Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e33322e302f32312d3234203d3e203237373432.roa
File: 3139302e35332e33322e302f32312d3234203d3e203237373432.roa (raw, json)
Hash identifier: t+0tw/pZ2pEDbkbtv+gMv1d7oG2n6TtPTSEj552EcaE=
Subject key identifier: DC:59:B3:8D:FC:BA:2B:73:B5:8F:E3:56:1E:E2:2E:58:8B:D6:0B:3D
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 1087DF3B86D202BC3594D5780EA24938B54412EE
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e33322e302f32312d3234203d3e203237373432.roa
Signing time: Tue 04 Feb 2025 20:02:14 +0000
ROA not before: Tue 04 Feb 2025 19:57:14 +0000
ROA not after: Tue 03 Feb 2026 20:02:14 +0000
asID: 27742
IP address blocks: 190.53.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:87:df:3b:86:d2:02:bc:35:94:d5:78:0e:a2:49:38:b5:44:12:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Feb 4 19:57:14 2025 GMT
Not After : Feb 3 20:02:14 2026 GMT
Subject: CN=DC59B38DFCBA2B73B58FE3561EE22E588BD60B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:24:b3:b3:4a:bb:1a:5e:3b:aa:dc:0b:bc:
42:41:53:6a:b0:c5:80:a1:d6:91:b9:c6:b6:1d:7c:
dd:69:d7:e9:35:f2:21:9b:17:07:5c:f7:0c:26:b3:
02:94:75:d4:68:c2:b9:ed:58:65:2c:f7:ec:9a:a6:
86:67:f2:68:ab:b2:55:43:c3:1e:5e:eb:73:f3:d2:
30:6b:3d:e4:91:67:b9:84:98:c1:93:f5:44:b1:2a:
1b:86:d9:db:38:dc:82:78:40:64:e6:de:48:c1:3b:
35:2f:92:e8:0b:33:b3:d3:aa:84:8d:98:3b:87:19:
25:82:cb:d2:bd:19:f8:99:81:fd:dd:ae:31:2f:74:
e4:9c:dd:ee:ed:d1:ed:69:85:12:6c:0f:ed:15:c8:
a5:ff:84:2a:aa:0b:53:6e:9a:75:fa:eb:af:0a:96:
ae:19:b8:3b:c2:7d:bd:65:3a:0e:7d:c1:6b:48:c9:
19:87:b4:09:4f:30:41:8b:b4:1b:c0:92:ce:4c:98:
40:84:46:d7:11:74:1d:01:fc:16:cb:4f:a2:ae:5d:
c9:49:bb:12:a7:5e:aa:73:36:cf:c5:60:e9:03:bc:
3a:35:a5:ac:9b:df:96:7b:17:4b:f9:a2:53:f8:70:
98:e2:42:8c:dc:c9:0c:86:54:91:f6:4b:1c:81:a3:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:59:B3:8D:FC:BA:2B:73:B5:8F:E3:56:1E:E2:2E:58:8B:D6:0B:3D
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e33322e302f32312d3234203d3e203237373432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.53.32.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:55:f4:83:67:11:aa:7f:6e:10:f7:fb:01:54:2a:de:a2:ae:
5a:52:71:3c:e4:2f:07:6a:ee:0c:c4:12:1c:e0:65:1b:a2:08:
c3:21:d9:51:a7:bd:66:0a:a8:cc:c6:1b:2f:75:4f:29:17:e1:
19:4b:59:a7:8a:d0:64:6e:b0:88:40:da:4d:cf:1c:c6:79:98:
2f:2c:be:eb:6f:e6:34:93:35:dd:3c:31:b3:91:21:04:d9:eb:
d3:8b:cf:f0:0a:c3:05:30:64:87:e4:54:4e:0e:57:26:d8:d9:
64:0b:69:b4:c3:29:90:39:46:1d:fe:d8:f5:f1:08:26:a9:56:
54:4c:4a:9e:b7:48:26:97:3d:83:54:ef:f4:17:65:bc:0d:e1:
90:92:b0:30:35:b1:62:ff:fa:18:40:11:fd:85:f4:8a:34:37:
46:7d:9a:fa:8c:0a:7e:e2:e2:e9:d5:46:73:1c:08:91:54:87:
2c:53:83:54:43:da:a0:2a:e1:ed:97:46:2e:22:b4:07:90:38:
a4:98:e0:63:86:8f:b7:e2:90:5c:95:59:d5:f4:64:43:56:b9:
c8:95:b2:6d:11:50:87:b5:74:e4:42:ad:94:58:85:ab:1a:95:
82:62:15:34:9a:cd:44:f7:17:74:10:b8:ed:65:be:6b:57:9a:
50:d4:72:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:04 2025 by rpki-client