Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3139302e332e32322e302f32342d3234203d3e203237373534.roa
File: 3139302e332e32322e302f32342d3234203d3e203237373534.roa (raw, json)
Hash identifier: aRgz/w7Np9RX9JDz9IjRvK6ooc0mFpBwkRgwgxDXMYY=
Subject key identifier: BE:38:A6:C9:34:FE:89:2A:08:5B:07:21:28:8D:53:06:C1:6B:F5:30
Certificate issuer: /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial: 3E8AD235A6C406C74EBBBCBEF7CFB9A75745D38A
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3139302e332e32322e302f32342d3234203d3e203237373534.roa
Signing time: Tue 04 Feb 2025 18:08:46 +0000
ROA not before: Tue 04 Feb 2025 18:03:46 +0000
ROA not after: Tue 03 Feb 2026 18:08:46 +0000
asID: 27754
IP address blocks: 190.3.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8a:d2:35:a6:c4:06:c7:4e:bb:bc:be:f7:cf:b9:a7:57:45:d3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Validity
Not Before: Feb 4 18:03:46 2025 GMT
Not After : Feb 3 18:08:46 2026 GMT
Subject: CN=BE38A6C934FE892A085B0721288D5306C16BF530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:e3:0b:0b:1f:64:24:43:1a:04:36:1b:63:
90:0f:30:3a:19:1d:c3:9a:90:f7:5d:29:10:2e:1b:
14:3e:0c:ac:f7:8a:37:24:06:01:12:6c:83:cd:d1:
8a:28:fe:2e:36:c5:a3:5b:5c:32:e8:bb:64:ad:aa:
ac:ad:32:7e:c5:4b:00:2d:f8:2e:67:c7:81:ae:95:
4f:b7:5a:71:c6:af:c4:97:5f:35:9d:29:c1:11:b5:
5d:1c:f4:92:75:b6:68:02:ff:b0:10:3d:e6:06:97:
2a:2b:bf:ad:61:1f:88:ab:1a:63:7a:ba:4e:0f:b3:
8d:d9:5c:94:2b:a2:0b:67:0f:08:5d:6e:31:60:52:
06:0d:a9:01:23:ef:ed:3b:33:e3:da:64:20:18:b4:
98:64:e3:ea:16:52:9d:eb:cb:ea:fd:9f:1d:44:c0:
62:42:3d:95:9c:25:d1:96:75:f2:d6:97:0a:80:24:
1c:4b:9b:b5:ff:45:6c:e3:c4:14:e9:f3:47:16:74:
bd:90:41:bc:17:ee:50:f0:4c:0c:0a:48:b3:3b:3e:
9f:85:0b:1b:e1:9d:96:07:46:03:8c:1b:c4:79:97:
4a:cd:5f:63:54:34:9a:94:f4:89:07:e7:5e:51:91:
77:4f:73:77:53:75:f8:05:ff:d6:81:b1:68:a6:05:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:A6:C9:34:FE:89:2A:08:5B:07:21:28:8D:53:06:C1:6B:F5:30
X509v3 Authority Key Identifier:
keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3139302e332e32322e302f32342d3234203d3e203237373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.3.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e6:93:0b:7e:fd:fb:0e:d8:5c:55:8e:2d:96:a8:e8:b3:24:
a2:34:cf:5e:23:cd:76:6c:65:d1:f5:76:da:d2:c7:65:e1:ac:
15:ce:c2:85:80:56:8c:b4:7e:ae:e1:18:f7:26:9f:b1:44:13:
c6:07:b6:97:69:c2:89:1a:15:33:28:b2:85:0b:9c:a3:82:71:
94:af:99:66:83:7c:a0:74:d8:c1:d2:9c:fa:d0:f5:91:0d:60:
c4:98:4e:c7:55:29:68:e0:59:80:60:f3:7f:bd:5e:9d:cb:1f:
57:fa:aa:6d:81:b3:d1:c0:d6:99:2f:76:da:d2:c7:3b:99:d6:
83:d3:05:57:86:65:49:e9:72:3b:07:a6:64:ad:d9:11:f7:58:
df:eb:e9:32:3b:c3:30:c3:f5:0b:ba:25:66:18:8c:fa:85:73:
ef:04:95:7b:90:18:67:f9:9f:58:69:4f:64:dc:78:2e:ba:5b:
1f:ae:5b:fb:be:25:73:36:36:1a:b3:ea:8e:f3:c5:50:14:1f:
50:7c:44:96:2b:4f:d6:f6:66:c4:de:17:15:4c:47:e8:f4:fb:
47:f3:e5:cb:ed:c3:4a:fa:4e:ec:f5:40:bd:51:e8:3f:a2:f8:
39:05:b0:2d:aa:e1:9e:81:46:14:17:34:5e:37:d1:f6:ed:44:
0b:07:9b:09
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUPorSNabEBsdOu7y+98+5p1dF04owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxMEI2OUI3QTE2RTJDQjIyOTBBMzNFRUI3NERFMjc0
RjgzNzU3NTAeFw0yNTAyMDQxODAzNDZaFw0yNjAyMDMxODA4NDZaMDMxMTAvBgNV
BAMTKEJFMzhBNkM5MzRGRTg5MkEwODVCMDcyMTI4OEQ1MzA2QzE2QkY1MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRlOMLCx9kJEMaBDYbY5APMDoZ
HcOakPddKRAuGxQ+DKz3ijckBgESbIPN0Yoo/i42xaNbXDLou2StqqytMn7FSwAt
+C5nx4GulU+3WnHGr8SXXzWdKcERtV0c9JJ1tmgC/7AQPeYGlyorv61hH4irGmN6
uk4Ps43ZXJQrogtnDwhdbjFgUgYNqQEj7+07M+PaZCAYtJhk4+oWUp3ry+r9nx1E
wGJCPZWcJdGWdfLWlwqAJBxLm7X/RWzjxBTp80cWdL2QQbwX7lDwTAwKSLM7Pp+F
CxvhnZYHRgOMG8R5l0rNX2NUNJqU9IkH515RkXdPc3dTdfgF/9aBsWimBWrzAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUvjimyTT+iSoIWwchKI1TBsFr9TAwHwYDVR0j
BBgwFoAUuxC2m3oW4ssikKM+63TeJ0+DdXUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOTAzNzRFQURDQTUxNzBBMzdGNkI0NzM1QTg1Q0UwODNF
QURBRkRGQjk2QUE5M0M5Q0EwNEZCNkUxNzEwQUVELzAvQkIxMEI2OUI3QTE2RTJD
QjIyOTBBMzNFRUI3NERFMjc0RjgzNzU3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQjEwQjY5QjdBMTZFMkNCMjI5
MEEzM0VFQjc0REUyNzRGODM3NTc1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzkwMzc0RUFEQ0E1MTcwQTM3RjZCNDczNUE4NUNFMDgzRUFEQUZERkI5
NkFBOTNDOUNBMDRGQjZFMTcxMEFFRC8wLzMxMzkzMDJlMzMyZTMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzczNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvgMWMA0GCSqG
SIb3DQEBCwUAA4IBAQB/5pMLfv37DthcVY4tlqjosySiNM9eI812bGXR9Xba0sdl
4awVzsKFgFaMtH6u4Rj3Jp+xRBPGB7aXacKJGhUzKLKFC5yjgnGUr5lmg3ygdNjB
0pz60PWRDWDEmE7HVSlo4FmAYPN/vV6dyx9X+qptgbPRwNaZL3ba0sc7mdaD0wVX
hmVJ6XI7B6ZkrdkR91jf6+kyO8Mww/ULuiVmGIz6hXPvBJV7kBhn+Z9YaU9k3Hgu
ulsfrlv7viVzNjYas+qO88VQFB9QfESWK0/W9mbE3hcVTEfo9PtH8+XL7cNK+k7s
9UC9Ueg/ovg5BbAtquGegUYUFzReN9H27UQLB5sJ
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:03:33 2025 by rpki-client