Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131382e302f32342d3234203d3e203532333639.roa
File: 3139302e3131302e3131382e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier: 8i1V4J+eSIsSZAG8+Iaw8r+/q0hAIeA2wxGLLgPgE/Q=
Subject key identifier: E5:D7:F2:6B:87:3D:53:5C:57:AB:45:0B:EA:39:7F:4A:FC:E3:B9:79
Certificate issuer: /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial: 6B3BAF2BDFCDBC4A6939A66E7088DD37C86873DE
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131382e302f32342d3234203d3e203532333639.roa
Signing time: Sun 02 Mar 2025 04:11:13 +0000
ROA not before: Sun 02 Mar 2025 04:06:13 +0000
ROA not after: Sun 01 Mar 2026 04:11:13 +0000
asID: 52369
IP address blocks: 190.110.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3b:af:2b:df:cd:bc:4a:69:39:a6:6e:70:88:dd:37:c8:68:73:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Validity
Not Before: Mar 2 04:06:13 2025 GMT
Not After : Mar 1 04:11:13 2026 GMT
Subject: CN=E5D7F26B873D535C57AB450BEA397F4AFCE3B979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:ba:cc:72:60:5b:aa:a8:f5:73:1b:54:89:
8f:fe:6e:c2:c2:76:2a:f9:c6:e6:58:58:0f:ce:50:
4d:3a:30:b2:4c:63:ab:4a:ce:49:d8:94:87:d6:27:
89:81:1d:d8:77:2c:1c:51:1a:00:5a:64:ed:9b:95:
f0:25:43:87:60:1b:68:e3:f1:14:08:5f:e7:15:e3:
d5:3b:fd:ad:72:19:f6:23:7e:2a:8f:f9:f1:b6:6a:
e3:a2:90:b1:a4:63:28:93:8a:17:95:0b:5c:07:06:
f4:2b:d1:3b:cf:ea:98:a4:0e:3a:ea:b9:f6:00:25:
21:40:45:38:d9:1d:fa:db:32:0b:0f:0a:60:2b:a7:
5d:16:4d:cf:4b:5a:3f:e6:1b:bd:0d:7a:44:03:c5:
79:68:3a:10:65:d4:0a:1f:ea:e5:01:f5:26:1e:76:
e6:ea:dc:b3:51:5c:0a:3b:e7:48:b7:4a:dc:d6:77:
4e:79:f7:4c:43:a5:2c:ee:87:54:df:c0:f9:fa:72:
39:c3:99:c7:c0:60:ac:07:d2:5a:86:69:4d:c8:7f:
c4:c0:96:59:13:bb:f2:0c:83:c9:78:ef:dc:af:cd:
f0:71:9e:bd:04:1d:9c:b1:e7:e9:87:c4:ff:6e:79:
b0:1c:f8:94:aa:80:eb:52:a1:f5:53:9e:95:1d:7c:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:F2:6B:87:3D:53:5C:57:AB:45:0B:EA:39:7F:4A:FC:E3:B9:79
X509v3 Authority Key Identifier:
keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131382e302f32342d3234203d3e203532333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:79:3d:4f:c3:43:43:ff:56:fc:82:8d:6a:3d:f8:c7:97:1b:
9e:8b:53:94:81:89:91:1d:9a:83:95:e1:46:49:20:f6:05:82:
1b:e9:1c:b2:a8:f7:a7:0a:5c:f8:73:81:ad:4f:64:c9:8f:6b:
eb:42:86:96:b0:a2:43:d4:63:90:ed:6f:55:a7:52:46:b3:b9:
21:61:0d:74:c2:98:a6:77:ab:24:c0:cb:ad:2a:ca:6f:7d:9d:
db:32:09:b1:46:46:aa:43:14:11:18:29:1c:3f:89:58:dd:9d:
6c:7b:45:3c:c2:18:0d:7c:0c:33:4c:94:32:55:8d:32:87:86:
43:5e:70:d0:fa:d1:9e:10:92:dd:cb:0c:d2:ca:c9:a8:8c:c8:
93:a2:f2:7a:9e:d6:ff:ec:69:41:d6:6e:8a:59:41:0f:b6:36:
e0:2d:da:fb:f3:f0:fb:ef:35:98:ec:9d:c0:4f:be:73:42:d1:
46:ef:aa:5b:c4:db:eb:5b:89:90:8c:47:67:f2:a7:a0:0a:9e:
69:15:b7:3e:d0:6a:6f:65:45:36:1a:2e:32:7e:94:d4:35:70:
a7:2a:09:dd:6d:60:d9:3a:00:9f:18:77:e9:ad:a7:a6:b0:2b:
ed:f4:45:f0:c2:f2:60:38:07:64:0f:94:d8:0a:9b:6f:95:0f:
18:ee:50:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:05 2025 by rpki-client