Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e382e302f32312d3234203d3e203138363738.roa
File: 3139302e39302e382e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier: R605ZydcA0WfbgrJHB6DQxRqVIdVEGRMBkbHibPBTmE=
Subject key identifier: DC:5C:C3:93:82:15:39:80:FB:7E:22:CD:A7:A5:71:84:10:A4:59:AC
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 74E9342673EF8E5BCDF4472355D8E86C662D8062
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e382e302f32312d3234203d3e203138363738.roa
Signing time: Wed 12 Feb 2025 12:55:00 +0000
ROA not before: Wed 12 Feb 2025 12:50:00 +0000
ROA not after: Wed 11 Feb 2026 12:55:00 +0000
asID: 18678
IP address blocks: 190.90.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e9:34:26:73:ef:8e:5b:cd:f4:47:23:55:d8:e8:6c:66:2d:80:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 12 12:50:00 2025 GMT
Not After : Feb 11 12:55:00 2026 GMT
Subject: CN=DC5CC39382153980FB7E22CDA7A5718410A459AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:80:cd:99:ca:a3:6d:98:7e:0b:ee:7b:91:
82:41:74:92:4e:8f:56:7a:9a:af:f2:8d:78:eb:52:
f8:6f:7a:88:f8:52:f0:b4:dd:68:1d:2e:fc:81:b8:
73:7f:4e:b5:4b:6f:7d:97:d7:82:da:e4:93:c9:c6:
28:dd:e9:01:93:6d:42:ce:fc:98:77:07:1c:d8:b3:
48:74:1c:df:d6:14:3c:3b:d9:bd:b2:c9:8c:71:4c:
fe:fa:b2:7a:6e:c1:aa:5c:dd:80:62:09:43:69:4d:
b4:41:ab:4e:bc:0e:c7:21:cf:a4:99:bc:46:12:56:
e0:6b:fd:e6:6f:91:fe:60:bb:71:d0:ef:87:5c:8f:
27:5b:4e:f4:3a:c8:2c:5d:03:77:6c:0c:eb:9e:39:
e5:3b:98:d0:1a:03:dc:58:a2:76:5c:b0:83:ce:ba:
31:36:2e:88:4d:12:ed:6a:e7:92:26:f8:65:fd:fd:
bc:1d:85:52:16:50:8d:c1:17:3b:ab:32:02:fd:72:
7d:fc:13:56:6d:19:dc:01:a1:45:c3:91:04:28:50:
3a:70:df:33:75:53:1e:be:09:0f:b3:62:a6:62:14:
c6:f3:f2:8e:1a:30:87:37:04:30:10:bb:ec:6d:17:
f0:f0:a1:7d:23:cc:7c:c2:2f:e6:05:8f:83:fc:5e:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:C3:93:82:15:39:80:FB:7E:22:CD:A7:A5:71:84:10:A4:59:AC
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e382e302f32312d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.8.0/21
Signature Algorithm: sha256WithRSAEncryption
03:04:d2:43:74:ab:08:38:cb:9f:7b:cc:ee:22:bf:e7:23:08:
07:62:0b:82:68:5f:d2:d9:fe:73:d2:f1:ab:f2:7a:a3:3b:70:
04:89:b2:a2:ed:d9:cc:03:d9:b6:2c:dc:20:83:aa:59:0f:34:
19:4f:a7:fe:22:0a:ee:82:10:28:7d:e6:19:89:91:41:9c:90:
95:93:10:57:19:86:2d:8c:43:02:d4:1e:74:00:ff:cb:50:c4:
35:c6:53:67:7d:64:35:3c:8d:7d:f9:23:94:3f:62:a2:52:34:
4e:13:5b:ee:78:b2:9d:06:48:2b:7e:bc:fd:d4:4b:7e:a2:ef:
78:47:65:f0:81:4a:24:e9:10:ae:3c:22:26:e7:f4:ea:2c:a9:
74:3a:00:48:d4:db:98:3d:16:99:83:9c:c1:2b:56:b4:23:0b:
f9:e5:3e:70:91:db:27:c5:46:74:8c:40:be:b2:8f:0b:8c:04:
82:6e:14:2f:9f:be:bc:e6:f4:53:59:37:c3:08:2e:83:e0:5a:
95:17:6d:13:a3:dd:7f:26:8e:ef:2f:95:0b:24:25:69:6b:ac:
37:b4:82:0b:aa:b0:3e:47:a1:1a:ef:ff:39:8a:a0:a2:11:fd:
3a:46:c2:1f:c1:80:ae:e9:cd:69:51:6b:34:00:93:bf:fb:a8:
92:0e:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:03 2025 by rpki-client