Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e31352e302f32342d3234203d3e20323632353839.roa
File: 3139302e39302e31352e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier: OopVRfQNE1f+gVP2vn0n8bCjdA+rtkB3EKiWWHtPQow=
Subject key identifier: 7B:B8:0C:BF:E1:A6:13:28:14:FC:98:C4:03:2C:AA:DD:74:C8:D6:53
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 6BD121AB089A8813CDC1FEC7405BA27D910C3B19
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e31352e302f32342d3234203d3e20323632353839.roa
Signing time: Tue 25 Feb 2025 20:15:04 +0000
ROA not before: Tue 25 Feb 2025 20:10:04 +0000
ROA not after: Tue 24 Feb 2026 20:15:04 +0000
asID: 262589
IP address blocks: 190.90.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d1:21:ab:08:9a:88:13:cd:c1:fe:c7:40:5b:a2:7d:91:0c:3b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 25 20:10:04 2025 GMT
Not After : Feb 24 20:15:04 2026 GMT
Subject: CN=7BB80CBFE1A6132814FC98C4032CAADD74C8D653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:70:21:d9:8d:2d:ae:b3:0e:af:d4:4a:89:ee:
be:d7:7f:03:21:bd:52:38:da:bc:c9:6c:dd:64:72:
99:ea:f0:0f:ff:06:b9:09:6f:37:21:1d:c5:c6:08:
18:44:72:e8:9d:f1:f6:0e:6d:f3:4f:2c:82:e0:b1:
c7:3c:d9:d7:1b:05:52:ad:5d:2e:e5:46:75:3c:57:
3f:95:a0:d4:e2:fc:27:44:ef:fd:9b:9a:75:99:5b:
2e:b9:3a:af:27:2c:5d:5f:1c:77:16:20:e6:61:7d:
be:23:e1:c0:db:a7:b6:99:4b:70:da:16:cf:cc:5d:
df:82:47:4f:0c:1d:2a:e4:1b:6c:a4:ea:59:ae:67:
29:fa:f5:32:92:0a:26:05:1b:e9:e8:10:1f:9c:d6:
4f:0a:09:6e:2f:7d:34:cc:83:f0:de:ae:ad:7c:3a:
e9:9f:cf:06:80:6f:e1:8e:8f:d2:22:a5:9e:b6:f2:
d7:b8:06:5e:77:66:95:ee:cf:ba:92:05:45:f4:cb:
e2:2f:37:85:15:45:da:e1:9a:f7:6f:c0:e3:20:d5:
b5:b0:d8:ee:de:ed:33:e1:2e:79:b2:39:b2:cb:a7:
54:33:32:0c:9e:63:17:d0:dc:d2:87:b1:a5:a8:72:
ac:39:60:d1:24:0b:6f:c5:e5:c9:f1:f3:cb:ce:e2:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:0C:BF:E1:A6:13:28:14:FC:98:C4:03:2C:AA:DD:74:C8:D6:53
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e31352e302f32342d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.15.0/24
Signature Algorithm: sha256WithRSAEncryption
85:63:3c:14:a4:a3:24:3e:6a:97:9e:92:53:32:a6:af:23:8f:
d6:60:08:3a:b2:44:c1:bd:25:c6:7f:01:43:b2:62:2f:f4:f8:
c6:2a:71:b0:45:cf:93:71:3b:ca:22:e8:79:8b:74:8e:3f:4b:
19:f0:bc:8a:e7:f5:b4:ed:f9:75:11:46:ac:58:4b:6e:7e:ba:
a4:5c:18:3e:e4:ff:88:88:5a:52:8b:c4:d4:f3:1b:28:f7:af:
bd:ee:48:e5:3e:5d:0e:c7:11:5f:53:b8:ed:1a:5a:5d:49:5e:
5b:72:fc:5b:a9:ce:a5:f0:11:75:e5:c8:ae:a3:ab:9b:42:3a:
d4:f2:26:ca:40:aa:a0:85:24:2d:86:3c:86:23:44:9f:73:74:
1b:ce:21:84:d3:d5:1f:9c:7d:9b:06:a8:b6:43:d2:4b:2f:2c:
7a:1b:fd:5b:30:c7:83:73:16:9a:b2:91:93:5e:6f:81:62:e1:
ff:73:eb:9b:9b:3a:67:7a:79:c7:51:63:7e:9b:c0:2f:3c:a4:
5a:9d:fa:4b:ff:65:53:f9:93:2a:11:f5:8a:29:1b:58:be:8d:
b2:86:21:9b:39:97:19:d4:66:6f:8a:e6:cb:01:6b:62:10:fc:
46:83:ca:05:95:0f:a3:20:ea:ca:7a:f0:38:77:b0:4b:0e:e0:
e7:71:bf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:06 2025 by rpki-client