Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e302e302f31392d3234203d3e203237373733.roa
File: 3139302e35332e302e302f31392d3234203d3e203237373733.roa (raw, json)
Hash identifier: K1xndLaL70s8+eRurs6O1glZiiAsVyfOgl3DeGeELcI=
Subject key identifier: E0:CB:8F:8B:BA:AE:A5:BC:64:4E:BE:CB:58:FC:42:76:74:E8:C7:D3
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 38DE29A173FC31201B2AE654A17D4826C76262CE
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e302e302f31392d3234203d3e203237373733.roa
Signing time: Tue 04 Feb 2025 20:02:12 +0000
ROA not before: Tue 04 Feb 2025 19:57:12 +0000
ROA not after: Tue 03 Feb 2026 20:02:12 +0000
asID: 27773
IP address blocks: 190.53.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:de:29:a1:73:fc:31:20:1b:2a:e6:54:a1:7d:48:26:c7:62:62:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Feb 4 19:57:12 2025 GMT
Not After : Feb 3 20:02:12 2026 GMT
Subject: CN=E0CB8F8BBAAEA5BC644EBECB58FC427674E8C7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:1d:51:a4:15:63:66:55:35:ec:24:83:68:
96:07:d1:04:44:f2:e4:4a:b2:85:05:e9:a7:23:fd:
d9:2e:6c:a9:2a:8e:dc:1f:9b:08:89:d4:4d:05:fe:
45:41:ca:d8:a2:27:82:76:66:a2:02:4d:6f:3f:16:
49:73:c9:b3:81:9a:5b:45:20:88:fb:f4:61:e7:69:
18:89:d7:4e:5b:4e:cc:95:bc:ae:8b:aa:a7:65:c5:
54:48:96:95:5a:17:77:71:95:06:7d:16:cb:69:c5:
28:60:f2:62:9c:3b:a3:e2:5d:ca:b7:78:74:9b:40:
79:93:8d:36:da:04:d1:ad:15:85:04:08:88:13:21:
ab:22:74:29:6c:62:4e:66:8f:77:23:d1:55:d2:c1:
f3:7e:1d:19:08:d3:c6:3b:2c:87:0f:05:8d:6b:b6:
95:a6:c7:6f:f5:bb:c0:be:ff:4f:96:01:d4:b4:21:
a2:74:07:b8:d2:80:13:d5:9e:05:93:2e:e3:f8:51:
71:05:ef:db:92:1a:dd:df:85:6e:89:3c:59:f0:b6:
75:1f:26:d9:3a:5b:53:32:47:76:f2:9c:71:20:1d:
e1:74:60:b7:28:14:cd:93:29:2a:de:8c:4f:9b:5f:
1f:1a:7d:b9:86:6d:9b:94:d4:27:6d:e0:22:31:3d:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CB:8F:8B:BA:AE:A5:BC:64:4E:BE:CB:58:FC:42:76:74:E8:C7:D3
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e302e302f31392d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.53.0.0/19
Signature Algorithm: sha256WithRSAEncryption
03:78:ff:bc:5c:d1:fe:02:78:9c:53:78:c3:74:9d:79:eb:ea:
fb:34:25:78:9a:30:88:bc:ed:62:31:20:d0:4a:fb:37:a2:d4:
86:c8:da:63:c3:12:65:32:e5:99:c3:3a:cf:7e:98:76:d4:64:
7c:c6:b5:8b:d5:94:6d:4e:ad:21:a1:3e:cc:a2:fc:96:9e:e2:
ad:d2:c2:d2:9b:47:e5:19:7d:5d:da:8c:4c:96:b4:87:22:8c:
33:e4:1b:c9:03:83:64:61:65:87:b9:47:6f:a9:cf:d1:3d:a2:
d9:f2:25:dd:6c:45:51:7c:b4:6e:65:e3:b1:32:85:83:2f:7d:
6c:ac:d5:fe:6d:84:e2:c3:90:d1:ea:8b:c5:6e:2e:00:0c:1e:
77:8f:40:60:70:77:6c:ba:74:3a:51:b1:51:e4:74:6c:d9:f2:
31:3b:af:01:fb:22:76:aa:1e:31:e4:be:38:19:25:27:93:4c:
2d:e2:9d:2a:47:f3:8a:c4:64:8c:06:e2:c8:52:19:1a:7a:b2:
21:7a:fd:9e:6b:b8:d9:33:d5:4e:15:63:a3:04:7f:13:d1:7f:
66:63:47:93:ad:58:a8:2b:cc:07:e9:c8:cd:fe:3f:f3:ab:30:
34:5c:f5:71:b8:1a:11:b6:e0:df:ae:5b:e1:fc:8f:ad:ef:cb:
af:9e:f9:06
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUON4poXP8MSAbKuZUoX1IJsdiYs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNTAyMDQxOTU3MTJaFw0yNjAyMDMyMDAyMTJaMDMxMTAvBgNV
BAMTKEUwQ0I4RjhCQkFBRUE1QkM2NDRFQkVDQjU4RkM0Mjc2NzRFOEM3RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Qh1RpBVjZlU17CSDaJYH0QRE
8uRKsoUF6acj/dkubKkqjtwfmwiJ1E0F/kVBytiiJ4J2ZqICTW8/FklzybOBmltF
IIj79GHnaRiJ105bTsyVvK6LqqdlxVRIlpVaF3dxlQZ9FstpxShg8mKcO6PiXcq3
eHSbQHmTjTbaBNGtFYUECIgTIasidClsYk5mj3cj0VXSwfN+HRkI08Y7LIcPBY1r
tpWmx2/1u8C+/0+WAdS0IaJ0B7jSgBPVngWTLuP4UXEF79uSGt3fhW6JPFnwtnUf
Jtk6W1MyR3bynHEgHeF0YLcoFM2TKSrejE+bXx8afbmGbZuU1Cdt4CIxPRLXAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU4MuPi7qupbxkTr7LWPxCdnTox9MwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzUzMzJlMzAyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzMjM3MzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvjUAMA0GCSqG
SIb3DQEBCwUAA4IBAQADeP+8XNH+AnicU3jDdJ156+r7NCV4mjCIvO1iMSDQSvs3
otSGyNpjwxJlMuWZwzrPfph21GR8xrWL1ZRtTq0hoT7MovyWnuKt0sLSm0flGX1d
2oxMlrSHIowz5BvJA4NkYWWHuUdvqc/RPaLZ8iXdbEVRfLRuZeOxMoWDL31srNX+
bYTiw5DR6ovFbi4ADB53j0BgcHdsunQ6UbFR5HRs2fIxO68B+yJ2qh4x5L44GSUn
k0wt4p0qR/OKxGSMBuLIUhkaerIhev2ea7jZM9VOFWOjBH8T0X9mY0eTrVioK8wH
6cjN/j/zqzA0XPVxuBoRtuDfrlvh/I+t78uvnvkG
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:37 2025 by rpki-client