Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e332e302f32342d3234203d3e203138363738.roa
File: 3139302e39302e332e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: n30vAbt4s1OEoUyYwKUtJFSc6SydzpcVilDqCdURU9s=
Subject key identifier: B1:99:16:98:2B:CD:24:66:A2:49:F5:F8:6D:FB:C0:D4:20:2D:D3:65
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 3EE2D2DCFC42E2E0AD5E02190A81CB9842A3A733
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e332e302f32342d3234203d3e203138363738.roa
Signing time: Mon 10 Feb 2025 16:00:00 +0000
ROA not before: Mon 10 Feb 2025 15:55:00 +0000
ROA not after: Mon 09 Feb 2026 16:00:00 +0000
asID: 18678
IP address blocks: 190.90.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e2:d2:dc:fc:42:e2:e0:ad:5e:02:19:0a:81:cb:98:42:a3:a7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 10 15:55:00 2025 GMT
Not After : Feb 9 16:00:00 2026 GMT
Subject: CN=B19916982BCD2466A249F5F86DFBC0D4202DD365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:e8:fc:4f:31:c7:8b:a4:1a:b2:aa:21:bf:
fd:10:96:21:db:3d:86:9a:5f:87:8c:37:f9:41:dc:
01:4d:f6:e9:f1:fd:eb:91:e8:3c:73:d5:6b:65:6b:
4f:da:8e:e8:f8:fa:14:af:fd:b1:60:b3:22:3b:3e:
a1:d4:5d:89:d3:79:ee:a4:73:7d:53:ce:c0:bd:c6:
32:ae:6d:a3:58:fd:0a:de:ae:e3:15:15:2d:94:14:
77:eb:fc:26:cb:0b:d4:a1:39:d4:fd:a8:8d:d5:fd:
3a:1c:a7:fc:12:32:b3:8d:69:0a:87:1a:df:8e:60:
69:3e:96:53:c6:71:18:cc:9d:b5:58:84:fc:ff:d2:
45:f8:4f:41:ca:87:d4:54:72:73:ab:ab:70:37:d1:
33:44:15:e7:70:de:6e:74:e8:af:04:c9:19:b2:8a:
d2:e0:78:ab:c5:4a:79:15:1d:5d:b5:44:bf:6c:7e:
b1:dc:12:9f:ba:6c:5d:37:04:fa:0a:4d:bc:c0:d9:
e2:52:ea:1d:b8:02:b7:a2:5c:21:77:bf:83:08:3f:
2b:be:a1:89:95:ef:44:42:fb:14:05:38:fd:4b:4d:
07:f0:82:6f:e0:56:2d:2f:bb:45:c7:a6:be:72:b7:
17:98:3e:22:b7:0c:d6:17:ba:a3:7b:aa:37:c6:91:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:99:16:98:2B:CD:24:66:A2:49:F5:F8:6D:FB:C0:D4:20:2D:D3:65
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e332e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.3.0/24
Signature Algorithm: sha256WithRSAEncryption
71:86:5e:06:34:a1:48:be:ad:58:d7:78:5e:94:ce:ea:d1:60:
84:a9:62:9f:87:b7:3d:9f:89:27:b3:c9:02:63:12:df:81:48:
d0:77:13:76:e2:7d:24:63:f2:e0:47:45:fd:bd:09:08:3f:de:
5c:d4:31:ad:a7:ae:b2:de:a6:4c:9f:82:69:d8:57:1a:9c:97:
2c:d5:09:5b:0d:0b:94:40:5e:e5:14:3e:3b:85:49:93:fb:24:
67:0d:19:ee:ba:a2:a1:fd:c2:ed:63:6e:7a:1d:bc:24:ca:8f:
74:0b:f6:07:fb:c6:66:24:a6:f9:91:0c:87:8d:11:43:a9:b3:
b1:e4:5c:17:7b:d7:c2:09:64:35:e7:ef:79:cf:0a:48:ee:9a:
65:df:8f:97:e9:c7:96:20:75:85:f1:64:61:ad:74:13:e3:0f:
a5:09:7e:b4:9f:eb:23:2f:90:85:65:eb:9d:ab:c1:80:10:bf:
cf:ee:a0:9f:ee:5e:42:03:e9:62:15:32:d8:ed:06:04:53:7f:
04:e0:ff:93:3f:f4:66:75:f9:a4:d2:b8:c3:91:f7:d5:0a:29:
1b:1b:54:4a:5b:6f:6b:f4:d3:af:e4:58:13:b2:86:9a:f9:18:
17:d3:60:b9:e9:72:07:73:4f:7f:31:a6:8b:ab:15:13:e4:a6:
7c:97:e8:8c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUPuLS3PxC4uCtXgIZCoHLmEKjpzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMTAxNTU1MDBaFw0yNjAyMDkxNjAwMDBaMDMxMTAvBgNV
BAMTKEIxOTkxNjk4MkJDRDI0NjZBMjQ5RjVGODZERkJDMEQ0MjAyREQzNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrOj8TzHHi6Qasqohv/0QliHb
PYaaX4eMN/lB3AFN9unx/euR6Dxz1Wtla0/ajuj4+hSv/bFgsyI7PqHUXYnTee6k
c31TzsC9xjKubaNY/QreruMVFS2UFHfr/CbLC9ShOdT9qI3V/Tocp/wSMrONaQqH
Gt+OYGk+llPGcRjMnbVYhPz/0kX4T0HKh9RUcnOrq3A30TNEFedw3m506K8EyRmy
itLgeKvFSnkVHV21RL9sfrHcEp+6bF03BPoKTbzA2eJS6h24AreiXCF3v4MIPyu+
oYmV70RC+xQFOP1LTQfwgm/gVi0vu0XHpr5ytxeYPiK3DNYXuqN7qjfGkSPtAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUsZkWmCvNJGaiSfX4bfvA1CAt02UwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzYzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvloDMA0GCSqG
SIb3DQEBCwUAA4IBAQBxhl4GNKFIvq1Y13helM7q0WCEqWKfh7c9n4kns8kCYxLf
gUjQdxN24n0kY/LgR0X9vQkIP95c1DGtp66y3qZMn4Jp2FcanJcs1QlbDQuUQF7l
FD47hUmT+yRnDRnuuqKh/cLtY256Hbwkyo90C/YH+8ZmJKb5kQyHjRFDqbOx5FwX
e9fCCWQ15+95zwpI7ppl34+X6ceWIHWF8WRhrXQT4w+lCX60n+sjL5CFZeudq8GA
EL/P7qCf7l5CA+liFTLY7QYEU38E4P+TP/Rmdfmk0rjDkffVCikbG1RKW29r9NOv
5FgTsoaa+RgX02C56XIHc09/MaaLqxUT5KZ8l+iM
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:09 2025 by rpki-client