Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3132352e302f32342d3234203d3e2036353335.roa
File: 3139302e35342e3132352e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier: 37dQzptP+Gvql/TWdpKWnx6Xx7lvFoiRQMvF28PqjSg=
Subject key identifier: AF:47:5C:29:EC:BA:8C:AD:89:2E:17:F2:29:EF:39:2D:9A:BB:12:A7
Certificate issuer: /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial: 528198A50B2838D87C1FB2D2A75C1CD4F9395007
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3132352e302f32342d3234203d3e2036353335.roa
Signing time: Tue 04 Feb 2025 20:03:21 +0000
ROA not before: Tue 04 Feb 2025 19:58:21 +0000
ROA not after: Tue 03 Feb 2026 20:03:21 +0000
asID: 6535
IP address blocks: 190.54.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:81:98:a5:0b:28:38:d8:7c:1f:b2:d2:a7:5c:1c:d4:f9:39:50:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Validity
Not Before: Feb 4 19:58:21 2025 GMT
Not After : Feb 3 20:03:21 2026 GMT
Subject: CN=AF475C29ECBA8CAD892E17F229EF392D9ABB12A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:1d:4c:c3:27:df:08:bc:2e:26:98:95:9f:
26:57:2c:83:d9:de:2c:1a:84:a7:25:f7:42:b5:95:
a4:9b:57:cc:54:b0:93:39:bb:bf:3f:2a:ad:bb:7a:
62:c2:70:8c:32:a5:b2:15:d6:9c:ab:69:37:26:50:
a8:75:70:2c:39:4a:b0:39:80:5c:32:0c:a5:dc:72:
49:cf:9f:04:51:06:f4:75:0b:08:08:de:ff:5e:38:
08:39:5d:e1:c5:ae:78:a8:55:70:28:4f:b0:37:9d:
ea:92:de:f1:24:b9:76:d9:dc:a7:df:53:bd:bc:e4:
68:0d:7b:1f:bb:e3:d9:a5:1a:b0:5b:e5:79:e8:a2:
cc:08:f9:02:de:12:66:bf:13:e1:82:67:f7:32:50:
f6:2f:fe:da:a0:2d:49:ae:05:d3:51:a9:a1:9d:9e:
70:52:29:17:d6:74:d1:67:f4:2e:fa:9e:46:9f:ef:
81:98:3a:d4:05:57:0a:47:d3:69:56:33:30:88:9c:
2f:c0:60:ee:2f:97:0e:50:1d:0b:bf:04:45:c0:12:
df:50:bc:1f:a8:92:9f:1b:86:0b:2b:04:ad:62:7e:
4b:f1:01:2b:4d:13:73:c0:49:b2:bc:14:be:9e:ee:
1b:51:59:8d:b5:ad:35:3c:70:6d:c4:a0:48:8b:6e:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:47:5C:29:EC:BA:8C:AD:89:2E:17:F2:29:EF:39:2D:9A:BB:12:A7
X509v3 Authority Key Identifier:
keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3132352e302f32342d3234203d3e2036353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.54.125.0/24
Signature Algorithm: sha256WithRSAEncryption
28:5a:50:7b:60:34:30:9c:e9:be:f5:4a:32:93:6e:25:1e:71:
47:c5:94:38:1b:2c:ac:b2:b9:4f:5d:be:a3:a9:bc:ed:2c:4d:
a7:1d:91:4f:ee:23:eb:67:c6:1d:72:0d:77:3f:a6:15:76:5a:
bc:23:27:4a:c1:23:2b:5f:05:e1:70:f1:ba:b9:df:cf:fd:04:
97:d6:0f:50:b7:a2:f8:c9:96:ca:e6:60:b8:02:37:9d:bb:49:
2b:49:8f:43:6b:91:91:6b:55:e6:85:f6:14:a8:3a:d6:be:b3:
2a:c4:ce:2d:6a:18:ce:fd:f4:11:d8:6f:90:b8:1f:af:b7:69:
1c:ae:a1:a5:10:bc:0b:c9:7c:21:1b:fa:11:60:5f:3b:60:14:
4e:ee:94:93:1c:9a:b0:97:b2:7c:d3:ee:67:17:c8:46:58:df:
4d:8c:40:30:37:fa:7b:20:cc:18:e9:8d:95:45:9f:20:8d:25:
e7:8a:78:28:b7:c8:f4:17:44:c8:b5:cc:04:1c:ad:56:d3:da:
6f:1f:c5:1a:f5:b8:8b:a6:4d:13:8e:b5:48:5f:5e:d8:cb:fa:
2f:ef:cc:b0:6b:d6:31:36:cf:01:47:3c:70:07:9d:ea:fc:b3:
47:f4:1d:63:67:62:99:cb:b0:23:78:51:69:9a:a7:ce:47:bb:
fa:36:8a:c3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUoGYpQsoONh8H7LSp1wc1Pk5UAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNTAyMDQxOTU4MjFaFw0yNjAyMDMyMDAzMjFaMDMxMTAvBgNV
BAMTKEFGNDc1QzI5RUNCQThDQUQ4OTJFMTdGMjI5RUYzOTJEOUFCQjEyQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLB1MwyffCLwuJpiVnyZXLIPZ
3iwahKcl90K1laSbV8xUsJM5u78/Kq27emLCcIwypbIV1pyraTcmUKh1cCw5SrA5
gFwyDKXccknPnwRRBvR1CwgI3v9eOAg5XeHFrnioVXAoT7A3neqS3vEkuXbZ3Kff
U7285GgNex+749mlGrBb5XnooswI+QLeEma/E+GCZ/cyUPYv/tqgLUmuBdNRqaGd
nnBSKRfWdNFn9C76nkaf74GYOtQFVwpH02lWMzCInC/AYO4vlw5QHQu/BEXAEt9Q
vB+okp8bhgsrBK1ifkvxAStNE3PASbK8FL6e7htRWY21rTU8cG3EoEiLbiMRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUr0dcKey6jK2JLhfyKe85LZq7EqcwHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMxMzkzMDJlMzUzNDJlMzEzMjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+Nn0wDQYJ
KoZIhvcNAQELBQADggEBAChaUHtgNDCc6b71SjKTbiUecUfFlDgbLKyyuU9dvqOp
vO0sTacdkU/uI+tnxh1yDXc/phV2WrwjJ0rBIytfBeFw8bq538/9BJfWD1C3ovjJ
lsrmYLgCN527SStJj0NrkZFrVeaF9hSoOta+syrEzi1qGM799BHYb5C4H6+3aRyu
oaUQvAvJfCEb+hFgXztgFE7ulJMcmrCXsnzT7mcXyEZY302MQDA3+nsgzBjpjZVF
nyCNJeeKeCi3yPQXRMi1zAQcrVbT2m8fxRr1uIumTROOtUhfXtjL+i/vzLBr1jE2
zwFHPHAHner8s0f0HWNnYpnLsCN4UWmap85Hu/o2isM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:55 2025 by rpki-client