Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3235302e302f32332d3234203d3e20323635373139.roa
File: 3139302e3138322e3235302e302f32332d3234203d3e20323635373139.roa (raw, json)
Hash identifier: 5etEDhb4gRshYKV++Dbe3xCxQmxVmb9JBzgnmX8L/NE=
Subject key identifier: D1:04:85:37:37:9F:B5:AA:2A:0A:12:45:FB:9C:2E:C9:A9:B8:05:B6
Certificate issuer: /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial: 309780705D8E1344C61AC586C9C96BD7E48819EE
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3235302e302f32332d3234203d3e20323635373139.roa
Signing time: Tue 04 Feb 2025 18:30:40 +0000
ROA not before: Tue 04 Feb 2025 18:25:40 +0000
ROA not after: Tue 03 Feb 2026 18:30:40 +0000
asID: 265719
IP address blocks: 190.182.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:97:80:70:5d:8e:13:44:c6:1a:c5:86:c9:c9:6b:d7:e4:88:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Validity
Not Before: Feb 4 18:25:40 2025 GMT
Not After : Feb 3 18:30:40 2026 GMT
Subject: CN=D1048537379FB5AA2A0A1245FB9C2EC9A9B805B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:f6:1d:83:14:9f:67:d4:00:dd:ec:73:69:
58:bd:58:1c:c9:56:a1:c8:74:c1:fe:60:e7:ee:f7:
d2:c1:47:18:79:4f:18:86:52:ef:15:23:dd:38:b0:
77:c8:2f:4a:b0:10:06:ae:6a:79:41:44:92:a7:3b:
e5:b9:54:27:09:1e:86:bf:05:5c:4c:7e:de:dd:57:
ad:fd:cc:5f:d2:3f:56:36:e7:e0:8e:22:12:33:0b:
81:53:a4:78:e7:dc:88:69:0a:33:09:b5:af:44:37:
6a:1e:83:1d:b6:9d:76:ea:e0:31:b9:54:61:c8:5b:
00:f5:ad:3f:37:9d:3a:99:c3:46:de:20:2e:a6:69:
d5:d0:db:c1:01:83:75:52:51:c0:03:58:fa:85:34:
0d:b9:d9:03:34:70:d4:b2:0c:6b:16:bf:33:c2:01:
e2:79:b6:53:e2:50:af:56:e4:db:97:75:03:5a:16:
03:df:17:25:dc:85:26:b1:32:5d:b0:c1:0c:f1:cd:
ae:fc:f7:8f:6b:39:ea:1b:fa:00:93:01:15:e2:f8:
f9:32:5c:b7:74:ad:03:fa:b9:e7:1d:f8:29:66:2c:
58:c4:89:05:29:02:f7:8e:d0:0c:ba:90:d7:fa:6d:
88:f1:e9:59:82:89:5e:f5:7e:e1:29:a1:ca:ed:b5:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:04:85:37:37:9F:B5:AA:2A:0A:12:45:FB:9C:2E:C9:A9:B8:05:B6
X509v3 Authority Key Identifier:
keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3235302e302f32332d3234203d3e20323635373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.182.250.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:67:ed:fb:69:80:28:0a:8a:8c:ac:57:b9:24:50:73:90:02:
f8:ab:3e:7a:34:25:ac:96:f5:16:a8:58:ef:a7:2b:79:01:cf:
b0:4c:81:ff:28:cb:ff:43:7f:bd:c7:76:b5:f5:73:83:b6:eb:
16:27:33:67:5c:9d:a0:70:6b:89:a0:24:fe:d7:90:04:72:50:
92:66:66:24:3c:2a:e5:64:93:53:3f:78:a1:e3:a1:9a:85:01:
cb:5a:b5:62:3d:04:03:8c:92:a6:d4:cc:f0:c3:85:78:fa:d2:
9b:8e:6e:5d:5f:4c:49:0f:cf:8f:16:b1:af:60:db:0e:c4:c9:
03:5d:83:f6:f2:e3:46:cc:36:b7:72:5c:b2:9f:36:fc:d8:47:
c6:32:54:29:20:a2:3f:06:46:3a:66:a2:53:12:d6:5a:c6:d0:
76:72:6d:36:39:34:07:39:c1:e5:89:5c:2f:aa:7e:20:1f:6b:
bf:91:8e:86:b0:82:0e:f6:4b:6a:fb:84:d1:d0:22:a3:dc:24:
f2:fb:6f:65:10:d5:d7:2a:c2:a5:e9:9a:46:fe:2a:ab:05:b2:
ea:6f:17:36:23:27:76:4b:5c:2a:ba:2f:d7:08:9d:f7:77:9d:
08:a2:6a:b3:6e:7c:ad:a0:67:e6:71:7b:fc:a8:12:82:e8:96:
33:db:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:41 2025 by rpki-client