Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38382e302f32312d3234203d3e203134373534.roa
File: 3139302e3134382e38382e302f32312d3234203d3e203134373534.roa (raw, json)
Hash identifier: r01Tbdy25+ffcw3zTgrSBAGCkEnJxUEmxRi5prJg/UU=
Subject key identifier: 6A:8F:46:B1:B8:D3:B8:47:BD:9A:21:D1:88:27:18:9B:D6:22:4F:F5
Certificate issuer: /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial: 2ACD3D3CCD1AD3A158EC522D0A443CF7DD63DBCF
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38382e302f32312d3234203d3e203134373534.roa
Signing time: Tue 04 Feb 2025 18:55:16 +0000
ROA not before: Tue 04 Feb 2025 18:50:16 +0000
ROA not after: Tue 03 Feb 2026 18:55:16 +0000
asID: 14754
IP address blocks: 190.148.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:cd:3d:3c:cd:1a:d3:a1:58:ec:52:2d:0a:44:3c:f7:dd:63:db:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Validity
Not Before: Feb 4 18:50:16 2025 GMT
Not After : Feb 3 18:55:16 2026 GMT
Subject: CN=6A8F46B1B8D3B847BD9A21D18827189BD6224FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:f5:b3:37:64:b7:07:72:e4:3a:45:cb:8b:
c9:97:fc:fd:86:a0:5d:4d:f7:db:fc:4a:7e:ca:58:
a7:9a:40:5c:24:76:9e:84:a8:05:2f:f0:67:f4:07:
2d:be:c1:a8:1b:71:b4:be:ab:58:d9:0b:69:11:7c:
25:f7:7f:1f:08:d1:4c:62:71:3f:7f:c2:e0:6c:b0:
63:a1:ab:4d:de:d7:9e:0d:fe:21:ca:18:03:ab:a8:
c4:49:e8:90:18:e6:ba:39:26:99:e5:c8:94:5b:64:
a5:a6:19:96:2e:67:0e:10:d3:c8:36:d0:26:d2:56:
97:b2:43:7b:a9:6f:b8:e6:a6:2f:b9:05:4e:74:03:
09:e8:c0:4f:db:7e:bf:75:3c:a0:c4:24:9a:2e:ff:
38:08:3c:de:99:b8:74:8f:1e:24:fa:1f:dc:47:f4:
fa:8f:1e:fb:23:58:e6:c3:46:e6:6e:73:31:ef:38:
60:21:d9:fa:f2:2b:ad:5e:56:1c:26:d4:67:5f:1c:
ff:6f:53:46:57:e9:2a:cb:f8:49:a6:da:75:ad:04:
8d:2d:8f:9e:43:5b:bf:c7:fc:94:89:24:24:33:55:
fc:7c:79:a9:7b:0c:32:3a:e4:38:83:e9:11:cd:fd:
ed:d4:a0:48:fa:3a:c7:86:b5:6d:21:5e:02:01:b2:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8F:46:B1:B8:D3:B8:47:BD:9A:21:D1:88:27:18:9B:D6:22:4F:F5
X509v3 Authority Key Identifier:
keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38382e302f32312d3234203d3e203134373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.148.88.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:19:1f:05:7d:ff:ad:49:0d:d9:3c:ba:0d:a7:1f:3c:d4:f5:
3e:0b:b7:f8:4e:b7:37:f0:e1:b4:f0:f3:53:18:04:66:cf:96:
d3:f2:ff:d4:83:2d:f8:25:d6:a1:a7:9f:4a:dc:ca:e4:ca:ee:
d1:96:5b:0b:0a:c4:52:1f:43:33:36:03:88:b0:54:20:73:65:
6f:57:70:ee:13:4c:6d:6b:8c:15:fa:7e:67:ba:88:c2:23:ec:
80:a9:94:10:e3:73:1a:40:96:ac:9c:2c:2e:41:f2:8e:c6:ad:
b2:54:aa:f1:f6:1f:42:61:1f:17:19:e5:0c:aa:ac:64:c1:8c:
1a:a9:86:65:4b:04:d1:fa:1f:b5:a2:6a:77:96:de:9d:7c:62:
c7:bc:18:bd:b1:93:f8:50:bf:65:df:e8:e8:81:27:dd:30:1f:
eb:86:7d:6c:13:8b:6f:30:2e:60:43:12:a5:54:b0:b2:f3:19:
e3:83:80:78:8e:cc:ce:57:63:f9:f5:c2:c2:8c:9a:38:2c:d5:
14:cb:f2:71:fb:92:10:f0:7e:cb:6d:03:95:80:51:6c:41:08:
34:30:1a:74:43:2c:82:9a:68:1d:40:8d:95:dc:81:4e:35:5e:
24:8a:10:44:23:5e:91:c7:45:88:3f:d4:b1:9d:45:54:9f:a7:
fa:86:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:32:58 2025 by rpki-client