Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36382e302f32342d3234203d3e20323632353839.roa
File: 3139302e39302e36382e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier: mH+PNoe9PX3mTvhdjp4Cg3A/JT9UftHWdrsv/tWHFzo=
Subject key identifier: 36:FA:EC:BC:F1:92:B3:7B:0A:B5:50:35:84:AC:FC:14:E0:62:BF:20
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 1B71F9DCBB613D074538AF040B62C5056952E8BF
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36382e302f32342d3234203d3e20323632353839.roa
Signing time: Tue 25 Feb 2025 20:15:00 +0000
ROA not before: Tue 25 Feb 2025 20:10:00 +0000
ROA not after: Tue 24 Feb 2026 20:15:00 +0000
asID: 262589
IP address blocks: 190.90.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:71:f9:dc:bb:61:3d:07:45:38:af:04:0b:62:c5:05:69:52:e8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 25 20:10:00 2025 GMT
Not After : Feb 24 20:15:00 2026 GMT
Subject: CN=36FAECBCF192B37B0AB5503584ACFC14E062BF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:bd:23:7c:12:00:6a:b2:fa:b7:3b:62:c4:
d7:68:53:82:f7:d0:2b:1a:73:13:7e:0e:b1:69:9c:
d7:a3:ab:b4:73:1e:1c:00:f6:c1:12:8c:a8:45:20:
40:2e:ef:e6:bf:87:16:2a:49:f5:c5:bd:0f:42:09:
bb:e5:b5:95:89:31:94:f9:ae:91:b3:e3:0a:77:cd:
5a:45:92:59:48:22:4f:23:ea:7e:41:11:08:9f:b0:
c4:75:6a:16:47:3b:11:a3:91:61:03:0d:24:10:dd:
f0:91:86:77:d0:61:fc:6c:e6:83:93:59:3e:d9:c6:
80:a3:ff:e9:1f:a6:29:b4:ee:63:bc:2b:a9:9d:45:
9b:5c:b4:74:be:a2:2e:39:10:d1:95:8d:a1:3e:cd:
c6:38:83:a0:d2:e0:a7:09:3f:07:38:8b:a6:ad:e2:
ce:55:75:2e:2f:92:7d:5a:42:4b:7b:9e:3d:65:ac:
33:a9:b1:08:01:6c:cc:2a:cd:2b:72:7b:02:c1:88:
71:cf:b0:01:e4:4c:e3:db:7e:7a:3d:24:b6:8b:6b:
b4:90:3a:56:cf:68:5e:98:bb:d7:85:88:ef:f4:46:
6b:35:3e:08:09:d1:ae:0d:11:7a:9f:13:63:22:0f:
3a:50:d6:98:fb:d5:78:da:b3:eb:5c:21:2d:c6:b2:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FA:EC:BC:F1:92:B3:7B:0A:B5:50:35:84:AC:FC:14:E0:62:BF:20
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36382e302f32342d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.68.0/24
Signature Algorithm: sha256WithRSAEncryption
71:7d:8f:63:56:a7:5e:59:4b:8e:91:a9:23:4c:7e:13:f3:fb:
62:97:dc:47:80:c3:32:04:8d:66:73:e6:35:14:7e:a4:7f:c9:
d3:40:60:18:03:c0:f1:72:be:9f:5d:c4:7b:41:48:a2:fc:b2:
ed:a2:f5:70:2e:8f:8b:f4:29:fb:e7:bd:55:14:4c:e0:0f:0f:
b3:90:c9:53:68:4a:6f:52:18:61:40:00:46:58:92:1e:1d:ae:
05:b2:44:8e:f9:48:01:03:be:c7:f7:84:e1:af:85:74:01:ce:
f3:f4:bf:e5:ba:8d:90:61:74:42:55:86:83:aa:05:16:35:15:
27:82:35:04:8e:c4:bd:0d:10:3a:30:c5:0a:8d:59:ee:51:f2:
dd:c8:cf:5e:75:be:2b:01:96:64:e3:ce:ed:8e:12:e4:f5:af:
41:fe:57:2d:44:48:f1:3d:6b:df:6a:69:e6:e7:83:7a:c3:4d:
95:b6:61:90:46:b8:01:58:f1:ae:7f:31:33:e7:37:1f:50:a6:
ac:f3:60:2f:20:23:23:7e:32:1c:a4:32:a0:c5:db:f8:f9:78:
c2:ae:f9:d7:ea:dd:48:22:42:3d:9e:e7:38:35:9a:4e:fc:f2:
b7:00:09:b2:72:47:11:83:a5:8e:a1:3b:18:31:b6:bc:2c:3b:
65:72:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:06 2025 by rpki-client