Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232332e302f32342d3234203d3e20323632313931.roa
File: 3139302e3133312e3232332e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: 7AfSd2B2+XPvu0oOAaDPRSf/FK/ruaHfdFU7hvnI+IA=
Subject key identifier: D9:7B:3C:8A:70:5B:0E:81:9C:F6:DA:C8:16:8E:5C:EA:CB:32:83:AB
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 2B0D9642C8740C42BEC813980F6A56463236C512
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232332e302f32342d3234203d3e20323632313931.roa
Signing time: Tue 04 Feb 2025 20:04:33 +0000
ROA not before: Tue 04 Feb 2025 19:59:33 +0000
ROA not after: Tue 03 Feb 2026 20:04:33 +0000
asID: 262191
IP address blocks: 190.131.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:0d:96:42:c8:74:0c:42:be:c8:13:98:0f:6a:56:46:32:36:c5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Feb 4 19:59:33 2025 GMT
Not After : Feb 3 20:04:33 2026 GMT
Subject: CN=D97B3C8A705B0E819CF6DAC8168E5CEACB3283AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:90:ce:03:86:26:c0:32:0c:e7:6d:ef:2f:
78:6c:b3:e1:cc:1c:1a:14:05:f1:fe:d2:33:13:a6:
b8:10:44:87:9b:a1:55:9d:5e:b2:18:83:2d:57:91:
7a:0f:e9:c7:a3:94:b8:4b:db:2e:f6:fd:0c:aa:84:
27:50:88:b4:d6:42:88:41:97:1b:56:96:3c:fb:79:
b3:a3:6a:13:7d:48:c1:74:c0:23:83:6e:21:39:0e:
8b:3f:a5:6c:6c:ce:1c:a2:86:50:4b:6a:4a:51:00:
84:7c:09:51:37:97:f1:3c:b6:6c:b8:64:f0:75:4b:
dd:78:d2:c0:38:75:42:f1:20:8c:80:a5:b7:ab:9c:
10:7d:11:f4:23:c3:4d:e3:e8:d3:e1:b6:1c:2c:ac:
1f:96:d2:1b:1d:00:67:0e:fe:d6:67:85:e7:45:5a:
bc:f3:e5:3c:3c:46:a3:6d:09:87:84:ab:75:e6:a9:
03:28:12:fb:73:ea:8b:81:c7:ee:8d:44:1c:37:d7:
49:ee:6a:35:44:25:01:93:d0:2b:45:26:2a:73:8c:
95:a4:d2:89:12:19:57:e3:ad:b7:f7:e0:f9:e9:74:
9a:47:b4:27:7d:e6:31:5b:81:1b:c0:33:2e:6c:35:
91:52:0c:b7:25:39:49:af:81:05:e4:f1:d9:42:1e:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7B:3C:8A:70:5B:0E:81:9C:F6:DA:C8:16:8E:5C:EA:CB:32:83:AB
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232332e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.131.223.0/24
Signature Algorithm: sha256WithRSAEncryption
19:29:58:4e:14:5d:f2:29:96:00:68:d6:80:f4:ba:d8:5e:68:
ae:03:ea:f4:81:c1:86:d0:91:be:0f:f0:d3:ce:3d:8c:fc:42:
86:ba:5d:d6:25:b9:ee:7f:53:2e:93:e8:6b:5a:dd:bb:79:77:
2f:c3:11:d7:d4:82:19:04:41:17:6e:ab:14:4c:0a:19:ba:0d:
5a:f4:ae:87:58:22:53:77:23:8c:05:0b:09:54:e7:ab:57:70:
18:86:10:e2:14:32:35:75:84:ef:19:7a:7c:12:0c:69:31:2e:
53:bc:1d:bd:6f:19:9c:d7:54:76:07:ac:82:72:63:47:07:15:
b5:2c:bf:89:57:4f:52:1f:a8:17:09:b9:91:05:11:d0:e3:2a:
a9:7f:c3:a3:1a:a5:18:a2:83:a3:f4:54:30:82:51:aa:f0:e4:
70:b2:5a:94:da:b0:a5:41:b0:2e:6b:c9:0e:0b:59:cb:e9:09:
8f:c1:ca:d9:1e:78:5d:85:42:6e:ab:18:69:82:7b:56:a2:98:
35:5d:dd:1c:8f:58:41:d4:d6:a3:67:e0:12:26:c6:45:62:d5:
77:57:dc:99:ad:cd:fc:bb:ce:07:82:71:96:91:39:8f:76:15:
6b:12:ba:73:ee:b8:c1:c8:63:7b:f2:8b:28:ee:1e:44:0d:12:
da:cf:68:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:38:52 2025 by rpki-client