Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e38382e302e302f31332d3136203d3e203237383331.roa
File: 3139312e38382e302e302f31332d3136203d3e203237383331.roa (raw, json)
Hash identifier: MADSOfn59n8dlixyOwrt60F3rUgRHju3iRjsIDlPelk=
Subject key identifier: E4:E0:D1:B7:83:7C:ED:07:2E:F3:EF:E7:1B:1C:70:7E:13:4F:8D:F4
Certificate issuer: /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial: 5A8DEFF85D95C30A2490EF5164EC3BE8C424124C
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e38382e302e302f31332d3136203d3e203237383331.roa
Signing time: Tue 04 Feb 2025 18:22:34 +0000
ROA not before: Tue 04 Feb 2025 18:17:34 +0000
ROA not after: Tue 03 Feb 2026 18:22:34 +0000
asID: 27831
IP address blocks: 191.88.0.0/13 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8d:ef:f8:5d:95:c3:0a:24:90:ef:51:64:ec:3b:e8:c4:24:12:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Validity
Not Before: Feb 4 18:17:34 2025 GMT
Not After : Feb 3 18:22:34 2026 GMT
Subject: CN=E4E0D1B7837CED072EF3EFE71B1C707E134F8DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:5b:89:ae:fc:53:3a:56:af:1c:35:a1:da:
14:6c:ba:aa:e5:f4:7f:fb:ff:bc:c0:64:45:01:7e:
04:ed:36:fd:8c:6e:58:7e:07:c3:8b:b8:ed:18:94:
74:2d:ba:98:32:cb:b3:67:a5:dc:f0:9f:d9:55:63:
7a:51:86:51:a9:c5:90:5d:6e:54:36:06:75:cd:4b:
b6:db:39:29:de:a6:e3:14:37:3f:c1:ce:38:ad:95:
ea:ba:7f:d6:8c:4f:e7:ab:fe:0d:16:ad:86:43:d5:
68:93:10:36:15:2c:53:a0:48:a3:7e:dc:58:23:4f:
85:ce:61:aa:21:06:63:ec:a0:c4:6c:63:0a:83:22:
52:1c:21:41:34:70:49:5c:e4:3d:b9:8c:ab:50:48:
8c:7f:bb:f3:26:44:24:0f:b9:3f:89:7e:d9:f2:80:
75:61:c5:5f:40:72:35:8c:a8:91:51:26:7f:3c:9e:
1d:cb:9a:61:3e:e8:e4:ed:0c:f5:a9:f4:bb:71:2f:
7b:e5:e8:a9:a3:e3:86:64:0b:a5:0d:47:c2:51:52:
fc:02:89:9d:b1:1b:b7:44:b6:6a:df:9b:c5:61:6a:
96:ff:f1:58:ea:72:5a:b2:9d:a8:26:6f:74:a5:d9:
0b:fd:d5:31:4c:65:5f:eb:79:29:2d:89:5d:a8:ab:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E0:D1:B7:83:7C:ED:07:2E:F3:EF:E7:1B:1C:70:7E:13:4F:8D:F4
X509v3 Authority Key Identifier:
keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e38382e302e302f31332d3136203d3e203237383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.88.0.0/13
Signature Algorithm: sha256WithRSAEncryption
bf:5e:fe:e2:9d:f5:3d:ad:00:b2:c5:49:f0:6d:11:70:e9:f1:
37:6a:3f:09:29:cc:57:25:00:b2:f8:1f:16:1b:99:de:52:4c:
cf:f2:fa:9a:29:6c:bf:85:e3:d5:af:ac:19:7c:76:ac:e2:70:
aa:78:8a:b7:56:14:a9:03:bf:2a:18:a1:9d:b3:1b:38:86:b4:
a7:c3:32:20:35:dd:57:73:ab:5a:72:28:20:30:51:0a:d5:c6:
df:60:57:ab:fd:28:c5:08:4b:17:52:7a:9a:fe:87:45:56:6a:
13:f1:9d:9e:56:4b:fa:7f:4e:a1:75:03:d1:7f:25:45:da:70:
55:7c:02:34:ae:8d:01:47:6c:1d:53:c5:44:ad:af:f2:46:f4:
49:6b:27:50:31:b1:ab:b6:e3:83:85:17:8a:18:90:76:5d:92:
a7:98:2e:02:1a:aa:b6:aa:cd:53:51:04:d1:e9:bf:04:1b:0a:
35:4b:86:b6:f6:89:e2:13:27:cf:b0:01:15:44:23:87:8b:52:
79:23:6b:0e:b2:e0:be:11:c6:24:a3:6d:bb:ad:72:cf:83:0a:
b9:b4:84:e7:63:f7:d3:34:c1:a4:3a:8f:76:e3:71:ee:89:f3:
87:a6:fb:c4:e9:da:c9:42:50:e1:57:b3:6f:f6:da:c4:1d:4a:
b8:a8:ee:c4
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUWo3v+F2VwwokkO9RZOw76MQkEkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y0MjZGNjU3QzlENkJGNjcyOEI1RDgwQjREMDNGRTI0
NUJDRDk3RTAeFw0yNTAyMDQxODE3MzRaFw0yNjAyMDMxODIyMzRaMDMxMTAvBgNV
BAMTKEU0RTBEMUI3ODM3Q0VEMDcyRUYzRUZFNzFCMUM3MDdFMTM0RjhERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxFuJrvxTOlavHDWh2hRsuqrl
9H/7/7zAZEUBfgTtNv2Mblh+B8OLuO0YlHQtupgyy7Nnpdzwn9lVY3pRhlGpxZBd
blQ2BnXNS7bbOSnepuMUNz/Bzjitleq6f9aMT+er/g0WrYZD1WiTEDYVLFOgSKN+
3FgjT4XOYaohBmPsoMRsYwqDIlIcIUE0cElc5D25jKtQSIx/u/MmRCQPuT+Jftny
gHVhxV9AcjWMqJFRJn88nh3LmmE+6OTtDPWp9LtxL3vl6Kmj44ZkC6UNR8JRUvwC
iZ2xG7dEtmrfm8Vhapb/8Vjqclqynagmb3Sl2Qv91TFMZV/reSktiV2oq4uzAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU5ODRt4N87Qcu8+/nGxxwfhNPjfQwHwYDVR0j
BBgwFoAUP0JvZXyda/Zyi12AtNA/4kW82X4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0JFRTc5MkEyRDk3ODlGMjY5NDBDNEZBNUFEMDJBMkVG
MTlFRENBNjk2ODI4QTgxOEIwNUQyRUZFODBCNjVGLzAvM0Y0MjZGNjU3QzlENkJG
NjcyOEI1RDgwQjREMDNGRTI0NUJDRDk3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjQyNkY2NTdDOUQ2QkY2NzI4
QjVEODBCNEQwM0ZFMjQ1QkNEOTdFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNCRUU3OTJBMkQ5Nzg5RjI2OTQwQzRGQTVBRDAyQTJFRjE5RURDQTY5
NjgyOEE4MThCMDVEMkVGRTgwQjY1Ri8wLzMxMzkzMTJlMzgzODJlMzAyZTMwMmYz
MTMzMmQzMTM2MjAzZDNlMjAzMjM3MzgzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDv1gwDQYJKoZI
hvcNAQELBQADggEBAL9e/uKd9T2tALLFSfBtEXDp8TdqPwkpzFclALL4HxYbmd5S
TM/y+popbL+F49WvrBl8dqzicKp4irdWFKkDvyoYoZ2zGziGtKfDMiA13Vdzq1py
KCAwUQrVxt9gV6v9KMUISxdSepr+h0VWahPxnZ5WS/p/TqF1A9F/JUXacFV8AjSu
jQFHbB1TxUStr/JG9ElrJ1Axsau244OFF4oYkHZdkqeYLgIaqraqzVNRBNHpvwQb
CjVLhrb2ieITJ8+wARVEI4eLUnkjaw6y4L4RxiSjbbutcs+DCrm0hOdj99M0waQ6
j3bjce6J84em+8Tp2slCUOFXs2/22sQdSrio7sQ=
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:52:54 2025 by rpki-client