Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136382e302f32312d3234203d3e203138363738.roa
File: 3139302e39302e3136382e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier: tnw0xwiRihNNyKWVxNTaG2QC2AderPuygPR5loaDNJM=
Subject key identifier: 39:45:F4:70:57:89:0F:27:AE:B0:1C:22:DB:4C:A8:63:18:01:E8:6E
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 69ABE8C82628C9C1D1783C0B95F47FCD480E5FC4
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136382e302f32312d3234203d3e203138363738.roa
Signing time: Wed 05 Mar 2025 15:05:00 +0000
ROA not before: Wed 05 Mar 2025 15:00:00 +0000
ROA not after: Wed 04 Mar 2026 15:05:00 +0000
asID: 18678
IP address blocks: 190.90.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ab:e8:c8:26:28:c9:c1:d1:78:3c:0b:95:f4:7f:cd:48:0e:5f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Mar 5 15:00:00 2025 GMT
Not After : Mar 4 15:05:00 2026 GMT
Subject: CN=3945F47057890F27AEB01C22DB4CA8631801E86E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:cc:2a:c7:5c:37:8b:38:db:9e:96:a7:ef:
bf:24:b2:c0:56:99:02:17:0a:44:b0:d9:5e:69:70:
51:be:19:4c:b8:1f:7f:f5:86:9d:95:a4:df:68:7e:
36:f6:70:22:71:32:b1:99:20:7c:9b:6b:1d:32:fa:
97:c2:b5:a6:9e:66:22:ae:25:22:e3:31:aa:20:49:
e4:0e:f8:75:ae:94:e1:2e:df:54:ec:93:7e:8d:ec:
41:8b:58:1f:66:1b:1b:38:c8:67:88:f8:15:56:58:
ca:42:04:be:a5:d6:3e:9e:a9:c0:86:d6:bf:48:4a:
c9:c3:6a:62:63:5b:e1:f8:98:9d:68:bb:c3:3e:89:
3f:77:c0:7e:6f:04:70:7e:d4:38:96:39:1a:ce:ce:
55:49:af:56:1b:f8:cc:d6:75:2b:3d:57:59:ef:36:
61:e6:37:37:70:1d:6f:57:bd:bc:89:dc:b5:34:f5:
4f:a0:c5:db:1e:9d:ed:e6:e6:1b:1c:e9:dc:41:5f:
9d:7b:9f:8a:8d:57:18:1b:e3:0e:22:4e:51:ef:1d:
34:01:07:56:f3:3d:56:53:e7:d3:28:66:49:63:e3:
33:10:c3:6f:a5:35:ea:18:31:c5:8a:3e:4f:f1:df:
da:d4:e8:3e:95:ac:e7:9e:e0:11:b0:45:bf:78:5e:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:45:F4:70:57:89:0F:27:AE:B0:1C:22:DB:4C:A8:63:18:01:E8:6E
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3136382e302f32312d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.168.0/21
Signature Algorithm: sha256WithRSAEncryption
33:dc:e9:82:13:fc:d7:03:b5:66:39:52:44:63:72:2c:30:be:
17:09:2d:79:33:40:40:ef:49:1c:7b:af:d2:0f:ee:07:2b:b5:
40:8a:7d:1d:94:6b:f1:70:07:7a:26:12:fc:79:74:2f:2c:32:
56:93:2a:69:3b:6e:ac:cd:c4:9c:57:bc:66:f1:05:51:65:41:
90:dc:8e:60:af:89:55:b1:de:57:95:89:ef:8c:89:f9:dc:98:
7b:0a:2a:63:7a:31:45:da:7b:a7:3e:49:9a:65:28:fd:6e:61:
eb:29:53:4c:b7:b6:ba:44:c1:5e:e2:42:b9:04:6e:38:40:06:
76:ed:36:fe:88:d1:77:77:b3:be:24:9d:af:03:fa:2e:1c:0b:
35:19:22:21:e2:ff:64:42:4e:c3:83:bb:b9:ac:90:82:27:45:
fb:13:87:8d:ec:29:26:ec:ee:15:10:d3:72:ab:8d:5d:e4:09:
11:3f:3d:56:8c:e9:de:67:29:14:d3:ee:a2:be:28:bd:5d:a9:
b1:40:66:4d:b5:7e:92:65:05:1b:df:34:b4:6a:65:4e:e7:94:
a4:8c:71:6f:5b:fa:95:0e:bb:a2:8a:31:23:60:5e:f2:35:43:
20:12:06:cc:7c:b7:4c:5f:74:ee:6c:5a:a9:f2:c5:6f:da:64:
68:bd:39:a0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaavoyCYoycHReDwLlfR/zUgOX8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAzMDUxNTAwMDBaFw0yNjAzMDQxNTA1MDBaMDMxMTAvBgNV
BAMTKDM5NDVGNDcwNTc4OTBGMjdBRUIwMUMyMkRCNENBODYzMTgwMUU4NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXswqx1w3izjbnpan778kssBW
mQIXCkSw2V5pcFG+GUy4H3/1hp2VpN9ofjb2cCJxMrGZIHybax0y+pfCtaaeZiKu
JSLjMaogSeQO+HWulOEu31Tsk36N7EGLWB9mGxs4yGeI+BVWWMpCBL6l1j6eqcCG
1r9ISsnDamJjW+H4mJ1ou8M+iT93wH5vBHB+1DiWORrOzlVJr1Yb+MzWdSs9V1nv
NmHmNzdwHW9XvbyJ3LU09U+gxdsene3m5hsc6dxBX517n4qNVxgb4w4iTlHvHTQB
B1bzPVZT59MoZklj4zMQw2+lNeoYMcWKPk/x39rU6D6VrOee4BGwRb94XivjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOUX0cFeJDyeusBwi20yoYxgB6G4wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzNjM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA75aqDAN
BgkqhkiG9w0BAQsFAAOCAQEAM9zpghP81wO1ZjlSRGNyLDC+FwkteTNAQO9JHHuv
0g/uByu1QIp9HZRr8XAHeiYS/Hl0LywyVpMqaTturM3EnFe8ZvEFUWVBkNyOYK+J
VbHeV5WJ74yJ+dyYewoqY3oxRdp7pz5JmmUo/W5h6ylTTLe2ukTBXuJCuQRuOEAG
du02/ojRd3ezviSdrwP6LhwLNRkiIeL/ZEJOw4O7uayQgidF+xOHjewpJuzuFRDT
cquNXeQJET89Vozp3mcpFNPuor4ovV2psUBmTbV+kmUFG980tGplTueUpIxxb1v6
lQ67oooxI2Be8jVDIBIGzHy3TF907mxaqfLFb9pkaL05oA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:34 2025 by rpki-client