Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3133342e302f32332d3234203d3e203237383337.roa
File: 3139302e39302e3133342e302f32332d3234203d3e203237383337.roa (raw, json)
Hash identifier: 1eIiyC67OgU98wvhglRnJZd7VDN1o1Ib1y90Cciwdg8=
Subject key identifier: 59:EC:02:ED:12:40:AB:2C:18:90:7B:0E:B0:3F:1E:51:8A:53:C4:66
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 42EFE62111BF5841FEB11DD6EDB6AC693A51A00B
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3133342e302f32332d3234203d3e203237383337.roa
Signing time: Tue 04 Feb 2025 18:17:22 +0000
ROA not before: Tue 04 Feb 2025 18:12:22 +0000
ROA not after: Tue 03 Feb 2026 18:17:22 +0000
asID: 27837
IP address blocks: 190.90.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ef:e6:21:11:bf:58:41:fe:b1:1d:d6:ed:b6:ac:69:3a:51:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 4 18:12:22 2025 GMT
Not After : Feb 3 18:17:22 2026 GMT
Subject: CN=59EC02ED1240AB2C18907B0EB03F1E518A53C466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:57:49:d5:be:59:05:1a:ab:56:b4:81:7c:
51:55:25:96:c2:b4:56:a3:29:fa:3a:53:2a:ae:f4:
bb:2f:0b:e2:bf:2f:91:d7:cf:7c:5c:d5:84:6f:e0:
48:b8:37:55:8b:4c:d0:d2:b8:da:b9:89:75:62:d0:
bc:9b:2c:45:ce:ec:02:3d:1d:93:bd:30:55:ca:4b:
41:42:d7:e7:11:b8:33:13:80:65:83:c1:a9:9f:c0:
3e:a3:4e:9c:b2:f8:3f:cf:48:6f:35:08:37:da:53:
88:65:b6:83:2a:35:e1:be:26:ef:91:d9:9c:4d:5d:
c4:25:79:d1:f9:c2:c2:6f:16:5f:7f:11:ee:29:85:
82:53:91:44:84:af:b0:62:18:49:5f:c6:23:53:f9:
2a:dc:20:c0:71:04:02:4d:44:e7:5d:b6:27:8f:d0:
e3:73:d7:36:80:59:2a:3a:74:14:86:bd:de:8b:a6:
63:93:8a:e4:e1:86:da:81:54:fa:69:80:7d:23:5f:
7d:f7:8c:06:46:84:42:81:5d:af:27:28:d8:1f:d1:
26:5b:be:3f:a3:7a:86:b3:fb:83:af:c5:46:92:a7:
31:a5:56:d4:1a:ae:d4:be:ed:e6:76:d2:2e:1a:23:
da:12:ae:ed:5c:30:3a:e0:1b:f8:30:dc:9c:13:81:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EC:02:ED:12:40:AB:2C:18:90:7B:0E:B0:3F:1E:51:8A:53:C4:66
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3133342e302f32332d3234203d3e203237383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.134.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:f2:2f:b4:7b:6c:73:48:29:fb:e4:f8:8a:01:49:71:64:ba:
cc:b2:fd:46:9b:bd:12:d7:f5:21:bd:7e:09:2c:87:27:22:64:
ec:e3:e7:14:17:c7:d7:8b:4e:6d:8a:ab:f6:7b:8d:fe:b5:4f:
f3:91:e4:a9:a3:22:00:58:29:cc:3a:39:6b:eb:4f:eb:8a:a2:
b2:f2:06:e2:4b:17:14:8c:4b:6e:b8:ba:55:ea:89:a6:83:ef:
e5:f2:2a:d8:50:e9:50:cd:92:08:95:d9:0b:be:b0:c6:6f:03:
66:04:d5:96:33:88:e1:2d:5f:ce:46:c1:bb:a5:36:a4:3a:4e:
1f:56:c5:4e:c9:e8:6b:e1:93:b6:5d:6e:88:bf:c8:8e:ef:6b:
73:1d:f9:cc:d5:ab:8d:e0:d1:d2:cc:f1:05:59:1e:34:fd:5d:
c0:50:a3:01:99:dd:0b:72:a9:7f:3f:9a:87:f7:1f:35:95:e2:
ba:4a:94:97:f8:09:7e:7d:20:49:b0:b9:4b:00:e7:bd:d4:c5:
44:36:92:32:57:ce:ec:9a:65:af:44:ef:43:fd:d4:d7:da:62:
df:be:ee:dd:9e:3e:87:52:11:b8:9a:38:f3:96:f7:b6:53:c9:
ca:89:72:ae:42:b1:8e:12:a1:c1:8b:e1:db:35:2d:4c:e6:cc:
14:00:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:36 2025 by rpki-client