Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3131342e302f32342d3234203d3e20323632353839.roa
File: 3139302e39302e3131342e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier: PHQkziVapcU7BBDO5tONYWjP6idr4erHQKSvB9RVND0=
Subject key identifier: 0C:06:D9:B1:B8:8F:12:89:B8:CB:9B:CD:04:57:34:A8:94:ED:90:F6
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 24FC0ABF5690A343902453652BE740AEFB95003A
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3131342e302f32342d3234203d3e20323632353839.roa
Signing time: Tue 25 Feb 2025 20:15:01 +0000
ROA not before: Tue 25 Feb 2025 20:10:01 +0000
ROA not after: Tue 24 Feb 2026 20:15:01 +0000
asID: 262589
IP address blocks: 190.90.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:fc:0a:bf:56:90:a3:43:90:24:53:65:2b:e7:40:ae:fb:95:00:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 25 20:10:01 2025 GMT
Not After : Feb 24 20:15:01 2026 GMT
Subject: CN=0C06D9B1B88F1289B8CB9BCD045734A894ED90F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:a7:1d:0e:f6:66:b1:01:40:e9:ab:f7:35:
ac:ba:3f:d0:be:d9:73:13:90:b0:67:f4:51:99:2b:
b9:38:40:7c:89:e9:d1:d6:7f:ab:58:18:6c:2a:11:
9a:37:8b:ee:94:99:1a:63:f6:9c:78:46:03:dc:64:
5b:b0:a2:24:c6:c0:f3:72:34:c6:eb:34:96:9b:43:
41:1e:94:53:60:e0:62:c7:b7:a6:c1:b8:7b:da:5d:
7e:22:a6:2a:5b:97:24:97:ee:1b:42:f5:c0:b4:0c:
b9:ce:cf:d8:b3:83:ed:16:54:e8:51:74:0e:03:19:
55:46:80:25:2a:d3:3e:af:91:dd:fa:ca:1f:ed:f9:
b7:d2:12:78:b2:06:27:86:f9:bf:ba:4a:eb:b9:dc:
53:ab:8e:22:0e:d4:7f:c4:66:d6:03:55:85:b8:d5:
10:d8:15:ca:d1:59:b2:4c:94:ad:7b:87:2c:dd:d4:
36:c2:44:b6:e5:ed:82:72:ff:c8:67:f0:64:b5:5d:
af:c9:5a:1a:8e:5d:a4:5d:fe:cc:51:25:45:87:97:
f4:53:a9:f3:6f:0f:98:d6:d3:0b:2d:01:bb:67:a4:
93:92:b5:52:7b:23:34:cb:30:f9:fb:31:42:70:44:
e1:94:bd:56:36:35:9a:5d:f6:eb:bb:78:d8:0e:55:
63:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:06:D9:B1:B8:8F:12:89:B8:CB:9B:CD:04:57:34:A8:94:ED:90:F6
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3131342e302f32342d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e8:52:bc:9d:cf:42:0d:46:18:ac:94:fa:3b:a4:65:96:ba:
c2:88:87:f5:4c:01:51:29:13:6c:bd:a4:fe:58:2d:43:3e:f2:
78:95:b4:99:46:cb:9e:b4:12:b1:7d:5d:9a:57:64:e5:ee:e4:
01:e8:8b:bc:63:7d:b3:48:33:ba:67:1a:79:f5:0a:bc:44:df:
6c:e7:bc:0c:69:ae:2c:06:9b:f1:5e:91:43:6b:4e:65:73:0c:
76:ee:90:a1:88:97:96:92:7a:ad:d6:d1:62:d2:26:08:95:fa:
54:6e:fc:4f:a0:33:19:1f:af:77:b9:29:9c:52:42:fe:3d:91:
cd:67:4c:8a:0a:50:2d:54:ba:bf:c2:7e:08:b9:55:7e:b2:b4:
8b:aa:26:2e:5c:c3:d5:87:0d:ec:96:86:61:94:c5:0d:c1:d2:
4b:dd:35:17:30:3c:c0:7b:a6:70:11:a5:e2:40:d6:94:e1:8a:
8b:91:9b:7f:b9:01:3f:be:0e:31:c6:f5:0d:84:07:0a:f7:c8:
79:05:bc:75:d5:4a:8c:f2:bc:5e:54:50:eb:e4:d9:10:78:bd:
45:da:98:25:a1:8e:34:2b:80:c8:05:d8:5c:b3:a3:05:29:3b:
b6:d9:6f:2c:b5:eb:14:b6:cf:2e:73:cc:6d:13:88:5c:40:9b:
65:9b:bc:45
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJPwKv1aQo0OQJFNlK+dArvuVADowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMjUyMDEwMDFaFw0yNjAyMjQyMDE1MDFaMDMxMTAvBgNV
BAMTKDBDMDZEOUIxQjg4RjEyODlCOENCOUJDRDA0NTczNEE4OTRFRDkwRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeE6cdDvZmsQFA6av3Nay6P9C+
2XMTkLBn9FGZK7k4QHyJ6dHWf6tYGGwqEZo3i+6UmRpj9px4RgPcZFuwoiTGwPNy
NMbrNJabQ0EelFNg4GLHt6bBuHvaXX4ipipblySX7htC9cC0DLnOz9izg+0WVOhR
dA4DGVVGgCUq0z6vkd36yh/t+bfSEniyBieG+b+6Suu53FOrjiIO1H/EZtYDVYW4
1RDYFcrRWbJMlK17hyzd1DbCRLbl7YJy/8hn8GS1Xa/JWhqOXaRd/sxRJUWHl/RT
qfNvD5jW0wstAbtnpJOStVJ7IzTLMPn7MUJwROGUvVY2NZpd9uu7eNgOVWMrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDAbZsbiPEom4y5vNBFc0qJTtkPYwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvlpy
MA0GCSqGSIb3DQEBCwUAA4IBAQBr6FK8nc9CDUYYrJT6O6RllrrCiIf1TAFRKRNs
vaT+WC1DPvJ4lbSZRsuetBKxfV2aV2Tl7uQB6Iu8Y32zSDO6Zxp59Qq8RN9s57wM
aa4sBpvxXpFDa05lcwx27pChiJeWknqt1tFi0iYIlfpUbvxPoDMZH693uSmcUkL+
PZHNZ0yKClAtVLq/wn4IuVV+srSLqiYuXMPVhw3sloZhlMUNwdJL3TUXMDzAe6Zw
EaXiQNaU4YqLkZt/uQE/vg4xxvUNhAcK98h5Bbx11UqM8rxeVFDr5NkQeL1F2pgl
oY40K4DIBdhcs6MFKTu22W8stesUts8uc8xtE4hcQJtlm7xF
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:22 2025 by rpki-client