Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3133382e302f32332d3234203d3e203532333236.roa
File: 3139302e3135312e3133382e302f32332d3234203d3e203532333236.roa (raw, json)
Hash identifier: cuNwmeG2+57x0mNdQal6CqF5BBF1aXJRbnYM0fD6srs=
Subject key identifier: FE:C0:6A:25:3F:43:80:0B:A2:0E:D4:1B:74:BF:06:7C:ED:A2:52:1A
Certificate issuer: /CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Certificate serial: 2511BCBDC25610E6FFFD866B88D18439B2585EB6
Authority key identifier: 9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3133382e302f32332d3234203d3e203532333236.roa
Signing time: Tue 31 Dec 2024 17:25:00 +0000
ROA not before: Tue 31 Dec 2024 17:20:00 +0000
ROA not after: Tue 30 Dec 2025 17:25:00 +0000
asID: 52326
IP address blocks: 190.151.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:11:bc:bd:c2:56:10:e6:ff:fd:86:6b:88:d1:84:39:b2:58:5e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Validity
Not Before: Dec 31 17:20:00 2024 GMT
Not After : Dec 30 17:25:00 2025 GMT
Subject: CN=FEC06A253F43800BA20ED41B74BF067CEDA2521A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:a9:24:34:dd:02:ee:02:25:94:62:4c:53:
8c:fc:93:c5:08:d5:21:2b:bf:8e:92:9d:3d:73:37:
24:e2:1a:9f:43:d2:95:91:bb:6e:85:b3:dc:28:1d:
ef:a9:f4:06:ed:bc:d5:42:91:66:be:a9:a7:e3:93:
8e:4d:3e:fd:72:19:d6:9b:01:28:e9:e0:5f:9d:5b:
5e:27:49:88:b8:33:b0:d0:64:ee:0a:28:db:eb:04:
42:71:31:6e:34:2f:3d:8f:0a:df:40:a7:43:2d:04:
85:04:86:ef:97:e9:37:47:71:2e:1e:d7:7b:f7:24:
f8:9a:08:a1:33:9c:c9:6c:54:6b:3e:8f:9c:1f:e9:
b5:bb:19:f7:fd:ea:1e:0e:12:1d:1f:28:6f:47:f7:
29:38:42:16:f1:06:f3:47:c2:4e:56:e0:2e:2a:c9:
60:22:a4:6a:c8:db:b1:99:cd:e7:21:9e:7b:ae:d1:
61:ee:63:85:3e:87:f7:71:51:c9:4b:9e:a2:a3:c2:
7a:2e:29:f5:18:6d:c3:78:e8:94:77:25:38:ae:fb:
a7:21:d7:c6:b8:1c:24:e1:cc:e7:86:c4:9c:23:9d:
0c:3d:89:63:d7:c9:7d:a1:29:61:50:61:2f:de:72:
e4:5b:d7:b5:15:a7:f1:07:7b:60:db:ee:7b:df:60:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C0:6A:25:3F:43:80:0B:A2:0E:D4:1B:74:BF:06:7C:ED:A2:52:1A
X509v3 Authority Key Identifier:
keyid:9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3133382e302f32332d3234203d3e203532333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.151.138.0/23
Signature Algorithm: sha256WithRSAEncryption
86:f8:6e:2b:c6:c7:95:2d:7e:28:f1:eb:95:3c:6c:75:d8:17:
88:d8:b0:e5:9d:00:df:52:80:a3:ed:22:7e:18:fb:70:32:60:
a7:8e:4b:28:22:99:8e:4b:ee:37:19:6f:74:7f:3e:bf:04:1f:
df:b3:9c:1c:fd:25:93:ae:bf:d9:f9:d2:38:5f:79:6d:4f:81:
1f:34:8a:6b:8f:49:a5:2c:49:33:41:77:46:51:4c:fd:06:54:
b7:ed:81:0f:c2:e8:4e:6e:e1:21:22:df:45:b7:55:74:a8:5a:
96:a2:3d:ca:27:92:e5:f3:14:bf:eb:a3:ee:2b:7d:41:8d:45:
e9:77:fc:ee:3d:11:5d:c8:35:dd:a7:e9:46:a2:4b:6d:79:b6:
2f:55:93:ce:21:68:2c:9f:65:a0:59:22:ae:f4:e1:f7:32:76:
64:26:a5:4f:ea:7f:40:39:a5:b9:8d:a5:be:67:99:f1:54:5f:
6a:65:47:41:8f:fc:4d:c4:49:13:22:bc:ed:b7:2c:25:40:d1:
6d:01:ee:22:19:79:b5:50:09:23:b0:9e:41:7c:ca:45:df:77:
16:22:f8:74:cc:20:7d:f1:b5:f1:2d:74:72:1a:3d:f4:c7:ac:
5e:3c:9e:77:99:a6:13:d3:ff:b8:e0:0a:8e:41:0e:81:61:1a:
0a:07:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:36 2025 by rpki-client