Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231332e302f32342d3234203d3e20323632353839.roa
File: 3139302e39302e3231332e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier: EpbbeSRousnIWsyxIo/qnRoRKB40tR6StuHOXu5mE5c=
Subject key identifier: 92:6D:1D:DC:A4:48:69:95:14:9C:12:89:86:A5:DC:F7:15:D1:82:82
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 2F3A6E9E85030F314B8B94390302DB2C911B05E9
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231332e302f32342d3234203d3e20323632353839.roa
Signing time: Mon 10 Mar 2025 03:45:00 +0000
ROA not before: Mon 10 Mar 2025 03:40:00 +0000
ROA not after: Mon 09 Mar 2026 03:45:00 +0000
asID: 262589
IP address blocks: 190.90.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3a:6e:9e:85:03:0f:31:4b:8b:94:39:03:02:db:2c:91:1b:05:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Mar 10 03:40:00 2025 GMT
Not After : Mar 9 03:45:00 2026 GMT
Subject: CN=926D1DDCA4486995149C128986A5DCF715D18282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:f3:aa:43:26:bc:da:4c:9a:c0:b7:f4:b3:
64:90:14:60:e5:d1:d7:5b:98:ec:5c:f7:7b:14:ee:
0b:e7:7e:44:22:27:d4:6c:42:8a:0c:d5:b2:97:b4:
fd:3e:a6:b9:b3:85:00:7f:a2:aa:b8:52:99:1d:71:
35:37:4e:b9:53:83:bf:95:cf:98:09:29:98:43:fc:
8e:81:cc:65:c9:74:53:9f:67:4f:c1:2a:06:03:e4:
61:72:61:88:bf:c8:a2:7f:21:5b:59:a7:68:5c:78:
75:3d:75:84:77:f9:83:67:d3:37:76:14:7a:c4:b0:
37:85:5a:81:09:a0:6e:c9:a0:89:22:e0:62:86:d1:
41:22:27:5c:5a:68:34:93:da:fd:44:57:a1:73:d7:
6e:95:07:47:48:3f:a5:41:d9:0c:b5:8b:69:15:02:
77:2f:8f:a1:7e:24:e3:31:f8:df:80:dd:8e:90:74:
60:47:b1:b0:6a:ed:9b:ff:bf:0f:b6:80:27:3f:37:
b9:0b:70:17:24:03:12:4d:2e:bc:a8:34:db:cc:e6:
21:52:55:00:30:47:b6:f8:3e:6b:ff:9a:fc:42:0a:
74:81:07:23:8e:30:81:e9:36:c0:c9:9f:f6:ec:1a:
f4:ef:c4:b5:ac:45:d9:f8:0c:08:bb:80:78:61:4b:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6D:1D:DC:A4:48:69:95:14:9C:12:89:86:A5:DC:F7:15:D1:82:82
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231332e302f32342d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.213.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b3:23:df:2d:0e:d8:de:be:c8:cf:cd:66:02:31:fb:4f:2b:
62:73:54:bd:31:a0:67:aa:0f:40:18:38:f1:15:13:cd:80:d8:
30:c3:5e:d2:4c:aa:22:51:87:f3:fb:c4:65:7d:9b:c3:51:66:
f6:f5:16:82:1d:d0:27:c3:86:f7:57:c7:0f:f5:33:34:09:e8:
3c:b6:dd:7b:eb:e7:ff:47:c1:40:ea:c3:d1:38:1b:bf:74:6f:
4c:d2:61:50:26:8d:8f:b2:83:a9:06:e5:f4:1c:ec:8a:bc:26:
9c:50:1f:e3:b0:cf:16:7c:56:f4:ac:b3:25:a0:c7:82:ec:a0:
64:e2:2b:19:7f:d2:09:7f:55:06:a8:fa:4d:cf:33:fb:48:f4:
9a:b0:2c:80:09:26:04:c9:e5:54:48:26:e7:e3:01:05:3e:4c:
70:8e:3d:62:56:d7:1e:af:84:7a:10:ca:46:e4:b2:26:36:7b:
2a:93:d4:51:39:7b:a6:fc:55:48:76:e8:5b:95:c7:69:a7:70:
df:21:34:c8:db:56:65:e4:74:13:64:4c:24:5c:96:42:bd:df:
7b:a9:e7:22:f8:39:a7:15:9e:14:b3:d6:de:45:03:4d:c6:2c:
e2:a9:20:ff:ce:40:00:cc:c2:4f:f8:14:39:ef:ca:fe:7d:57:
03:2c:72:d8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULzpunoUDDzFLi5Q5AwLbLJEbBekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAzMTAwMzQwMDBaFw0yNjAzMDkwMzQ1MDBaMDMxMTAvBgNV
BAMTKDkyNkQxRERDQTQ0ODY5OTUxNDlDMTI4OTg2QTVEQ0Y3MTVEMTgyODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwPOqQya82kyawLf0s2SQFGDl
0ddbmOxc93sU7gvnfkQiJ9RsQooM1bKXtP0+prmzhQB/oqq4UpkdcTU3TrlTg7+V
z5gJKZhD/I6BzGXJdFOfZ0/BKgYD5GFyYYi/yKJ/IVtZp2hceHU9dYR3+YNn0zd2
FHrEsDeFWoEJoG7JoIki4GKG0UEiJ1xaaDST2v1EV6Fz126VB0dIP6VB2Qy1i2kV
Ancvj6F+JOMx+N+A3Y6QdGBHsbBq7Zv/vw+2gCc/N7kLcBckAxJNLryoNNvM5iFS
VQAwR7b4Pmv/mvxCCnSBByOOMIHpNsDJn/bsGvTvxLWsRdn4DAi7gHhhS7KhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkm0d3KRIaZUUnBKJhqXc9xXRgoIwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzIzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvlrV
MA0GCSqGSIb3DQEBCwUAA4IBAQAzsyPfLQ7Y3r7Iz81mAjH7Tytic1S9MaBnqg9A
GDjxFRPNgNgww17STKoiUYfz+8RlfZvDUWb29RaCHdAnw4b3V8cP9TM0Ceg8tt17
6+f/R8FA6sPROBu/dG9M0mFQJo2PsoOpBuX0HOyKvCacUB/jsM8WfFb0rLMloMeC
7KBk4isZf9IJf1UGqPpNzzP7SPSasCyACSYEyeVUSCbn4wEFPkxwjj1iVtcer4R6
EMpG5LImNnsqk9RROXum/FVIduhblcdpp3DfITTI21Zl5HQTZEwkXJZCvd97qeci
+DmnFZ4Us9beRQNNxiziqSD/zkAAzMJP+BQ578r+fVcDLHLY
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:23 2025 by rpki-client