Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e37302e302f32342d3234203d3e20323632353839.roa
File: 3139302e39302e37302e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier: gfdvefa+8gpoebfK+2fR9gxpQqsySyRm/4IIejmJYM0=
Subject key identifier: 72:BF:FE:BB:56:2C:AC:63:F3:23:07:FE:2B:41:73:34:C4:91:10:79
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 041C7B6F9383F602C1402B9E8DB4D2E1DD96A40A
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e37302e302f32342d3234203d3e20323632353839.roa
Signing time: Tue 25 Feb 2025 20:15:03 +0000
ROA not before: Tue 25 Feb 2025 20:10:03 +0000
ROA not after: Tue 24 Feb 2026 20:15:03 +0000
asID: 262589
IP address blocks: 190.90.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:1c:7b:6f:93:83:f6:02:c1:40:2b:9e:8d:b4:d2:e1:dd:96:a4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 25 20:10:03 2025 GMT
Not After : Feb 24 20:15:03 2026 GMT
Subject: CN=72BFFEBB562CAC63F32307FE2B417334C4911079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:dc:bd:b6:37:fc:87:5d:30:56:ae:71:ac:
3f:8d:ec:33:34:17:2b:70:40:83:a7:bf:16:86:78:
e5:9a:4c:6e:a8:45:f3:f4:9f:bf:79:d7:87:04:56:
31:0a:ac:5a:0e:6d:be:b3:83:d3:d7:c8:0a:0c:9e:
a5:07:c5:2c:4b:50:b9:fe:e2:f2:62:ea:9c:6d:ca:
80:75:f6:aa:f6:31:23:e7:dd:b5:71:b8:72:39:98:
12:0b:df:05:40:7b:db:12:30:09:17:1d:b9:ad:5a:
da:58:4b:78:db:db:d8:f6:65:c9:6d:f1:e8:82:37:
ab:c3:e1:2a:6a:89:b8:e3:d4:82:f2:4c:ff:c4:fe:
56:7b:2f:f2:96:79:9d:b9:2b:1c:59:81:19:89:73:
51:d6:e4:70:06:45:82:ac:41:12:60:71:c2:3e:d3:
ca:4b:bc:b5:7b:4b:2d:1f:78:59:0c:86:95:68:41:
e2:a7:af:36:51:42:fe:0d:70:0a:ca:b9:78:05:79:
2c:46:39:61:b5:cd:a4:48:12:57:71:09:c6:86:a7:
17:a5:b0:81:73:1e:b2:af:31:3e:06:65:b1:d0:15:
a1:69:9f:20:21:06:62:de:46:4f:f7:d1:1c:70:de:
78:9f:52:15:f6:d0:cb:9a:ea:94:6c:1b:6c:e3:f0:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BF:FE:BB:56:2C:AC:63:F3:23:07:FE:2B:41:73:34:C4:91:10:79
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e37302e302f32342d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.70.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2a:78:ee:b9:33:7f:ce:b9:4a:0a:81:25:2e:bf:1e:3d:7d:
cd:6b:de:31:7f:24:62:91:31:75:25:12:de:6f:e4:23:22:e7:
0c:1f:36:05:be:b6:a2:94:ce:14:8a:d2:f0:bb:67:8e:d0:b3:
23:eb:83:1e:cb:b2:55:72:20:37:cc:3b:5c:7e:13:67:aa:c7:
4a:2f:2b:e3:7a:e6:3e:2a:89:a7:48:c3:9e:ab:9f:42:47:b4:
85:87:6d:01:72:a9:da:51:ec:1e:4d:8b:6c:2c:07:56:90:ae:
46:7f:96:ab:53:5e:8f:37:c8:7f:c3:48:c5:30:fa:6d:40:14:
78:1f:fb:c0:e4:64:fd:e5:1d:10:a2:54:da:33:f6:57:95:bc:
99:c1:81:58:e7:a7:93:cd:a3:64:b3:c6:ef:9e:e9:f7:42:ad:
32:60:33:5e:25:14:e4:60:cb:55:f7:25:2a:48:4d:ad:d9:6b:
d6:43:72:74:79:52:b7:88:08:09:36:61:f0:82:2e:b7:6f:f2:
33:48:46:f1:16:89:d1:b8:65:9c:10:d9:31:a7:d3:2c:e5:ca:
f6:d9:e1:85:59:e2:1a:75:c2:5b:dc:af:45:78:48:fe:fe:37:
1b:99:42:e4:6b:6a:55:53:36:e4:8c:7d:f5:35:22:cf:6d:8e:
17:cb:3d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:07 2025 by rpki-client