Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3233342e302f32342d3234203d3e203138363738.roa
File: 3139302e39302e3233342e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: NB0cXqUPkInNJfNjRLMgRWKiQZamDwnkorH3lMoiT6Y=
Subject key identifier: 21:30:78:9C:45:4C:60:90:54:4E:DC:3B:D0:80:5B:E8:6F:50:91:B2
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 02310F46509DA36E5959AFFF55483432506D0C30
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3233342e302f32342d3234203d3e203138363738.roa
Signing time: Tue 04 Feb 2025 18:17:24 +0000
ROA not before: Tue 04 Feb 2025 18:12:24 +0000
ROA not after: Tue 03 Feb 2026 18:17:24 +0000
asID: 18678
IP address blocks: 190.90.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:31:0f:46:50:9d:a3:6e:59:59:af:ff:55:48:34:32:50:6d:0c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 4 18:12:24 2025 GMT
Not After : Feb 3 18:17:24 2026 GMT
Subject: CN=2130789C454C6090544EDC3BD0805BE86F5091B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:6c:d6:29:d2:df:b0:de:7e:1a:0a:21:34:
1e:06:8c:54:19:40:4d:ef:54:7c:64:37:ed:e8:40:
24:16:2c:f3:3a:88:11:94:3f:2c:bb:0f:0f:42:0d:
ea:37:9b:ef:d9:d3:51:59:0f:55:8d:15:b1:e4:08:
f6:37:f4:63:b6:f5:33:ba:21:39:1d:8e:a3:b3:ad:
6a:ed:24:18:d0:f6:6f:20:5a:eb:fb:df:e0:d6:94:
fa:de:7b:d7:2d:d9:77:04:c4:c8:a7:b2:31:b6:89:
30:d0:11:2b:cb:33:2f:59:84:e7:7b:c1:48:6b:a5:
ab:58:30:6e:27:37:8e:f3:6c:92:6d:ba:e1:01:cc:
a0:72:db:76:ad:fb:5f:4f:99:5c:68:b1:07:d1:f6:
8d:53:c8:23:b0:f1:fb:c7:25:7f:f8:92:65:ff:40:
fc:6e:0a:37:e1:2f:bc:b6:f0:92:3c:83:fd:57:5b:
68:fd:1f:05:b3:d4:e9:c6:31:97:c0:fa:b8:43:d7:
28:b3:4b:ba:56:1c:15:e4:a0:68:b9:fc:18:bf:04:
d9:d0:3f:42:46:d2:ce:46:b1:47:b0:8f:e0:78:fc:
c7:28:16:e0:9d:47:50:99:ed:c6:43:53:70:e7:c5:
8f:8c:85:57:31:d9:78:56:37:f6:7d:05:95:c7:e4:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:30:78:9C:45:4C:60:90:54:4E:DC:3B:D0:80:5B:E8:6F:50:91:B2
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3233342e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.234.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d3:b5:a1:ce:2f:38:5c:de:94:e3:c8:c5:1e:44:cc:e9:23:
ff:ea:dc:80:de:78:f1:6a:a1:05:b9:ed:e4:5d:43:75:40:e4:
c2:02:26:c6:4c:47:0e:68:6e:5c:12:e2:76:40:9c:81:fd:9e:
0f:d1:25:b5:66:92:53:0e:5a:d6:df:c3:a3:d2:2c:6b:ea:d2:
d2:09:64:c2:d2:01:da:a6:09:e9:92:6a:86:76:c7:79:37:83:
4d:7d:86:db:13:ab:83:ea:7b:3a:2c:6a:dd:fb:30:30:38:c3:
ee:21:00:e6:3b:a1:ce:36:5d:8a:9c:09:11:ee:7c:2b:ca:a0:
5c:87:4e:f5:fa:57:bb:b0:c7:23:d0:96:e6:0b:cd:f5:72:3f:
ee:6f:61:f9:7e:d4:86:b4:ef:e8:16:73:59:2d:f2:c2:d8:3b:
22:c3:2c:3e:3e:19:36:e9:6a:b6:b5:39:eb:70:e8:9a:b9:7e:
d8:9a:9c:75:e4:01:94:f1:35:8a:15:2a:66:dd:09:1d:1b:bd:
82:4e:1a:b2:a6:66:6a:f5:d6:89:db:c0:7b:77:68:08:f1:6d:
fb:4a:59:a6:58:92:b6:30:42:77:d2:1b:17:ae:a1:a9:34:a0:
80:39:b0:28:32:bc:91:83:e9:f0:8f:d7:16:65:09:94:c0:c1:
0b:c4:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:36 2025 by rpki-client