Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3131362e302f32342d3234203d3e203138363738.roa
File: 3139302e39302e3131362e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: knbO1SFnmsr/BK3FrxpQ8JtV4ii5PNJQnmTlZT1Me4E=
Subject key identifier: D9:C3:AC:43:20:A2:44:2C:37:23:D7:A9:2F:2A:7B:28:6E:1C:68:14
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 586632F1FA5EF7FC7D0AD1D431DC99C74C85201C
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3131362e302f32342d3234203d3e203138363738.roa
Signing time: Tue 04 Feb 2025 18:17:30 +0000
ROA not before: Tue 04 Feb 2025 18:12:30 +0000
ROA not after: Tue 03 Feb 2026 18:17:30 +0000
asID: 18678
IP address blocks: 190.90.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:66:32:f1:fa:5e:f7:fc:7d:0a:d1:d4:31:dc:99:c7:4c:85:20:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 4 18:12:30 2025 GMT
Not After : Feb 3 18:17:30 2026 GMT
Subject: CN=D9C3AC4320A2442C3723D7A92F2A7B286E1C6814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:f4:a2:9a:81:61:ab:93:50:07:d0:e2:09:
72:36:87:ec:57:42:0a:5b:d5:9a:58:a1:50:82:eb:
90:77:0a:8b:be:f9:7d:75:d4:f1:94:f2:de:43:18:
b0:19:52:50:8a:68:e5:ef:9e:bf:5a:f7:83:2f:b6:
ce:c3:39:39:c5:ee:ab:51:e0:2c:15:73:25:57:f3:
d0:66:70:d7:2d:0b:12:e9:27:a1:bb:10:42:ce:d8:
71:a4:a5:3c:5a:a8:66:c6:57:18:03:58:a5:bb:55:
be:92:47:a8:68:e8:8a:29:89:4d:1c:0c:8f:d2:8e:
3a:7e:98:0b:74:55:ec:24:f3:74:bb:a9:c6:e0:98:
3e:8e:9c:d1:7b:e7:8a:1f:e8:36:74:ae:80:39:96:
aa:85:d9:52:52:24:20:32:90:80:df:ef:1f:1e:b7:
dd:3f:0b:76:ee:a8:90:a7:c3:01:27:1a:fc:0e:d4:
49:2e:2e:bb:8a:76:c9:d9:90:26:de:32:ae:8c:26:
3e:64:a7:bc:9b:86:99:d1:06:94:02:b1:a5:af:cd:
4c:82:e8:5b:5e:be:ca:cb:ca:f3:45:1d:ea:65:9e:
c1:3e:76:db:26:73:08:59:b3:f1:d6:ac:59:f5:00:
8a:88:ec:03:9a:cc:6a:05:75:64:9c:38:94:1a:b2:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C3:AC:43:20:A2:44:2C:37:23:D7:A9:2F:2A:7B:28:6E:1C:68:14
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3131362e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.116.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4a:89:13:01:dd:09:4a:33:a5:78:81:89:c8:12:01:f8:04:
d8:54:91:07:1b:9c:93:8e:24:70:0b:20:6e:14:cd:89:a4:ea:
dc:9c:27:9b:d9:bc:4c:e6:ff:fb:c3:c0:ca:ec:5d:b1:7c:d0:
46:27:a8:58:3d:ee:09:a5:22:da:37:9d:db:fb:dd:19:06:df:
d1:ba:29:8d:e5:d4:01:a8:87:16:d8:d5:8b:e4:f9:b3:5a:04:
24:6a:d3:79:c5:bb:22:37:22:0c:d0:d9:45:2b:a2:a2:28:df:
c8:d4:09:01:2a:2e:ce:b4:88:a3:74:ca:9b:01:a2:a6:7b:cd:
bd:17:5d:d9:0d:67:02:24:5c:50:99:07:03:c6:f7:fa:f0:5b:
40:b9:67:89:16:c2:c3:c8:b0:6c:ca:7a:a2:c4:91:7f:86:8c:
18:e1:5c:eb:c5:af:40:73:22:b5:28:95:c9:f3:81:00:c2:8f:
e4:84:d5:ed:79:be:5c:9d:f2:a5:a2:6a:39:31:e0:96:ad:46:
1c:d3:1a:e7:4e:83:2a:e6:70:19:8d:2e:72:1d:47:21:45:b4:
ae:d1:5d:2e:5c:25:a7:51:8f:c9:0d:4d:39:bc:98:4e:1c:4d:
e0:7f:b6:92:0e:73:d3:e0:38:d0:26:c7:5a:3e:bf:62:a6:eb:
a4:c0:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:07 2025 by rpki-client