Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135352e302f32342d3234203d3e203236363139.roa
File: 3139302e39302e3135352e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier: w7khgX8YwIjnu0jOzrvRjwZGrKi93I2jOD2dQ/D0lb0=
Subject key identifier: CF:85:9D:12:BA:9D:38:BF:62:3E:8F:E1:39:BE:1A:85:80:B8:B0:77
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 2CA3A0703C8B150CCBB972EA6F600F126800E677
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135352e302f32342d3234203d3e203236363139.roa
Signing time: Tue 04 Feb 2025 18:17:28 +0000
ROA not before: Tue 04 Feb 2025 18:12:28 +0000
ROA not after: Tue 03 Feb 2026 18:17:28 +0000
asID: 26619
IP address blocks: 190.90.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a3:a0:70:3c:8b:15:0c:cb:b9:72:ea:6f:60:0f:12:68:00:e6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 4 18:12:28 2025 GMT
Not After : Feb 3 18:17:28 2026 GMT
Subject: CN=CF859D12BA9D38BF623E8FE139BE1A8580B8B077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:fa:fb:1b:8a:b4:d0:20:2a:5e:6e:fe:5d:
27:24:c0:3e:5a:4b:83:f0:b8:10:70:d2:48:21:7b:
a3:18:bd:04:fd:61:91:0a:a1:e7:e6:29:d7:ab:5d:
cc:6d:2a:16:1b:c9:8f:2c:78:23:e2:35:b8:f1:a2:
5e:c2:ca:5c:cc:f5:65:48:3a:77:c6:eb:b9:e1:7c:
88:bf:c4:20:17:1b:cb:51:69:2e:ee:b8:a4:e4:df:
e7:5c:67:4e:ef:39:6e:da:5a:58:79:ff:c6:b5:99:
af:34:72:ed:e5:50:45:a0:57:15:e4:8c:34:b6:fb:
e0:4b:68:7d:77:fc:65:a7:87:f0:42:16:26:1b:1a:
74:32:eb:84:06:bb:b1:de:18:8b:27:90:4d:17:3c:
e1:b3:ce:98:99:97:c8:12:e0:c3:1e:7b:c9:45:8b:
05:bb:de:9a:05:f5:64:52:db:30:6c:67:69:fa:fe:
7d:7d:e6:3d:28:94:f6:81:dd:20:ec:4a:d3:3a:5f:
ce:d5:96:2d:7a:4c:ca:e9:2a:af:9b:d5:bb:e2:af:
21:d6:85:bb:da:78:89:71:7e:38:87:cd:ef:8c:f0:
c4:f2:87:a0:7a:82:86:f8:b8:b1:85:64:a3:fd:9f:
fa:bb:ef:54:b8:06:35:e1:4b:ce:8e:77:bd:b1:94:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:85:9D:12:BA:9D:38:BF:62:3E:8F:E1:39:BE:1A:85:80:B8:B0:77
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135352e302f32342d3234203d3e203236363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:62:84:98:f9:80:5c:63:e1:8c:cd:5b:35:78:53:c1:d2:d9:
0c:7b:21:3b:bb:9c:f2:ed:f0:8c:8b:d3:a4:ad:7e:42:af:fe:
d6:f5:ea:aa:bf:8f:a5:56:30:e5:8b:f7:30:ae:13:c9:4b:f6:
11:b7:48:53:c6:f0:e2:86:99:8a:03:58:eb:98:17:1c:c0:e6:
25:22:e8:48:27:c0:d8:d3:64:15:42:34:f4:4e:12:45:f2:89:
9d:33:91:13:a3:37:3f:c2:c7:1b:a8:4b:ed:bc:ca:8a:f3:3c:
02:f5:ba:11:04:b2:55:20:56:10:94:7d:03:42:9c:4a:77:9a:
c2:06:69:f7:49:4a:9a:7f:aa:a2:3a:61:72:9a:63:e2:ce:d9:
82:2b:4c:07:c0:ec:3f:92:eb:bf:ad:17:8e:a0:5c:3b:bb:15:
f8:1d:f1:1d:aa:d1:e7:ad:6a:ba:46:01:bc:51:2e:cc:5c:1c:
fc:f3:4b:36:14:e2:1a:be:fc:f3:ca:bc:43:33:09:ac:26:ce:
fb:86:0a:5e:86:4e:55:de:3e:42:fe:0b:aa:56:c4:0e:c8:78:
04:b7:a5:8f:79:06:1f:b2:77:60:c8:20:35:e0:30:ad:0b:c9:
3e:b9:37:55:52:3b:e3:06:34:46:7a:41:55:7f:75:bb:7a:36:
e1:c1:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:39:38 2025 by rpki-client