Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa
File: 3139302e39302e38372e302f32342d3234203d3e203237383337.roa (raw, json)
Hash identifier: Anf6Y+soS3lBKZuUlZObk4CT1QQ8OHD2B7Z1SblCUPY=
Subject key identifier: AA:87:D8:43:C6:BE:FD:50:20:D0:9B:46:AE:31:33:CF:92:83:6A:83
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 43148F71B2F5410AE1515134EEC919A993DD1629
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa
Signing time: Tue 04 Feb 2025 18:17:17 +0000
ROA not before: Tue 04 Feb 2025 18:12:17 +0000
ROA not after: Tue 03 Feb 2026 18:17:17 +0000
asID: 27837
IP address blocks: 190.90.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:14:8f:71:b2:f5:41:0a:e1:51:51:34:ee:c9:19:a9:93:dd:16:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 4 18:12:17 2025 GMT
Not After : Feb 3 18:17:17 2026 GMT
Subject: CN=AA87D843C6BEFD5020D09B46AE3133CF92836A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:49:16:36:1c:01:ce:a0:d5:68:bc:ad:b6:
6a:1a:35:c9:d2:cf:12:bc:d6:c2:01:63:9b:6a:3e:
76:26:f6:a5:43:52:97:49:62:8e:4b:01:52:e0:b4:
d6:0b:ce:3b:4f:cf:88:55:60:24:6b:fe:01:c7:9b:
02:21:05:8d:72:da:39:25:4c:d5:7c:67:34:36:fb:
1a:47:b3:9e:e0:b0:62:71:1a:e7:db:a5:50:63:0a:
37:7c:8c:f4:4e:8b:27:1e:ab:a0:5b:88:f6:cb:7d:
97:fa:36:de:d2:6b:40:c5:8b:b6:2f:60:de:d6:12:
25:18:4f:e8:11:fa:06:a4:78:d7:a3:39:35:1d:82:
ea:37:17:33:2d:36:f6:c9:8a:d3:71:2a:41:a9:4c:
13:70:c5:c7:e5:d2:90:ce:d7:3c:25:b3:b0:3d:2f:
74:6f:67:d0:dd:62:7b:e3:9b:d1:39:a5:d8:70:5c:
4c:44:db:37:56:e8:a2:a2:81:ed:17:32:5c:48:8e:
c7:65:dd:62:9b:84:9d:d3:6b:c0:c0:d4:3d:22:e5:
6d:7f:ad:82:d9:be:1d:7c:73:04:9e:01:ef:45:e8:
c2:ec:98:ee:e0:8e:17:48:dd:ac:93:6b:f8:fc:f9:
94:c5:87:87:2a:79:98:a8:7a:e2:c3:ae:d8:62:b4:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:87:D8:43:C6:BE:FD:50:20:D0:9B:46:AE:31:33:CF:92:83:6A:83
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.87.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d9:48:be:9b:a4:68:38:fc:5f:1b:a5:7f:ec:65:62:38:30:
1d:e7:12:b1:bf:8b:be:57:20:02:04:ed:a2:22:ce:b1:56:97:
94:55:06:17:73:6f:94:e0:45:d4:2e:e8:66:a5:72:1f:9f:a5:
47:c3:3a:d6:01:98:ac:7a:a0:ca:76:ab:1f:e8:52:d7:9e:1f:
d4:17:55:0a:db:b1:da:7f:fd:a8:60:17:d8:5a:24:d6:2b:1b:
a7:79:cc:7f:67:eb:35:d2:2b:63:0d:a4:74:b5:22:7f:46:50:
5a:fb:8b:cf:d6:6f:a1:cb:d6:47:ce:dd:56:c3:54:55:43:aa:
a6:c0:19:c4:69:a6:8d:24:3d:f9:2d:9f:a2:29:cd:cb:f3:26:
2e:8f:52:fe:18:17:ac:8e:ec:1c:5a:e3:5e:78:7e:5c:9d:30:
45:08:26:7d:38:d5:fa:35:e1:a9:2d:63:a4:14:2d:85:a0:58:
f7:3d:cf:35:9e:ad:4b:63:25:43:ec:9d:fc:ff:85:90:54:03:
84:fd:bb:34:51:99:15:ef:ed:c0:05:5f:3c:01:7c:87:85:f2:
57:14:4a:87:4a:9e:c5:ca:69:2a:48:d8:3c:c6:23:c5:a8:ef:
64:f3:c6:06:2c:e5:0d:82:f3:2c:00:0d:7b:68:63:d3:de:62:
94:36:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:41 2025 by rpki-client