Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa
File: 3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: tEPV8q4JXBSGusARRZezEVgzpyRW7fAKGUkz0ObNR+c=
Subject key identifier: 17:96:5B:DB:D5:2C:3D:56:B5:15:92:C5:1C:1B:C3:D9:A3:45:72:A3
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 056A0B87F89664B843560A16ED5CC7095194F180
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:44 +0000
ROA not before: Tue 04 Feb 2025 19:59:44 +0000
ROA not after: Tue 03 Feb 2026 20:04:44 +0000
asID: 262191
IP address blocks: 190.131.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:6a:0b:87:f8:96:64:b8:43:56:0a:16:ed:5c:c7:09:51:94:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:44 2025 GMT
Not After : Feb 3 20:04:44 2026 GMT
Subject: CN=17965BDBD52C3D56B51592C51C1BC3D9A34572A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:e2:55:05:91:7e:a6:06:da:ff:de:57:c9:
e3:d3:c3:e1:0c:26:63:5e:e3:31:b2:ae:75:34:e2:
cc:62:f9:47:d9:9c:3c:e4:2b:a0:08:29:e0:f2:5d:
be:19:62:44:6f:49:ad:01:9c:bd:22:a1:7c:28:7e:
0f:f6:2a:49:f4:25:52:ea:c5:8d:7f:19:9f:e9:26:
47:ff:00:32:18:1b:ef:e6:fc:9a:9b:6c:fe:8b:3f:
e1:48:03:78:68:45:1b:4d:21:63:9d:57:ec:6d:96:
b5:16:be:5f:0c:c5:4a:d7:62:8e:c8:42:6f:99:14:
28:f8:11:1f:23:4c:18:0c:40:9f:41:cf:9b:f0:2a:
65:31:31:95:9e:c5:ac:65:3d:8b:a1:b8:b3:50:5d:
4f:7c:2b:f3:e0:49:8f:b7:d9:e4:bf:33:b9:53:af:
ee:db:b9:64:11:f9:73:43:c3:6b:70:c5:39:fe:6f:
ac:44:b0:e3:3d:7a:70:3a:dc:4b:66:36:56:8c:40:
36:00:3a:a6:1f:9a:38:07:e7:f2:84:b1:83:74:30:
50:2f:c3:e6:40:69:75:58:5e:e2:02:fb:54:e3:84:
93:9f:64:dc:d1:4f:ea:69:eb:81:14:68:32:67:39:
4f:ec:8f:01:4d:0d:ed:1d:f1:1d:1d:25:78:1d:85:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:96:5B:DB:D5:2C:3D:56:B5:15:92:C5:1C:1B:C3:D9:A3:45:72:A3
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.131.210.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c2:aa:d1:df:25:ee:d0:92:e5:fd:35:04:61:12:80:47:f8:
3f:0f:98:d4:fe:61:75:19:8d:c2:f8:a9:a1:e9:77:38:ea:16:
80:7d:e6:fe:cb:82:5d:ae:7c:29:e1:25:88:d1:a2:dd:ed:67:
cd:83:c7:18:d6:7a:85:fe:07:2b:b1:73:4b:b8:11:b9:c8:0b:
e7:97:c0:f0:ec:8a:0f:17:5d:60:53:2b:a4:6a:c8:64:d5:9e:
d5:4b:30:82:5a:14:4b:25:07:71:97:78:cc:f7:6a:83:0a:68:
1e:32:b8:95:52:a7:6a:c6:06:83:90:43:6d:e9:33:ff:c4:5c:
bf:ad:6c:f0:32:ef:8a:13:6d:0c:14:f9:40:52:2a:4a:93:11:
b3:71:c7:a5:31:f9:ca:d0:6e:9f:13:bb:4f:8b:25:e3:30:41:
86:12:ec:6d:fa:e0:c4:75:b6:cb:f9:bc:db:54:a4:48:c8:b1:
9c:9f:45:6b:03:b1:ee:b6:a0:b0:46:07:bb:fb:26:e9:11:6a:
df:e5:b5:33:6e:d7:fe:1b:e2:eb:a5:2f:14:d2:81:31:1d:aa:
8a:cf:97:35:bb:d7:83:95:c7:58:7d:6d:36:96:92:44:15:88:
fe:17:fa:e2:e1:55:f4:34:53:8c:a3:63:74:3d:ff:de:ab:ff:
cb:3f:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:18:55 2025 by rpki-client