Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa
File: 3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier: siy40PtOlR2Sf7cyieGaIOBrzGiej9lSIRZ5xLmSuUM=
Subject key identifier: A7:33:86:09:B2:98:AD:8E:69:47:F4:BB:C3:15:8C:C8:B1:77:EC:62
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 0977AE918746C979523CE0C32C6DA11AF890E784
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa
Signing time: Tue 04 Feb 2025 20:02:22 +0000
ROA not before: Tue 04 Feb 2025 19:57:22 +0000
ROA not after: Tue 03 Feb 2026 20:02:22 +0000
asID: 27773
IP address blocks: 190.150.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:77:ae:91:87:46:c9:79:52:3c:e0:c3:2c:6d:a1:1a:f8:90:e7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Feb 4 19:57:22 2025 GMT
Not After : Feb 3 20:02:22 2026 GMT
Subject: CN=A7338609B298AD8E6947F4BBC3158CC8B177EC62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:f6:36:c7:46:b7:e4:8c:80:10:72:a3:80:
5f:2d:e1:6b:37:c3:61:ac:79:7d:c4:b1:20:47:2e:
ee:ee:7f:09:9b:f5:e6:fa:02:ee:3e:7c:97:46:c8:
b3:13:fb:5d:8b:6a:75:96:7c:0e:c1:90:10:46:6e:
d5:b2:49:ac:03:0e:fc:54:5f:a4:5a:99:13:a8:2d:
48:27:ca:6e:9f:c3:82:f5:57:9e:a8:53:c9:93:59:
88:73:ac:c7:4a:cd:8f:97:7e:36:5a:f8:8b:71:47:
7d:04:73:ae:c2:46:6a:f0:bf:ab:5b:e7:2d:74:f0:
bf:40:38:4a:00:85:78:20:28:1f:6b:cc:fd:76:5c:
32:39:bb:b0:99:07:1e:29:a2:10:a8:d0:fd:63:90:
11:4e:56:4d:12:23:2c:79:d8:f9:da:6d:5a:b8:36:
ba:90:26:fc:ad:a1:d1:08:81:85:80:3b:34:fe:da:
40:b3:eb:dd:da:c2:ad:cb:a8:c0:7b:b4:bd:b0:87:
46:4c:74:8a:44:a0:5d:b5:69:db:99:df:81:b4:f9:
e5:c1:aa:96:c1:ba:c8:d6:a2:60:e0:84:3c:6f:0f:
ae:b3:bd:30:37:3b:81:45:6a:ab:5d:ff:1f:52:0d:
01:aa:0d:d6:ba:16:36:80:7e:2a:22:03:b3:d1:e7:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:86:09:B2:98:AD:8E:69:47:F4:BB:C3:15:8C:C8:B1:77:EC:62
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.150.192.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:ae:70:dc:33:a1:69:74:14:40:5e:ae:09:63:09:84:a0:90:
ef:a4:a3:49:de:36:d0:11:9b:ba:bf:cf:b4:6e:c4:8b:a2:38:
fe:7e:00:65:2d:2e:38:4e:dc:7e:fe:16:80:58:30:34:35:d2:
9a:8d:f0:e7:e8:3e:00:45:0e:a3:df:f5:4d:95:18:ea:d3:e6:
71:0e:18:f5:44:c2:57:c3:4b:95:37:84:8d:71:0b:85:57:aa:
7d:f4:2d:e0:92:06:f4:26:56:db:4e:78:05:07:ac:a3:6a:2d:
34:70:93:74:88:53:7b:7b:3d:14:17:b9:8a:fe:25:b8:f9:bc:
37:b2:6f:dd:23:84:d2:97:7d:45:d7:10:36:06:cf:b7:41:a4:
2c:9a:2a:84:8c:f7:d7:2a:fa:ce:b4:ea:30:b1:10:10:4d:ee:
fa:3f:25:65:67:1a:21:eb:4d:92:de:74:f8:60:dc:93:5d:02:
1a:d0:43:b6:ab:02:14:f7:03:a0:bc:8d:9d:31:2f:a0:4d:37:
1f:c9:eb:ab:48:9a:70:32:c9:b0:63:b9:96:d4:a6:8d:7c:d8:
af:67:ae:7c:8f:6b:b4:b7:e3:1c:5b:f1:07:28:f2:29:d9:40:
32:56:71:c7:cf:87:f1:32:38:f1:7c:0d:12:89:f9:6b:10:31:
23:d1:b1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:52 2025 by rpki-client