Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231362e302f32322d3234203d3e20323632313931.roa
File: 3139302e3133312e3231362e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier: m3JuKgXZrHGPj3rWu3aXBeW+rD/3Ggb5jvrwJBcncoc=
Subject key identifier: 88:FA:BC:CE:DF:B5:DC:B6:88:29:F2:2A:5A:E6:68:F8:83:54:75:FF
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 07574D38BF465036315B8BC80B7A22B3FDD3A395
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231362e302f32322d3234203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:43 +0000
ROA not before: Tue 04 Feb 2025 19:59:43 +0000
ROA not after: Tue 03 Feb 2026 20:04:43 +0000
asID: 262191
IP address blocks: 190.131.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:57:4d:38:bf:46:50:36:31:5b:8b:c8:0b:7a:22:b3:fd:d3:a3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:43 2025 GMT
Not After : Feb 3 20:04:43 2026 GMT
Subject: CN=88FABCCEDFB5DCB68829F22A5AE668F8835475FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:77:d4:dc:ef:86:5e:d5:6c:31:a1:4f:d3:
25:c6:80:a0:d1:79:fa:aa:04:6c:19:c4:0a:0f:ad:
45:8b:f4:2a:c9:8e:e1:ac:39:7c:35:8c:e1:a7:88:
ac:dc:ab:d0:d4:65:b5:f2:83:d5:e7:85:33:75:c9:
61:37:cf:81:a2:c3:e0:16:5d:ee:56:13:60:cf:78:
f1:b0:3e:01:80:c3:2e:bf:a1:47:cd:d7:6e:4d:00:
94:2b:86:4b:ae:af:44:c8:7e:a6:90:5c:ae:14:c3:
85:12:54:0c:ec:a6:27:0d:eb:ec:9d:50:0b:c4:3f:
00:3c:2f:11:c7:47:d3:82:d8:41:71:1d:09:20:4a:
77:ea:d1:42:ff:e4:19:ee:3a:4e:c4:a9:fa:70:66:
5c:e4:60:0e:72:a3:4c:f1:12:40:08:d9:7d:44:28:
14:64:a1:ab:eb:ed:0f:91:6f:05:40:00:21:b5:05:
70:09:3f:93:ba:05:88:96:b2:f2:1d:42:19:f0:16:
dd:ae:80:9a:ed:c0:d6:ea:82:6e:b5:fa:3f:df:31:
ac:43:2d:22:cc:0f:e6:73:89:d0:f4:4e:39:b8:2f:
96:71:fb:a5:04:df:25:20:20:fb:29:73:30:7e:f3:
62:45:79:03:5c:f4:d7:4b:a9:d9:8a:4c:05:7c:1d:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FA:BC:CE:DF:B5:DC:B6:88:29:F2:2A:5A:E6:68:F8:83:54:75:FF
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231362e302f32322d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.131.216.0/22
Signature Algorithm: sha256WithRSAEncryption
38:48:4e:13:6f:03:a7:11:8c:41:a9:4c:d6:e8:42:57:80:9e:
c2:81:be:1f:9b:10:3c:ab:78:30:97:aa:2d:57:58:f3:0f:2f:
a2:22:9a:00:ed:79:aa:54:cf:15:d8:49:bf:51:26:c4:5f:fa:
54:c0:8d:87:5d:7d:44:7a:b7:e3:c1:b4:de:da:c3:4c:97:0a:
97:c1:72:f4:d1:09:d8:8e:57:2e:28:50:ca:dd:65:b2:81:b3:
8b:29:0d:dd:86:d0:1b:24:5c:e6:f2:8e:1b:eb:48:32:ed:f0:
ee:32:ef:6d:aa:ec:01:3e:e5:64:6f:d6:be:47:d6:ba:e2:3c:
a0:47:02:89:9a:04:27:79:22:4f:63:80:6f:d9:f9:17:82:03:
b1:69:3e:8b:7a:ad:30:f9:e8:09:c6:0c:74:9f:bf:f2:62:e2:
7b:cd:68:0e:c6:3e:77:fd:e7:96:3e:8e:a9:f9:eb:d3:72:e8:
c5:09:3d:dc:5d:70:ec:ac:ef:06:ea:13:8a:7c:c5:29:8e:e6:
65:49:51:88:e5:a7:ba:c3:d8:a9:ef:76:84:e8:10:75:21:83:
5c:2f:f0:12:19:84:21:10:99:10:6a:61:70:6a:18:d4:41:a8:
03:90:af:3a:5b:50:f3:95:3e:98:6f:cc:21:90:d5:03:54:78:
28:b9:fb:9b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUB1dNOL9GUDYxW4vIC3ois/3To5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNTAyMDQxOTU5NDNaFw0yNjAyMDMyMDA0NDNaMDMxMTAvBgNV
BAMTKDg4RkFCQ0NFREZCNURDQjY4ODI5RjIyQTVBRTY2OEY4ODM1NDc1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyg3fU3O+GXtVsMaFP0yXGgKDR
efqqBGwZxAoPrUWL9CrJjuGsOXw1jOGniKzcq9DUZbXyg9XnhTN1yWE3z4Giw+AW
Xe5WE2DPePGwPgGAwy6/oUfN125NAJQrhkuur0TIfqaQXK4Uw4USVAzspicN6+yd
UAvEPwA8LxHHR9OC2EFxHQkgSnfq0UL/5BnuOk7EqfpwZlzkYA5yo0zxEkAI2X1E
KBRkoavr7Q+RbwVAACG1BXAJP5O6BYiWsvIdQhnwFt2ugJrtwNbqgm61+j/fMaxD
LSLMD+ZzidD0Tjm4L5Zx+6UE3yUgIPspczB+82JFeQNc9NdLqdmKTAV8HbidAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUiPq8zt+13LaIKfIqWuZo+INUdf8wHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMxMzkzMDJlMzEzMzMxMmUzMjMxMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+
g9gwDQYJKoZIhvcNAQELBQADggEBADhIThNvA6cRjEGpTNboQleAnsKBvh+bEDyr
eDCXqi1XWPMPL6IimgDteapUzxXYSb9RJsRf+lTAjYddfUR6t+PBtN7aw0yXCpfB
cvTRCdiOVy4oUMrdZbKBs4spDd2G0BskXObyjhvrSDLt8O4y722q7AE+5WRv1r5H
1rriPKBHAomaBCd5Ik9jgG/Z+ReCA7FpPot6rTD56AnGDHSfv/Ji4nvNaA7GPnf9
55Y+jqn569Ny6MUJPdxdcOys7wbqE4p8xSmO5mVJUYjlp7rD2KnvdoToEHUhg1wv
8BIZhCEQmRBqYXBqGNRBqAOQrzpbUPOVPphvzCGQ1QNUeCi5+5s=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:21:03 2025 by rpki-client