Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139382e302f32342d3234203d3e20323635363833.roa
File: 3139302e3138352e3139382e302f32342d3234203d3e20323635363833.roa (raw, json)
Hash identifier: 8bcWKQKGjTENr9+rsGL63Wci5Qi53JkxkK2CFmbv8c0=
Subject key identifier: 36:47:AF:9B:6F:57:95:94:66:8C:3F:81:12:64:FE:CD:7D:DD:45:50
Certificate issuer: /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial: 0AF3B572D7FED5666C9335E4517763F73EB83FA5
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139382e302f32342d3234203d3e20323635363833.roa
Signing time: Tue 04 Feb 2025 18:30:41 +0000
ROA not before: Tue 04 Feb 2025 18:25:41 +0000
ROA not after: Tue 03 Feb 2026 18:30:41 +0000
asID: 265683
IP address blocks: 190.185.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f3:b5:72:d7:fe:d5:66:6c:93:35:e4:51:77:63:f7:3e:b8:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Validity
Not Before: Feb 4 18:25:41 2025 GMT
Not After : Feb 3 18:30:41 2026 GMT
Subject: CN=3647AF9B6F579594668C3F811264FECD7DDD4550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:b7:ce:b1:2a:67:8b:e1:2d:5b:a6:ee:45:
62:72:5f:a7:c5:e3:23:da:46:89:13:c9:d2:e5:62:
72:f4:81:58:bd:56:3d:b1:8b:6a:fd:50:48:32:bf:
a9:4b:d7:ad:02:a7:07:e6:6f:da:21:85:d3:3f:52:
fb:ed:cc:01:bd:24:ed:c2:95:4f:30:c3:54:6c:f4:
cb:0d:1b:76:e7:de:76:bc:e4:91:03:82:7f:ee:b0:
8e:1c:66:bf:c7:6c:6f:22:ad:68:f1:f0:b9:53:c7:
4f:ba:a0:67:e6:0b:10:0b:43:37:3c:05:c2:07:8e:
16:02:95:71:19:4b:ef:a4:8e:ca:70:52:bd:0e:6b:
59:b0:1c:f1:9b:3a:51:e2:94:9e:19:7d:e4:8b:5f:
8e:c8:33:b4:a4:ea:1e:42:18:87:3d:2b:8a:d2:68:
89:fd:aa:1c:a1:fb:af:f2:1a:42:92:66:e4:25:9f:
0a:b9:a5:65:70:fe:a3:bc:42:0a:6c:da:f4:39:4f:
37:f3:91:ef:b4:5c:ba:f0:c3:f8:07:32:50:7b:5a:
00:51:5d:cd:ae:b2:7b:20:5f:1f:4f:40:cd:dd:2f:
16:22:e7:83:60:92:46:04:c0:60:63:60:1f:7e:d6:
ae:a6:00:58:56:17:36:5d:bb:03:d3:7a:ea:b1:a7:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:47:AF:9B:6F:57:95:94:66:8C:3F:81:12:64:FE:CD:7D:DD:45:50
X509v3 Authority Key Identifier:
keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139382e302f32342d3234203d3e20323635363833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.185.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:94:2a:d4:a5:7e:42:62:b5:76:5a:ae:e2:68:2e:b4:ac:be:
16:af:a2:9c:a5:fa:c5:ca:8b:ee:f2:8b:c1:50:99:87:fb:ac:
9e:a3:1f:44:94:41:16:d7:cc:f7:6d:65:b0:72:71:b2:8d:2f:
56:11:cf:85:b1:66:35:3b:4e:2b:ab:dc:47:08:a8:e6:c4:6a:
9d:b9:74:7d:4c:0f:d6:17:f8:04:4b:9c:54:3a:c6:68:de:e0:
f1:f6:6b:26:6b:f0:63:12:c5:bf:ea:fb:d0:1e:71:8c:ea:64:
08:7b:b7:2f:8b:46:0b:fc:33:11:c0:f9:14:d7:06:4c:eb:76:
ea:4f:b0:f0:72:35:25:aa:48:d6:fe:10:65:58:fe:ef:52:82:
e2:21:04:cd:02:8a:da:ac:d2:20:29:84:0e:0e:b4:64:8a:a6:
a5:e2:66:3e:fd:9c:bf:79:93:44:85:84:ae:d6:d4:6b:5b:f8:
e1:1f:d2:de:da:f5:83:ed:8c:46:bc:47:89:d3:71:93:57:74:
26:25:ec:61:18:8b:18:e9:cb:4f:80:1e:91:6a:7e:c3:9d:33:
e1:72:f6:a5:12:85:d1:75:7f:5f:1a:22:c5:37:9a:e3:69:0d:
42:e8:0f:cc:e6:94:9c:bf:d9:84:cc:c5:19:65:3a:03:83:e2:
54:63:4a:e9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUCvO1ctf+1WZskzXkUXdj9z64P6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNTAyMDQxODI1NDFaFw0yNjAyMDMxODMwNDFaMDMxMTAvBgNV
BAMTKDM2NDdBRjlCNkY1Nzk1OTQ2NjhDM0Y4MTEyNjRGRUNEN0RERDQ1NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkyLfOsSpni+EtW6buRWJyX6fF
4yPaRokTydLlYnL0gVi9Vj2xi2r9UEgyv6lL160Cpwfmb9ohhdM/UvvtzAG9JO3C
lU8ww1Rs9MsNG3bn3na85JEDgn/usI4cZr/HbG8irWjx8LlTx0+6oGfmCxALQzc8
BcIHjhYClXEZS++kjspwUr0Oa1mwHPGbOlHilJ4ZfeSLX47IM7Sk6h5CGIc9K4rS
aIn9qhyh+6/yGkKSZuQlnwq5pWVw/qO8Qgps2vQ5Tzfzke+0XLrww/gHMlB7WgBR
Xc2usnsgXx9PQM3dLxYi54NgkkYEwGBjYB9+1q6mAFhWFzZduwPTeuqxp7cbAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUNkevm29XlZRmjD+BEmT+zX3dRVAwHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMxMzkzMDJlMzEzODM1MmUzMTM5Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM4MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
ucYwDQYJKoZIhvcNAQELBQADggEBADqUKtSlfkJitXZaruJoLrSsvhavopyl+sXK
i+7yi8FQmYf7rJ6jH0SUQRbXzPdtZbBycbKNL1YRz4WxZjU7Tiur3EcIqObEap25
dH1MD9YX+ARLnFQ6xmje4PH2ayZr8GMSxb/q+9AecYzqZAh7ty+LRgv8MxHA+RTX
BkzrdupPsPByNSWqSNb+EGVY/u9SguIhBM0Citqs0iAphA4OtGSKpqXiZj79nL95
k0SFhK7W1Gtb+OEf0t7a9YPtjEa8R4nTcZNXdCYl7GEYixjpy0+AHpFqfsOdM+Fy
9qUShdF1f18aIsU3muNpDULoD8zmlJy/2YTMxRllOgOD4lRjSuk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:26:00 2025 by rpki-client