Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e302e302f32342d3234203d3e2036353335.roa
File: 3139302e35342e302e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier: bkNzQRgBvUo6UZH2kecyGGjz7gdZayvtGaAIJXpZlp8=
Subject key identifier: D9:76:CE:5D:80:D8:D3:96:85:7C:8B:33:82:8E:C0:8C:68:CD:5C:58
Certificate issuer: /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial: 0EB130D3E07353B53A9DF57DB541BA181F709BA1
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e302e302f32342d3234203d3e2036353335.roa
Signing time: Tue 04 Feb 2025 20:03:26 +0000
ROA not before: Tue 04 Feb 2025 19:58:26 +0000
ROA not after: Tue 03 Feb 2026 20:03:26 +0000
asID: 6535
IP address blocks: 190.54.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b1:30:d3:e0:73:53:b5:3a:9d:f5:7d:b5:41:ba:18:1f:70:9b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Validity
Not Before: Feb 4 19:58:26 2025 GMT
Not After : Feb 3 20:03:26 2026 GMT
Subject: CN=D976CE5D80D8D396857C8B33828EC08C68CD5C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:30:7f:c3:cd:72:1c:5c:db:e3:a3:ec:5d:
7f:d9:c8:32:eb:b1:05:a8:16:9e:3b:7a:be:ed:03:
36:ae:97:39:01:3f:94:cb:fc:ff:1b:a4:f0:bb:12:
6a:d0:86:74:46:a0:e2:42:62:29:bc:dc:17:f5:c9:
68:4e:c5:eb:36:55:65:a5:ce:2a:ec:30:a0:41:73:
34:03:45:bf:af:d7:74:60:14:ec:3b:5e:07:4c:47:
d9:d5:e0:23:27:45:ef:6f:80:70:59:a4:f3:a9:6c:
80:45:ef:9e:bc:6e:31:3b:66:aa:2a:5f:1b:fd:22:
92:31:36:e9:e4:60:03:60:9e:61:93:81:f1:57:27:
07:80:f7:1d:1d:a7:7b:dc:4e:00:40:04:2f:1b:c4:
32:f8:fe:63:14:14:df:3f:0c:06:7e:8d:00:75:5e:
db:fc:d4:89:86:62:82:5f:d8:bc:05:17:2b:62:49:
b5:09:c6:55:67:47:cf:a2:36:b9:8a:7b:4d:7c:72:
76:95:b8:3f:b5:d4:a4:37:80:fb:73:e2:2d:29:0c:
bb:5e:b5:5d:58:44:2e:a6:59:49:c0:33:71:d3:87:
df:90:ab:ff:47:c5:34:53:72:95:a7:10:3f:1d:02:
cb:bb:76:c4:a5:b2:ab:ae:d3:9f:db:5b:eb:bd:a4:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:76:CE:5D:80:D8:D3:96:85:7C:8B:33:82:8E:C0:8C:68:CD:5C:58
X509v3 Authority Key Identifier:
keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e302e302f32342d3234203d3e2036353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.54.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ff:c1:a2:90:dd:ee:f9:11:59:d2:da:4c:58:58:53:53:4d:
9d:c4:95:55:4d:08:29:25:40:93:e3:8d:79:18:d3:04:66:b7:
de:e4:f3:99:c9:6d:25:03:25:25:37:e5:91:7c:11:8c:b5:66:
5f:39:fb:7f:8f:c1:d3:20:f5:d6:db:4f:a8:20:8e:73:ee:de:
8c:53:28:0a:4f:24:fc:3c:56:4b:31:a4:71:da:7a:d5:4b:bd:
6f:20:2e:01:b9:2c:cc:93:9c:4c:ff:dd:09:11:f6:1f:c2:4a:
04:f2:78:93:9e:1a:c2:c4:8d:c7:be:cf:97:67:95:13:c2:64:
9a:b4:5d:b4:7a:a2:27:c1:27:68:a6:93:66:58:eb:9b:3c:4c:
35:31:52:53:09:d8:36:0a:de:1c:d3:61:dd:70:ab:5a:6b:9b:
ba:9b:6c:69:22:f3:6a:96:c5:a3:ec:72:70:1c:5f:91:ce:ea:
e4:67:ca:6e:d9:08:6c:17:52:04:aa:50:f6:58:ea:40:62:cb:
04:de:fc:17:af:52:92:3c:61:a7:d3:6c:a8:59:53:dd:7c:84:
af:d3:dc:5a:27:fa:36:73:8b:bf:82:55:af:bf:3b:77:64:2c:
5d:4a:65:1a:49:70:d8:cb:68:20:da:79:71:04:7b:9c:9e:eb:
d4:c0:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:45 2025 by rpki-client