Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135362e302f32322d3234203d3e203134373534.roa
File: 3139302e3134392e3135362e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier: ZI1Y7+DcFgGSwUXL6tB+T5dukToR1mSgA1gHak+CLT0=
Subject key identifier: 2C:1A:6A:20:06:B4:2B:BB:65:DA:19:97:11:49:68:D9:29:48:B7:9B
Certificate issuer: /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial: 14B6CE4E0633F8727DE772FF9A93689FCF17758E
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135362e302f32322d3234203d3e203134373534.roa
Signing time: Tue 04 Feb 2025 18:55:22 +0000
ROA not before: Tue 04 Feb 2025 18:50:22 +0000
ROA not after: Tue 03 Feb 2026 18:55:22 +0000
asID: 14754
IP address blocks: 190.149.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b6:ce:4e:06:33:f8:72:7d:e7:72:ff:9a:93:68:9f:cf:17:75:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Validity
Not Before: Feb 4 18:50:22 2025 GMT
Not After : Feb 3 18:55:22 2026 GMT
Subject: CN=2C1A6A2006B42BBB65DA1997114968D92948B79B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:68:71:fd:e9:8c:93:ea:64:d2:40:e4:a1:
10:ee:3f:34:0e:f0:b5:9f:90:4c:49:90:8b:a5:f5:
84:08:4d:dc:62:0a:56:ba:d8:5d:7a:54:c2:7a:ec:
5a:3c:18:c0:7e:d0:c6:5c:30:d2:d0:70:68:d0:72:
4c:05:4b:f6:0b:26:db:a7:cd:1c:66:88:2e:40:86:
46:6a:66:1a:c1:bb:a9:28:f9:0d:de:fb:1a:b4:f0:
14:02:a4:68:d5:81:1a:61:b1:75:ed:36:6f:51:92:
59:1d:f7:1f:6a:8a:50:50:5a:47:ea:39:77:d6:f0:
8e:9a:55:42:65:32:0b:1f:98:e7:98:96:85:80:45:
22:93:ce:c0:b0:74:38:78:6d:95:82:7b:3e:87:e7:
cf:24:a3:ae:60:ed:9e:3c:13:60:cc:b0:05:4d:92:
dd:a9:52:02:de:c1:bb:c4:06:a4:98:36:bd:35:86:
15:79:19:8d:fe:bc:d5:6a:e7:94:a0:22:16:d3:48:
90:48:62:b2:7e:84:25:84:9b:e2:46:8a:4a:c8:b1:
99:1c:b2:1b:64:77:6d:de:3a:2e:60:00:61:50:1b:
97:6c:cd:fa:64:4f:9a:28:06:ca:a1:e2:55:ee:5f:
49:61:3d:65:eb:a0:bf:3f:b5:4d:d7:bf:c7:8d:b6:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1A:6A:20:06:B4:2B:BB:65:DA:19:97:11:49:68:D9:29:48:B7:9B
X509v3 Authority Key Identifier:
keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135362e302f32322d3234203d3e203134373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.149.156.0/22
Signature Algorithm: sha256WithRSAEncryption
85:dc:30:cf:3e:fb:14:7d:30:ca:5c:dd:9e:e8:49:57:79:41:
5b:e3:8a:43:7d:ec:10:ae:55:9a:4d:7e:aa:8f:ff:31:af:39:
e8:e5:56:cb:b7:96:9e:06:e1:6f:72:5a:4a:f3:68:6b:62:11:
df:42:29:30:26:4c:84:77:92:e7:7c:85:f7:d5:e3:86:5f:46:
b3:88:6a:60:3a:ac:f4:24:6c:ec:18:e8:90:74:a7:72:b5:b0:
01:90:ab:db:86:12:1d:34:2c:89:29:07:f4:84:7b:c1:d3:7a:
63:fa:66:9f:ea:ea:89:24:18:f7:ed:2c:8d:f7:3b:8d:16:20:
fb:91:34:d7:95:53:c4:00:31:18:8a:43:8c:0e:b0:87:82:18:
bd:c0:e2:22:ae:52:53:62:c9:e5:b9:a8:43:ec:f3:28:17:cc:
74:73:22:34:e2:d9:2a:4d:51:d7:99:df:d5:0d:50:7d:ae:ef:
01:37:e3:9a:4c:f2:94:2d:ab:4e:2a:dd:34:f7:b1:9e:5c:18:
a3:50:3c:57:38:e2:3f:45:bb:ca:ed:bb:db:b6:0f:23:c4:ca:
88:b2:0e:76:ee:6b:f1:78:a2:7e:2c:58:99:fd:21:70:b3:b6:
49:90:68:73:d1:ec:ec:42:15:ef:74:d4:fc:4a:f4:9d:e2:ee:
58:bf:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:32:58 2025 by rpki-client