Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3230382e302f32302d3234203d3e203237373733.roa
File: 3139302e3135302e3230382e302f32302d3234203d3e203237373733.roa (raw, json)
Hash identifier: GfA0L5yORoIRl7JSYXZyx2coAE2zeW5590BtN7w4TRA=
Subject key identifier: BC:A7:70:2F:08:16:0A:9F:C5:1E:AE:EE:E4:3D:AD:81:4F:49:D1:13
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 434AE47E2364ACA962113935694523A3D24388D4
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3230382e302f32302d3234203d3e203237373733.roa
Signing time: Tue 04 Feb 2025 20:02:11 +0000
ROA not before: Tue 04 Feb 2025 19:57:11 +0000
ROA not after: Tue 03 Feb 2026 20:02:11 +0000
asID: 27773
IP address blocks: 190.150.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4a:e4:7e:23:64:ac:a9:62:11:39:35:69:45:23:a3:d2:43:88:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Feb 4 19:57:11 2025 GMT
Not After : Feb 3 20:02:11 2026 GMT
Subject: CN=BCA7702F08160A9FC51EAEEEE43DAD814F49D113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:ff:c4:a0:68:09:d7:51:8a:91:05:21:17:
49:dc:09:fa:c5:c2:69:5f:24:6a:e3:28:a6:45:f6:
2a:a5:a8:9d:b9:0f:cb:9c:8d:f8:ab:51:56:d3:53:
10:2b:ad:71:14:00:bd:6d:c8:4b:af:3c:18:69:f0:
98:18:1f:85:13:c1:27:f5:2a:95:3c:48:da:8c:4a:
9c:79:d6:f4:fa:37:98:e3:e2:e7:71:7e:42:9a:92:
87:03:ab:2b:80:96:45:42:51:e3:c5:f1:18:82:0a:
21:15:fa:24:9f:6a:3c:0c:1a:44:c0:8f:78:7c:6d:
40:06:82:ad:04:29:56:c3:4f:b6:09:81:66:89:4a:
1e:2f:ea:ac:1e:7d:f4:07:68:ec:9a:96:b6:e8:b0:
90:e2:d5:bb:97:7d:e4:6f:44:7a:85:79:82:12:85:
0c:69:fc:34:bb:e9:92:45:29:24:12:1e:ee:86:ce:
07:67:7e:36:f3:17:46:d8:65:40:0e:d4:dc:65:b0:
43:6c:ef:8a:92:03:4f:b1:9f:af:7a:ce:3e:b0:c8:
52:1a:e0:2c:b7:50:ad:25:95:de:26:42:fc:26:83:
c4:29:e3:c9:d3:5e:93:b9:c0:9f:35:5a:5a:34:ef:
a1:2b:a3:7f:19:c1:3b:a0:1b:7f:91:3d:9c:80:4f:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A7:70:2F:08:16:0A:9F:C5:1E:AE:EE:E4:3D:AD:81:4F:49:D1:13
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3230382e302f32302d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.150.208.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:c8:fa:f4:a6:2c:33:33:42:c3:e7:08:cf:56:3b:dc:2d:06:
5c:5e:1f:fd:20:7a:50:eb:b9:09:03:9b:05:b2:5f:dc:c3:c0:
74:fc:16:68:24:f7:b5:c0:05:30:4c:72:d3:4c:34:4e:60:10:
4b:bf:e7:12:39:e9:a4:ea:eb:0f:8b:2c:96:ad:09:a2:4e:f1:
74:73:c1:5d:3c:8a:66:5d:2d:a8:91:0f:2f:36:a8:11:b8:e4:
7f:ef:57:3a:0c:96:4d:1a:67:b0:74:20:e9:0e:80:5f:69:13:
3f:89:e1:98:0d:f5:55:d9:1d:d5:89:14:08:0c:6f:e0:37:1a:
7e:d2:43:3e:09:ff:d5:ba:81:27:bf:f8:80:2e:d8:99:de:a3:
4f:64:d0:9f:b4:36:70:27:e1:16:4d:92:ae:d6:f3:0a:89:cd:
5e:96:d4:e7:e7:85:f7:d5:2b:a9:63:ab:20:a7:11:9c:8a:50:
b8:0d:b9:ca:70:54:bb:27:a8:1a:54:c8:8a:db:d5:be:5e:44:
d1:53:0c:cc:1d:9e:85:b9:8a:b0:58:89:c0:92:22:3d:21:8c:
7c:57:4a:ad:3b:12:31:a6:39:ee:25:43:a9:3a:92:63:46:54:
c6:ee:b7:60:26:7a:d0:89:58:f0:ac:7f:aa:63:55:69:c5:0d:
ce:ee:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:46 2025 by rpki-client