Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e203138363738.roa
File: 3139302e39302e302e302f31372d3234203d3e203138363738.roa (raw, json)
Hash identifier: rwXiR2OKFAlGdvba4Dh+bRjg5HgxyDHtFhJE027MeDM=
Subject key identifier: 64:B8:B7:F6:71:AE:C0:8D:BF:FB:A7:3E:F9:5D:79:C3:40:34:34:AE
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 18E4A7352DCEC6BE79D66A9D438B6C4476578411
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e203138363738.roa
Signing time: Tue 25 Feb 2025 20:20:00 +0000
ROA not before: Tue 25 Feb 2025 20:15:00 +0000
ROA not after: Tue 24 Feb 2026 20:20:00 +0000
asID: 18678
IP address blocks: 190.90.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e4:a7:35:2d:ce:c6:be:79:d6:6a:9d:43:8b:6c:44:76:57:84:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 25 20:15:00 2025 GMT
Not After : Feb 24 20:20:00 2026 GMT
Subject: CN=64B8B7F671AEC08DBFFBA73EF95D79C3403434AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:1f:d5:2a:a1:7b:eb:e2:2a:c7:52:7a:78:
34:fa:93:48:3e:bb:38:f5:ce:b4:6e:b9:15:ca:2d:
a8:87:e3:01:ce:7e:cf:27:8b:2d:ad:a8:49:61:f6:
a5:32:14:80:2d:e1:71:39:f1:9e:cd:0b:ac:a9:d3:
64:61:6d:cd:78:24:c7:f7:5a:22:f2:43:1f:0e:46:
5f:5e:e6:6d:57:c9:0e:81:f2:89:ea:11:47:52:7e:
62:a8:34:62:ee:a1:47:e7:58:1a:1e:29:df:e1:f4:
c6:95:87:ce:ed:48:4c:df:42:e8:3e:40:d6:e3:52:
39:3f:c3:d9:8c:1a:24:bf:c3:05:09:36:b3:e5:5b:
75:91:b7:c4:e2:97:cb:89:1e:50:68:15:3f:02:8c:
36:9a:d4:ff:29:b2:10:4e:e8:ee:14:a2:e8:d0:92:
64:7c:c1:a0:e4:ea:c6:7e:65:d0:9f:37:54:4e:33:
5a:da:8b:00:0f:27:ab:84:7b:f4:ce:88:9d:59:a0:
51:c9:8c:aa:d7:4b:f6:95:01:4b:4f:b6:49:d1:4e:
15:a9:aa:bb:a3:9a:c0:15:42:10:50:e3:51:20:87:
06:03:5a:8e:12:d2:4e:23:ac:2a:19:85:ed:39:0c:
87:3e:36:f5:0e:ba:39:a4:ed:60:85:ec:7e:be:0a:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:B7:F6:71:AE:C0:8D:BF:FB:A7:3E:F9:5D:79:C3:40:34:34:AE
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5e:b6:ad:75:31:4c:0b:5c:eb:79:f4:cc:98:7d:0e:46:61:48:
bf:24:fb:16:d5:1e:39:08:3a:1c:a3:13:52:a2:71:b3:ea:5a:
34:36:ed:86:86:a9:b3:b3:59:45:c3:2a:83:78:37:b2:cd:e9:
c0:eb:78:a6:bc:2c:b3:57:7d:e2:c0:30:05:fc:31:cc:b4:26:
88:b4:35:33:cf:91:8e:8c:6d:9e:89:d7:57:fc:6d:05:2c:d8:
20:43:4c:80:af:f2:58:88:d1:02:e5:9f:ab:ef:92:cc:e4:3a:
44:8a:76:9a:05:cc:4e:c6:a8:a5:e2:e5:c8:83:51:b4:82:0d:
26:c5:21:05:f5:d6:94:74:26:51:3d:b1:4c:19:29:6c:a0:b1:
0b:9f:d0:9d:1c:8a:65:3e:4e:a1:3b:ac:c8:70:d4:89:2e:e3:
43:9a:4d:d4:6d:22:38:cd:1e:77:c0:03:54:e5:d1:fc:8f:ad:
34:43:0f:93:40:1a:31:eb:bb:81:8f:07:34:34:a4:a4:d2:5c:
ab:71:8a:fd:2f:bc:d7:7c:86:75:82:4d:2c:c0:22:91:97:5b:
15:35:e1:1c:d1:7b:77:22:30:d1:cb:39:b3:d1:28:21:c7:34:
9c:01:b0:c9:bf:29:56:df:df:16:9c:42:90:e1:e0:3c:8b:9b:
a6:4a:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:46 2025 by rpki-client