Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e322e302f32342d3234203d3e203138363738.roa
File: 3139302e39302e322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: AgmBvduRgUEVjrwo9/zp8CZTQdJ/LXqE0UhbucvRV6I=
Subject key identifier: 88:56:3C:56:F2:3E:F2:D9:14:FA:B3:B1:58:0E:C5:F4:07:D7:A6:AF
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 2C714D0CCBD6B2DB0CFED0C4AF669F5887D4511B
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e322e302f32342d3234203d3e203138363738.roa
Signing time: Mon 10 Feb 2025 16:00:00 +0000
ROA not before: Mon 10 Feb 2025 15:55:00 +0000
ROA not after: Mon 09 Feb 2026 16:00:00 +0000
asID: 18678
IP address blocks: 190.90.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:71:4d:0c:cb:d6:b2:db:0c:fe:d0:c4:af:66:9f:58:87:d4:51:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 10 15:55:00 2025 GMT
Not After : Feb 9 16:00:00 2026 GMT
Subject: CN=88563C56F23EF2D914FAB3B1580EC5F407D7A6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:3f:f8:f7:62:d9:de:79:73:c1:b4:e9:eb:
d5:97:8a:69:3b:23:1c:2e:38:92:5e:a3:ec:4a:0e:
78:9f:d3:66:f4:da:56:81:0e:1e:b9:2d:75:ee:58:
ff:29:47:a5:db:07:c6:dc:61:cf:da:a8:0a:55:71:
27:15:57:93:68:13:75:9d:34:af:cf:4b:c3:b4:f7:
2a:6b:88:6b:c5:f1:ac:61:ba:f2:8e:30:92:d0:df:
65:48:13:41:67:e9:e3:f4:a7:53:e2:5f:1d:88:5a:
74:2d:7c:e3:d8:49:1c:17:cb:27:5f:33:7a:31:70:
d3:e8:bc:6f:43:7e:6b:73:ad:9c:e7:89:b0:e0:e2:
d4:39:e5:12:e8:a9:87:af:10:ff:01:f8:2b:38:95:
86:99:31:74:d0:30:d3:aa:8f:78:91:26:01:d5:b4:
28:70:b3:82:06:6a:18:f3:ea:f6:f7:2b:85:00:fa:
74:c4:09:2e:7d:03:e3:e2:44:49:92:9f:37:2f:10:
3e:a2:9e:c7:dc:26:bf:fa:37:ac:f8:79:b4:c9:cd:
25:a7:44:8f:d0:42:23:08:30:72:f1:72:cf:30:86:
87:40:34:67:98:35:5a:ca:1d:99:d3:d4:e6:09:1c:
a1:16:c4:66:c1:5e:40:44:d0:4c:30:a3:6b:54:92:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:3C:56:F2:3E:F2:D9:14:FA:B3:B1:58:0E:C5:F4:07:D7:A6:AF
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e322e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.2.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2c:0b:31:01:8c:b4:10:09:52:9c:73:5a:6c:30:c6:36:21:
29:1f:85:df:97:07:34:33:1a:19:92:39:31:0e:7f:40:57:db:
44:2f:73:5d:4d:cf:aa:ee:b3:3d:43:9b:d0:b3:ef:b9:b9:7e:
8e:25:7f:6e:41:61:fb:a4:13:8a:ed:ad:ba:f0:08:66:61:85:
76:3b:ad:e7:51:4d:d6:3f:01:25:66:54:fa:70:57:29:47:ef:
7d:a2:c2:e2:2c:44:1a:f8:66:a6:96:69:02:c7:2c:43:86:27:
d6:43:d3:30:47:44:f2:62:ab:9d:00:57:70:19:de:a1:18:f3:
87:83:33:29:14:d2:4e:a9:48:1c:14:4c:0f:42:9c:cd:78:b4:
15:18:4b:b2:c7:21:d6:21:27:a3:41:c8:64:c1:4c:fb:73:fa:
aa:d6:69:c8:45:c9:10:56:b2:03:13:31:33:a1:52:94:2c:ff:
5e:27:82:80:dd:dc:9a:59:18:ac:6a:6c:54:63:f3:bc:13:9d:
2d:69:50:32:85:be:a6:10:56:db:16:70:e1:e0:ee:09:a1:bf:
87:79:a1:4a:1a:05:e4:bd:17:68:4b:37:48:70:62:d1:77:c1:
ca:7a:08:ab:35:18:cd:2f:de:41:06:d1:7e:30:a2:d3:00:38:
ae:8f:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:41 2025 by rpki-client