Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33382e302f32342d3234203d3e20323639393836.roa
File: 3139302e39302e33382e302f32342d3234203d3e20323639393836.roa (raw, json)
Hash identifier: 0Cqeni77CK2qvtqWyZC6jj1tFhVpxUEuFRHWJ2W9jTE=
Subject key identifier: 21:55:4E:A3:10:A1:DA:12:14:42:60:AB:AA:E2:69:5C:95:50:0A:0D
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 145424EB02268FE0785F9B03D68EA71D673B09D5
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33382e302f32342d3234203d3e20323639393836.roa
Signing time: Tue 04 Feb 2025 18:17:16 +0000
ROA not before: Tue 04 Feb 2025 18:12:16 +0000
ROA not after: Tue 03 Feb 2026 18:17:16 +0000
asID: 269986
IP address blocks: 190.90.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:54:24:eb:02:26:8f:e0:78:5f:9b:03:d6:8e:a7:1d:67:3b:09:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 4 18:12:16 2025 GMT
Not After : Feb 3 18:17:16 2026 GMT
Subject: CN=21554EA310A1DA12144260ABAAE2695C95500A0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:6a:11:a5:81:45:a6:c9:bd:29:66:16:a3:
7d:fd:00:fd:3b:c8:7d:20:e9:0d:4c:c7:87:5d:85:
da:e1:50:9a:43:52:29:eb:06:8d:51:e8:74:b4:ff:
b3:36:a2:45:1e:6a:a3:47:f2:4c:ec:ed:03:54:eb:
a9:5d:16:d6:00:df:d4:f6:4a:7d:9d:97:c5:b9:7b:
20:05:5d:fd:2a:50:a0:07:d8:e9:d5:8b:4e:f6:40:
8e:63:7f:b3:eb:04:fb:79:85:35:f1:ff:ac:75:f3:
4b:bb:44:c9:31:0b:a0:61:7d:d2:4c:54:97:99:84:
d1:8c:15:48:09:eb:3f:d5:8a:da:e1:af:c2:d3:7f:
c2:1a:93:0c:25:01:b6:f1:bf:bf:3c:f6:c2:a2:cc:
e0:b3:36:61:14:c7:2c:71:ba:6e:ed:c3:16:24:83:
dc:59:fe:f4:13:e5:6b:37:cf:1f:48:25:bc:1e:bc:
9b:c9:e2:88:76:d9:91:59:ed:ec:56:2b:6d:42:c8:
0e:86:86:10:95:6f:7b:17:eb:6f:e1:64:f4:4c:bf:
8a:28:b5:39:79:d1:8f:4a:3e:4d:34:30:e4:57:73:
c6:02:58:7a:d8:e8:5d:80:da:4a:09:4d:12:cc:7a:
66:7a:18:52:4a:21:4b:6c:20:65:3a:7f:93:4a:f4:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:4E:A3:10:A1:DA:12:14:42:60:AB:AA:E2:69:5C:95:50:0A:0D
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33382e302f32342d3234203d3e20323639393836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.38.0/24
Signature Algorithm: sha256WithRSAEncryption
76:35:3a:3c:a6:2b:0d:0f:2e:d8:e0:47:b8:a5:16:dc:88:b1:
32:66:6a:4c:65:15:5d:4f:c5:1a:0d:00:00:73:da:9e:e0:e9:
1b:b3:4c:24:b3:bb:91:d5:ef:1e:60:0a:f1:05:9c:5c:92:fb:
b7:d2:1c:60:c6:f7:be:ef:0b:94:b6:fd:49:c4:d4:f7:78:20:
f1:a2:db:25:fb:81:76:97:e4:d5:31:06:b0:e4:1f:ec:26:57:
7d:e1:45:09:4b:0f:91:13:ba:94:67:43:7f:64:11:bc:17:8f:
0e:42:c2:6f:19:84:6e:5c:b2:bb:32:fc:d9:a4:b0:69:11:cf:
1e:ce:13:79:07:4e:fc:40:87:3b:da:98:65:50:f4:95:5e:c4:
d3:fd:ad:f4:cd:53:f1:59:6d:4a:ba:5a:da:f2:ed:d7:95:df:
5c:52:56:34:bd:48:bd:d4:87:23:af:30:38:6c:66:94:8f:b0:
bb:ba:39:02:c7:7e:86:91:1a:75:44:f8:8c:7b:67:73:2d:58:
73:54:8e:8c:1b:4d:3b:f0:54:07:66:92:c4:20:8a:36:6b:3c:
d2:13:99:ad:9e:a8:ce:fd:ed:f0:27:01:9a:a2:fb:b7:4d:4e:
b3:30:df:25:f2:a9:86:12:70:33:2e:a3:01:79:c9:af:98:92:
8a:97:7b:6f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFFQk6wImj+B4X5sD1o6nHWc7CdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMDQxODEyMTZaFw0yNjAyMDMxODE3MTZaMDMxMTAvBgNV
BAMTKDIxNTU0RUEzMTBBMURBMTIxNDQyNjBBQkFBRTI2OTVDOTU1MDBBMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTg2oRpYFFpsm9KWYWo339AP07
yH0g6Q1Mx4ddhdrhUJpDUinrBo1R6HS0/7M2okUeaqNH8kzs7QNU66ldFtYA39T2
Sn2dl8W5eyAFXf0qUKAH2OnVi072QI5jf7PrBPt5hTXx/6x180u7RMkxC6BhfdJM
VJeZhNGMFUgJ6z/Vitrhr8LTf8IakwwlAbbxv7889sKizOCzNmEUxyxxum7twxYk
g9xZ/vQT5Ws3zx9IJbwevJvJ4oh22ZFZ7exWK21CyA6GhhCVb3sX62/hZPRMv4oo
tTl50Y9KPk00MORXc8YCWHrY6F2A2koJTRLMemZ6GFJKIUtsIGU6f5NK9Lj5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIVVOoxCh2hIUQmCrquJpXJVQCg0wHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzMzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5aJjAN
BgkqhkiG9w0BAQsFAAOCAQEAdjU6PKYrDQ8u2OBHuKUW3IixMmZqTGUVXU/FGg0A
AHPanuDpG7NMJLO7kdXvHmAK8QWcXJL7t9IcYMb3vu8LlLb9ScTU93gg8aLbJfuB
dpfk1TEGsOQf7CZXfeFFCUsPkRO6lGdDf2QRvBePDkLCbxmEblyyuzL82aSwaRHP
Hs4TeQdO/ECHO9qYZVD0lV7E0/2t9M1T8VltSrpa2vLt15XfXFJWNL1IvdSHI68w
OGxmlI+wu7o5Asd+hpEadUT4jHtncy1Yc1SOjBtNO/BUB2aSxCCKNms80hOZrZ6o
zv3t8CcBmqL7t01OszDfJfKphhJwMy6jAXnJr5iSipd7bw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:16:33 2025 by rpki-client