Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139362e302f32322d3234203d3e20323632313931.roa
File: 3139302e3133312e3139362e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier: Z17mZzanvVdyuQCkETi1EYEid+baVZnLRjSxV8+x7+k=
Subject key identifier: 2E:67:85:92:4F:86:13:17:D0:7C:34:0F:AB:AB:CA:54:4E:7A:10:B9
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 06DC517C5D526A0FF7F1C74560438FED73492E9A
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139362e302f32322d3234203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:37 +0000
ROA not before: Tue 04 Feb 2025 19:59:37 +0000
ROA not after: Tue 03 Feb 2026 20:04:37 +0000
asID: 262191
IP address blocks: 190.131.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:dc:51:7c:5d:52:6a:0f:f7:f1:c7:45:60:43:8f:ed:73:49:2e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:37 2025 GMT
Not After : Feb 3 20:04:37 2026 GMT
Subject: CN=2E6785924F861317D07C340FABABCA544E7A10B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:b6:b4:30:f9:5a:70:5f:91:42:7d:32:56:
9a:96:70:e2:e5:c9:9d:25:3f:93:17:d1:7e:c3:44:
5a:56:ec:d0:f9:14:ad:08:2d:17:00:78:83:05:d7:
36:d5:bb:fc:d8:25:34:68:a8:66:2d:4b:09:b7:db:
66:42:9a:c9:ad:5e:e3:c9:7f:18:3d:88:44:4b:12:
26:0c:62:82:ac:ed:e4:60:92:10:0a:91:ff:69:3b:
d0:d4:b1:9a:b7:23:a0:ab:bf:b2:50:f2:13:67:0e:
99:5e:0c:ff:d0:5e:d8:7c:b4:b1:44:a1:85:af:85:
14:9f:f9:b0:f0:64:3f:46:85:d6:05:4a:df:cf:ae:
d3:ce:99:b3:3a:73:dd:da:67:1b:f1:68:ad:1a:61:
e9:a0:ef:5b:9f:75:69:36:bb:32:04:4c:e2:b8:66:
7e:be:d5:a9:da:17:cd:69:bb:6e:2c:cb:ed:37:da:
6e:66:85:ae:30:8a:94:90:06:41:9c:d2:bd:17:0d:
4e:5b:69:47:fe:6f:d5:77:c2:55:cd:c5:90:1a:b9:
34:83:64:91:30:49:e7:a1:7c:e1:c4:7c:6f:83:1f:
35:1d:d6:74:9f:d8:bb:57:60:04:79:8a:1a:d0:a0:
c5:5f:53:4f:65:cf:57:33:d8:01:f0:3e:68:e1:80:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:67:85:92:4F:86:13:17:D0:7C:34:0F:AB:AB:CA:54:4E:7A:10:B9
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139362e302f32322d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.131.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:81:98:09:7b:4e:54:ea:6e:86:72:5d:90:db:8d:2a:01:32:
e6:0e:28:da:24:6f:3a:85:9e:4d:98:f7:33:12:c7:78:aa:d0:
8a:ce:1e:41:7f:ca:d1:80:93:1c:44:8c:90:6c:e3:1a:1d:5a:
0e:3e:18:df:ed:04:27:af:2b:c6:a5:77:20:27:19:04:ff:c3:
48:fa:dd:b8:1a:28:6d:33:e2:5a:56:21:42:73:89:8a:e7:5b:
dd:9d:28:e5:59:85:d7:42:8f:48:91:42:1f:d4:6c:e9:e8:4e:
6e:37:9f:11:06:ff:cf:61:9c:e9:9a:f0:6d:3d:b1:06:5b:27:
f9:78:a0:a8:90:f8:ac:14:b7:ba:e6:18:63:81:ce:69:bb:82:
f4:fe:90:ea:82:e9:cf:0d:7b:4a:96:19:36:4d:73:e9:3a:81:
45:f6:ee:e9:96:71:af:b0:cf:b9:8c:56:41:63:4b:60:55:a4:
ff:a4:fe:85:97:d3:29:06:37:0c:42:09:20:e3:f2:af:27:08:
1f:ce:9e:41:49:05:44:20:4c:31:d9:11:f2:8f:94:b1:2c:5f:
d1:52:3a:c9:4d:9b:de:ed:53:41:00:3b:66:4b:6c:2c:d7:e7:
73:b4:ac:b9:81:f7:89:dd:bb:1a:f8:c5:cc:ce:96:ba:47:ca:
1f:bc:a5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:47:51 2025 by rpki-client