Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33322e302f32322d3234203d3e203237373733.roa
File: 3139302e39392e33322e302f32322d3234203d3e203237373733.roa (raw, json)
Hash identifier: ijRYbLgWzElNyoA96DERfQNzPNpBmVYPoISvqOeIpI4=
Subject key identifier: 98:D3:BF:12:83:BC:33:BD:D0:F9:3F:C2:A8:EC:4A:EF:83:CE:B1:34
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 64C1C9923E26DCC8888D88805033894009A18BB1
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33322e302f32322d3234203d3e203237373733.roa
Signing time: Tue 04 Feb 2025 20:02:29 +0000
ROA not before: Tue 04 Feb 2025 19:57:29 +0000
ROA not after: Tue 03 Feb 2026 20:02:29 +0000
asID: 27773
IP address blocks: 190.99.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c1:c9:92:3e:26:dc:c8:88:8d:88:80:50:33:89:40:09:a1:8b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Feb 4 19:57:29 2025 GMT
Not After : Feb 3 20:02:29 2026 GMT
Subject: CN=98D3BF1283BC33BDD0F93FC2A8EC4AEF83CEB134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:ae:61:7d:0f:3d:55:fe:fc:5b:87:4a:76:
2d:24:4f:db:6f:d3:4e:53:de:f1:79:28:5e:fd:85:
e1:ed:9f:40:be:8f:f7:b6:9a:a0:31:0c:b7:4c:28:
22:3e:14:8e:fc:ab:1a:e3:3f:94:af:be:2b:a7:bf:
6c:72:c3:47:5c:19:e1:47:cf:90:61:c2:6b:ff:e8:
99:32:51:14:67:18:7a:66:c7:c6:fd:13:06:b7:dc:
a9:31:de:ba:75:61:7a:97:c3:ef:ca:b1:37:61:5e:
16:cc:70:99:c2:ce:d9:a8:3e:d5:1b:18:ce:7f:90:
f3:b3:90:0f:dd:c9:30:e8:dd:f9:b1:4a:f2:30:9f:
be:ae:89:c6:51:13:a4:43:de:7a:f4:d6:f7:4e:be:
93:79:f8:39:7e:3c:df:1d:f1:bc:7f:5c:9e:60:1f:
99:2a:0f:20:6e:96:79:67:8c:7a:4c:d0:03:cb:7d:
38:a0:db:5a:4d:61:06:0d:da:49:88:68:8c:d1:35:
bd:6b:1c:59:8f:a7:25:a7:e4:06:51:a0:9e:ec:4b:
4f:1d:fd:04:fa:22:06:0a:a5:4d:2d:1b:c2:37:ad:
56:79:87:b1:3a:f7:b6:49:3f:a8:4d:87:12:fd:89:
38:37:67:f3:16:6b:31:08:84:a7:e7:31:eb:ff:4b:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D3:BF:12:83:BC:33:BD:D0:F9:3F:C2:A8:EC:4A:EF:83:CE:B1:34
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33322e302f32322d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.32.0/22
Signature Algorithm: sha256WithRSAEncryption
41:6c:94:38:b9:fc:d9:6f:70:ec:11:3e:27:55:36:95:c1:f0:
9d:30:2f:e0:1b:d8:74:96:37:b8:f8:60:c8:c3:0b:ef:aa:51:
84:fe:3b:93:9c:b3:81:29:19:de:df:24:a0:a4:00:23:2a:ce:
be:ea:40:6f:11:36:ba:d4:5a:2c:44:62:73:83:ec:fb:f1:df:
13:87:93:86:0c:df:6a:fd:95:f0:f6:cd:61:a3:67:40:0c:46:
30:5a:2e:d3:d7:23:f1:30:25:ed:68:ea:9c:3c:c3:26:4b:e6:
44:c9:5f:99:3f:21:49:b0:94:ef:88:61:85:8b:57:7a:38:80:
03:cc:7d:01:d1:de:aa:cf:b4:4d:11:4f:8e:02:0e:2e:42:07:
0e:e6:dd:77:0a:52:7c:df:50:85:70:c2:47:10:73:7b:b8:58:
20:58:f0:78:13:a5:28:b0:3d:df:83:fb:43:00:8c:ce:78:23:
4d:cf:8e:3d:eb:44:e9:40:69:3b:68:22:10:a1:7a:ce:8c:2a:
20:3b:bb:3d:9a:cf:9d:2c:72:21:4e:79:cf:87:fa:15:f6:89:
2c:7a:ac:61:e8:48:d6:f7:5d:80:e6:a5:c4:2a:32:d0:8a:ee:
ee:3b:25:5c:29:44:f4:92:75:db:c9:e1:b5:a8:ad:79:ec:42:
04:30:9c:95
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZMHJkj4m3MiIjYiAUDOJQAmhi7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNTAyMDQxOTU3MjlaFw0yNjAyMDMyMDAyMjlaMDMxMTAvBgNV
BAMTKDk4RDNCRjEyODNCQzMzQkREMEY5M0ZDMkE4RUM0QUVGODNDRUIxMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fq5hfQ89Vf78W4dKdi0kT9tv
005T3vF5KF79heHtn0C+j/e2mqAxDLdMKCI+FI78qxrjP5Svviunv2xyw0dcGeFH
z5Bhwmv/6JkyURRnGHpmx8b9Ewa33Kkx3rp1YXqXw+/KsTdhXhbMcJnCztmoPtUb
GM5/kPOzkA/dyTDo3fmxSvIwn76uicZRE6RD3nr01vdOvpN5+Dl+PN8d8bx/XJ5g
H5kqDyBulnlnjHpM0APLfTig21pNYQYN2kmIaIzRNb1rHFmPpyWn5AZRoJ7sS08d
/QT6IgYKpU0tG8I3rVZ5h7E697ZJP6hNhxL9iTg3Z/MWazEIhKfnMev/S3PjAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUmNO/EoO8M73Q+T/CqOxK74POsTQwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzkzOTJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczNzM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+YyAwDQYJ
KoZIhvcNAQELBQADggEBAEFslDi5/NlvcOwRPidVNpXB8J0wL+Ab2HSWN7j4YMjD
C++qUYT+O5Ocs4EpGd7fJKCkACMqzr7qQG8RNrrUWixEYnOD7Pvx3xOHk4YM32r9
lfD2zWGjZ0AMRjBaLtPXI/EwJe1o6pw8wyZL5kTJX5k/IUmwlO+IYYWLV3o4gAPM
fQHR3qrPtE0RT44CDi5CBw7m3XcKUnzfUIVwwkcQc3u4WCBY8HgTpSiwPd+D+0MA
jM54I03Pjj3rROlAaTtoIhChes6MKiA7uz2az50sciFOec+H+hX2iSx6rGHoSNb3
XYDmpcQqMtCK7u47JVwpRPSSddvJ4bWorXnsQgQwnJU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:11 2025 by rpki-client