Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35362e302f32312d3234203d3e203238303936.roa
File: 3139302e392e35362e302f32312d3234203d3e203238303936.roa (raw, json)
Hash identifier: CCMt40bGaD3T2Uadh4QrKwPU/4BgFdmS75zy5njVZas=
Subject key identifier: 23:6F:68:A9:FA:3A:59:D3:DB:D2:81:0B:8F:81:56:2F:C1:AB:BB:FE
Certificate issuer: /CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Certificate serial: 70E29B9EC84FB2FE5D0BC557581440F904E17C26
Authority key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35362e302f32312d3234203d3e203238303936.roa
Signing time: Tue 04 Feb 2025 18:34:22 +0000
ROA not before: Tue 04 Feb 2025 18:29:22 +0000
ROA not after: Tue 03 Feb 2026 18:34:22 +0000
asID: 28096
IP address blocks: 190.9.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e2:9b:9e:c8:4f:b2:fe:5d:0b:c5:57:58:14:40:f9:04:e1:7c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Validity
Not Before: Feb 4 18:29:22 2025 GMT
Not After : Feb 3 18:34:22 2026 GMT
Subject: CN=236F68A9FA3A59D3DBD2810B8F81562FC1ABBBFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:2b:a7:bd:dc:47:04:b2:72:be:e1:8d:09:
87:04:b3:bc:b3:ad:92:fd:d8:a7:b5:d5:db:2c:30:
a2:e5:35:74:eb:95:1c:4c:7b:9f:38:10:95:07:9f:
db:9f:5b:42:bb:c2:e9:d5:74:e9:ec:ef:ea:c8:56:
1c:98:53:49:7a:9f:7a:00:84:07:02:45:12:79:e7:
81:90:64:cc:b2:20:72:af:97:03:7b:31:0f:43:42:
7e:dd:b6:af:7a:48:f7:22:0b:45:ca:6b:4e:16:4e:
f4:3b:d9:80:ec:61:b3:a5:ea:ae:67:2f:80:f3:7f:
da:ab:65:94:da:a6:68:cc:91:a0:ae:da:27:d4:4f:
1c:5c:4d:93:9c:27:7a:f4:a9:fd:63:27:7f:76:95:
fd:e8:9e:d1:a4:b3:ec:3a:2f:28:68:7c:ae:94:02:
14:67:c6:14:65:69:ab:7a:82:2f:4d:2f:76:b8:97:
81:dc:59:86:ab:1d:d2:ae:ec:dd:65:04:86:22:59:
6a:4a:4c:68:42:a6:91:68:7d:3e:47:8f:81:a3:cb:
fc:e5:c4:e2:5b:e8:a9:24:92:a9:e3:62:38:b0:ad:
0b:ef:32:e1:22:9f:01:2b:06:73:f6:2c:8d:66:ed:
0e:34:31:85:a0:cb:a2:dd:15:5f:d8:9b:88:7d:4d:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6F:68:A9:FA:3A:59:D3:DB:D2:81:0B:8F:81:56:2F:C1:AB:BB:FE
X509v3 Authority Key Identifier:
keyid:30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35362e302f32312d3234203d3e203238303936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.56.0/21
Signature Algorithm: sha256WithRSAEncryption
19:9f:44:5a:6c:e5:98:e6:ec:0a:7e:90:be:2f:d5:15:6a:05:
f9:a6:bb:dd:cd:56:5b:64:16:9f:4e:fc:f8:65:0e:e8:4b:94:
e5:20:19:b0:63:02:65:5d:8c:b6:15:7f:c1:32:67:16:d6:47:
5d:56:68:59:5f:70:36:18:42:ca:d9:97:a8:74:57:3d:bb:0e:
1e:e2:70:d1:7f:ce:16:1b:03:6a:52:fe:a9:d2:15:40:f5:d0:
26:07:64:e4:13:19:36:e1:2a:a1:20:41:9f:56:a4:ec:79:87:
e6:e1:b9:a4:bd:34:fc:12:3f:13:45:60:8a:b8:c3:82:2c:91:
3b:fc:2e:74:9a:ae:cf:08:79:8a:56:9c:9a:af:86:c6:84:f2:
91:d7:71:9f:dd:50:70:91:9b:38:68:cb:de:05:69:56:e1:56:
f1:f4:cf:13:0c:5a:ef:2c:e5:37:f9:fc:84:ec:b5:b7:7d:1c:
80:ad:9f:00:22:59:ba:03:bc:a3:0a:76:4c:f9:50:ce:fc:48:
ea:1c:6f:f0:30:03:42:ba:16:df:92:44:f2:07:c6:c5:dd:c1:
2f:7c:d1:2d:eb:cb:96:4e:d7:a9:a4:09:25:68:4d:af:80:28:
83:63:72:5a:b3:51:e0:5c:ac:73:83:27:c0:b9:34:c0:7d:32:
2a:8e:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:30 2025 by rpki-client