Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135322e302f32322d3234203d3e203138363738.roa
File: 3139302e39302e3135322e302f32322d3234203d3e203138363738.roa (raw, json)
Hash identifier: QFbNgs/fYCo/5AJTMmAZ7DEvx/B3kitPxXWlyDU8cBc=
Subject key identifier: 61:B0:69:C9:2D:B7:AA:B9:FC:CC:13:15:C6:91:57:B7:35:31:42:10
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 46A908772E40FE89CD9A00DCF1A533C3518005B8
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135322e302f32322d3234203d3e203138363738.roa
Signing time: Mon 03 Mar 2025 22:10:00 +0000
ROA not before: Mon 03 Mar 2025 22:05:00 +0000
ROA not after: Mon 02 Mar 2026 22:10:00 +0000
asID: 18678
IP address blocks: 190.90.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a9:08:77:2e:40:fe:89:cd:9a:00:dc:f1:a5:33:c3:51:80:05:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Mar 3 22:05:00 2025 GMT
Not After : Mar 2 22:10:00 2026 GMT
Subject: CN=61B069C92DB7AAB9FCCC1315C69157B735314210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6d:27:2e:be:6d:d8:9a:0a:6a:4a:3e:93:ae:
b1:6d:6b:3d:ac:e4:51:07:cd:7d:95:c6:34:8e:b5:
7e:18:e7:97:a9:a4:dd:e6:8f:3c:65:94:ed:01:2e:
3d:98:ab:77:99:cd:37:a0:96:c8:16:2e:48:7b:3f:
88:b9:ca:67:93:24:0e:5f:0b:c7:67:35:93:2e:c8:
77:d4:5a:e4:3f:b6:d7:95:f7:9d:58:cf:55:25:78:
db:d0:39:13:73:ca:36:4f:7b:c4:3d:93:fc:84:ee:
ad:19:b2:b0:71:53:96:2c:52:f0:6f:e3:22:bf:18:
7e:1c:2b:be:e5:8c:8f:6a:56:75:18:e7:1e:17:d2:
10:08:3d:46:14:ed:d7:3c:6d:4d:df:ff:83:a0:f1:
34:a9:71:c0:97:f8:76:47:31:ed:1d:ff:06:6f:cd:
e1:21:4f:63:a6:c5:cc:78:e5:1e:8c:10:34:f0:ab:
99:13:9b:2f:43:b1:5a:38:70:3e:7b:ba:33:be:97:
6d:57:da:71:72:46:41:80:2f:21:a3:f9:08:ee:b9:
02:12:12:df:a1:49:c5:01:4f:35:78:72:14:9e:51:
5a:d6:88:0f:c8:ef:ce:11:b1:53:da:e4:91:4e:e8:
4f:9d:10:cf:e7:5e:c5:99:44:ea:5c:37:f6:97:16:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:69:C9:2D:B7:AA:B9:FC:CC:13:15:C6:91:57:B7:35:31:42:10
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135322e302f32322d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.152.0/22
Signature Algorithm: sha256WithRSAEncryption
84:0a:71:eb:bd:9b:a2:15:5d:14:77:aa:2d:30:86:27:39:20:
50:7a:ac:e8:47:a0:12:3a:b4:bd:84:e1:ae:5b:ec:c9:2c:7e:
d3:ad:5e:81:c4:6d:2b:ac:e6:5a:ab:23:7a:2d:a6:04:7c:9a:
d3:43:03:46:79:db:07:f1:16:52:c9:2c:0c:00:c7:d5:72:7e:
6d:b2:08:36:b5:c3:7f:bf:d5:38:5a:3e:39:77:71:ad:4b:a9:
56:97:39:72:22:60:54:ea:2a:98:c8:c8:06:00:e0:36:3b:eb:
24:2c:4a:15:77:08:81:3e:0e:d3:f1:71:4b:27:0a:4c:de:55:
e6:d6:23:d7:68:8a:a0:c6:1d:90:d4:1f:8a:71:6f:87:6f:fd:
89:0b:8f:fd:49:f7:4a:4f:42:d2:45:43:fb:c7:57:44:fe:02:
42:7c:1b:d4:63:ca:c1:bf:d7:fc:20:89:74:a3:85:38:fb:f1:
7b:44:0f:c6:1a:15:48:d9:ea:78:df:5f:29:3f:4b:ea:34:d8:
53:c6:86:64:82:18:22:81:bd:6c:03:b0:63:c0:2c:de:bc:24:
ed:8f:38:59:59:b7:00:a2:13:d3:9d:d3:b9:6c:15:2e:ac:72:
0e:cf:16:99:fb:5b:3c:dc:fa:62:ed:64:74:1d:18:2b:14:d0:
fa:5c:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:51 2025 by rpki-client