Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231362e302f32312d3234203d3e203138363738.roa
File: 3139302e39302e3231362e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier: mAF19Ol9bsouXrLvLlSJCN1yJWLNyAyb3SpCbwgtV+0=
Subject key identifier: F3:68:C2:11:67:E1:55:7D:0A:0A:E9:66:F3:76:C1:AB:7C:9E:23:62
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 2650CC769FB4EB1FD2E5E207256CD8609270BDEE
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231362e302f32312d3234203d3e203138363738.roa
Signing time: Mon 10 Mar 2025 00:30:00 +0000
ROA not before: Mon 10 Mar 2025 00:25:00 +0000
ROA not after: Mon 09 Mar 2026 00:30:00 +0000
asID: 18678
IP address blocks: 190.90.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:50:cc:76:9f:b4:eb:1f:d2:e5:e2:07:25:6c:d8:60:92:70:bd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Mar 10 00:25:00 2025 GMT
Not After : Mar 9 00:30:00 2026 GMT
Subject: CN=F368C21167E1557D0A0AE966F376C1AB7C9E2362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:5e:0b:d4:c3:ad:06:6e:26:90:55:1e:9a:
fe:d4:fa:74:0b:c6:cc:90:e9:fe:f6:6d:e2:e3:5b:
a2:24:f7:a5:a7:87:8c:63:b2:50:23:1b:e4:7d:72:
f2:4b:bc:c9:b9:b9:ad:7e:cf:32:56:0e:3f:e4:15:
7b:6a:61:e4:fd:0c:da:28:c5:b6:be:6c:a0:b1:f1:
ee:2e:43:d5:99:b9:3c:9b:d7:28:98:3a:1d:85:57:
ee:10:a6:78:f4:cd:c9:e1:fd:d4:dd:61:b4:57:44:
c4:79:b0:0b:68:62:aa:39:d6:05:74:df:40:d2:e0:
48:54:6f:44:d6:a9:ae:93:84:74:52:a7:5f:e4:dc:
70:aa:7b:7b:5b:fd:51:18:90:b5:2c:ff:7d:bb:56:
5e:e6:c7:90:86:67:ca:0c:ce:ba:74:1e:6b:2e:94:
86:fb:25:b4:36:6a:f8:fe:f6:f9:e9:38:b4:de:6b:
6c:9c:f8:26:e8:bd:71:7a:88:e0:1f:41:14:1b:6a:
21:6e:4c:20:40:43:1b:b0:3c:4d:c9:34:c8:b5:01:
16:97:f2:61:a1:32:63:f9:80:c9:e6:22:17:d4:c1:
7f:d7:e0:96:73:19:d4:2a:85:70:f4:76:a9:9e:7b:
8d:cd:d7:34:6d:32:d2:c8:3a:88:80:aa:0d:25:ac:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:68:C2:11:67:E1:55:7D:0A:0A:E9:66:F3:76:C1:AB:7C:9E:23:62
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231362e302f32312d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.216.0/21
Signature Algorithm: sha256WithRSAEncryption
08:5d:24:41:03:c7:94:15:1b:15:e5:f3:79:76:a1:1e:33:d1:
81:3a:ca:70:df:5f:5c:f3:68:1e:89:8b:15:9b:fe:6e:1e:0f:
08:11:c4:59:2c:21:da:5e:15:6c:98:c4:03:ba:2d:bb:05:8d:
2f:22:c5:c0:4e:a8:80:a2:92:4d:a8:1d:a9:d8:3a:35:e2:70:
e1:11:e6:2c:ac:54:3a:65:5b:e6:26:37:97:c1:cc:d0:ea:b1:
50:db:29:7f:24:99:cd:b7:13:5a:80:3f:40:ce:4c:e6:d3:56:
fe:0b:2f:d3:89:d5:58:20:cf:4c:70:19:f4:54:cf:0c:55:20:
6b:d2:60:14:95:cf:84:41:93:99:50:f6:6e:3d:39:7d:99:f8:
7b:02:51:bb:aa:4a:f0:44:6f:42:13:77:df:ad:3a:d1:6f:f4:
5d:f9:67:3c:cd:39:b4:b6:82:4e:d2:95:32:e1:cb:8b:ef:f1:
5c:cd:ad:11:42:89:76:ea:35:4e:25:71:7c:f6:0f:64:ad:5f:
7d:f8:f4:5e:f1:10:d8:f9:98:9d:a1:23:e0:97:c1:fd:5b:d3:
d7:e9:45:06:de:3f:ea:39:16:27:cb:a9:32:94:cd:75:81:2b:
11:69:69:1f:ea:68:24:c8:d7:b3:c8:98:0c:3b:3e:45:4e:ab:
5b:fb:71:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:52 2025 by rpki-client