:d8:b3:63:72:96:ff:24:9f:5a:ea:d4:7a:
37:a2:75:5a:16:90:0d:ca:ab:4a:23:94:40:05:c2:99:7d:e2:
2b:ec:f7:f2:47:20:4c:a3:b6:e4:db:7c:40:33:7d:f7:4b:cf:
64:d6:34:43:6c:f0:85:3d:d3:04:c9:e2:6a:6a:37:ba:d0:6a:
b2:64:b2:e7:ed:64:30:cb:ae:7a:ce:23:da:fd:5f:85:40:a6:
9b:13:b5:2d:84:eb:88:42:97:1a:f6:98:59:5b:ff:75:a8:d1:
6e:66:38:0d:6d:cb:af:17:d5:8f:3f:56:97:db:a6:13:c3:80:
0a:5c:fe:8d:0d:3e:ee:bb:cd:8c:35:41:ff:66:ca:6e:6b:b8:
23:ff:e9:d8:d7:8a:2b:d5:b6:c7:cf:bc:69:7d:46:2b:20:e3:
47:f8:96:d6:8d:1f:38:05:e6:06:30:a0:f7:29:6d:1c:66:e0:
32:e4:21:eb:9b:a0:39:e5:9d:cc:db:16:b2:90:98:b7:3c:a6:
5e:0b:5d:91:97:18:b5:01:e7:a2:00:b3:25:63:4b:64:9b:36:
f1:7e:a4:db:e6:9f:42:43:df:59:5d:44:12:a1:91:32:26:f7:
70:d5:ef:2f:f8:f1:fc:39:37:4b:4f:5f:d8:23:2f:80:4b:cb:
3d:67:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:46 2025 by rpki-client