Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134302e302f32332d3234203d3e203532333236.roa
File: 3139302e3135312e3134302e302f32332d3234203d3e203532333236.roa (raw, json)
Hash identifier: 4Nx/Kwyd+dWd6RR/SVClXPudhyl7WHmQIDUx1jmkrVc=
Subject key identifier: B8:65:A0:6A:78:6D:57:14:10:A2:9B:00:8B:AC:4B:5C:AE:AF:B5:3D
Certificate issuer: /CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Certificate serial: 2D3E5CEF00D45CF47519F1802C18C653F9DE766D
Authority key identifier: 9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134302e302f32332d3234203d3e203532333236.roa
Signing time: Tue 31 Dec 2024 17:25:00 +0000
ROA not before: Tue 31 Dec 2024 17:20:00 +0000
ROA not after: Tue 30 Dec 2025 17:25:00 +0000
asID: 52326
IP address blocks: 190.151.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3e:5c:ef:00:d4:5c:f4:75:19:f1:80:2c:18:c6:53:f9:de:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Validity
Not Before: Dec 31 17:20:00 2024 GMT
Not After : Dec 30 17:25:00 2025 GMT
Subject: CN=B865A06A786D571410A29B008BAC4B5CAEAFB53D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:42:59:bb:5a:7b:ea:e4:5c:9c:a0:da:dc:
2d:42:b3:89:32:98:bc:a0:5e:94:5d:fa:56:a5:b4:
3b:34:3e:b1:80:59:32:ff:b0:66:78:ae:f1:46:00:
b3:64:f0:13:d5:47:2c:c7:12:cb:db:48:3a:05:c3:
ed:5a:4e:aa:f7:23:d4:99:31:bf:2d:09:d3:f0:20:
83:b3:51:07:7c:09:70:05:8a:ea:db:49:c5:03:60:
51:f4:11:a0:bf:13:f8:11:fe:3c:c7:23:65:be:99:
cf:f2:97:09:56:19:da:cc:df:65:6e:b3:64:db:4c:
db:55:fc:56:ec:5e:4c:d2:83:2c:4d:f7:f2:95:bb:
85:0c:fd:0c:d1:08:f1:cb:96:f3:7a:83:1a:13:1b:
dc:07:45:e6:07:bf:2a:53:a2:f6:cd:5b:c4:9a:c2:
6f:7b:3c:e7:b6:20:6c:cf:bf:19:94:f3:c7:9c:80:
57:a0:fb:85:05:54:6e:66:4a:ae:31:62:aa:a3:d4:
51:37:b6:cc:b7:6e:9e:25:20:93:fa:92:c3:ba:f0:
ee:2d:f0:58:ca:08:7b:ac:1f:06:fa:2e:69:a7:fd:
98:e5:73:ea:04:f6:ed:21:8b:4e:c2:01:b3:c0:d9:
39:c7:80:c8:e7:ed:a4:23:96:33:ee:59:53:d1:39:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:65:A0:6A:78:6D:57:14:10:A2:9B:00:8B:AC:4B:5C:AE:AF:B5:3D
X509v3 Authority Key Identifier:
keyid:9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134302e302f32332d3234203d3e203532333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.151.140.0/23
Signature Algorithm: sha256WithRSAEncryption
83:b7:73:f5:85:b7:2e:2b:b6:04:1d:41:e0:b6:db:43:50:83:
ff:cb:4f:65:68:e5:8f:62:02:a5:3d:7b:39:ef:92:a2:5e:de:
46:68:dc:67:ea:f0:e4:b3:9f:24:be:b9:cf:43:07:73:87:db:
0c:25:0d:08:29:96:0b:dc:94:ce:4b:7b:d7:ad:75:97:02:56:
14:b5:3a:5c:df:be:27:21:9f:c0:e3:2d:7c:d9:ca:9e:3f:eb:
21:51:2b:71:77:fd:b1:a0:38:22:2e:03:09:f7:0a:9b:65:55:
e8:cd:a6:1a:5a:fc:27:5d:6f:52:7c:5b:58:ed:24:33:22:29:
c8:92:a4:b6:3e:59:d6:bf:ae:1f:91:e3:e4:a6:a6:c1:99:95:
fa:88:d3:64:e0:01:65:1e:dd:da:54:4c:17:aa:13:53:d0:f9:
ee:74:de:3b:e9:83:bb:ed:d9:ca:ac:59:d7:9d:0b:15:ca:34:
2a:da:5e:e3:b3:c3:5d:94:69:98:ca:3e:e5:7b:cb:47:3e:47:
1b:31:8d:f5:d0:03:f9:e0:f0:21:88:a3:f2:81:0a:50:ca:52:
19:8f:c3:69:16:96:32:7e:b2:43:e7:33:36:66:cf:c1:48:45:
04:17:d6:1c:dc:50:63:2b:b5:d8:e6:c3:fb:23:46:b5:b1:33:
70:f1:af:9c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULT5c7wDUXPR1GfGALBjGU/nedm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNEQzcwRDlCRjUyREMzNUYxQjk4OEJDOEY3RjZEQjYy
QTIwOEU1RjAeFw0yNDEyMzExNzIwMDBaFw0yNTEyMzAxNzI1MDBaMDMxMTAvBgNV
BAMTKEI4NjVBMDZBNzg2RDU3MTQxMEEyOUIwMDhCQUM0QjVDQUVBRkI1M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV0UJZu1p76uRcnKDa3C1Cs4ky
mLygXpRd+laltDs0PrGAWTL/sGZ4rvFGALNk8BPVRyzHEsvbSDoFw+1aTqr3I9SZ
Mb8tCdPwIIOzUQd8CXAFiurbScUDYFH0EaC/E/gR/jzHI2W+mc/ylwlWGdrM32Vu
s2TbTNtV/FbsXkzSgyxN9/KVu4UM/QzRCPHLlvN6gxoTG9wHReYHvypTovbNW8Sa
wm97POe2IGzPvxmU88ecgFeg+4UFVG5mSq4xYqqj1FE3tsy3bp4lIJP6ksO68O4t
8FjKCHusHwb6Lmmn/Zjlc+oE9u0hi07CAbPA2TnHgMjn7aQjljPuWVPROQu3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUuGWganhtVxQQopsAi6xLXK6vtT0wHwYDVR0j
BBgwFoAUnNxw2b9S3DXxuYi8j39ttiogjl8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDJDMDkxMTlCRkE2NDY1NDFDOEFEMjcxQjkzRjVFMEU3
NjI3NkUxMTA2MTIxRjU0OTAyODE2MTVBRjFEMjFGLzAvOUNEQzcwRDlCRjUyREMz
NUYxQjk4OEJDOEY3RjZEQjYyQTIwOEU1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Q0RDNzBEOUJGNTJEQzM1RjFC
OTg4QkM4RjdGNkRCNjJBMjA4RTVGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QyQzA5MTE5QkZBNjQ2NTQxQzhBRDI3MUI5M0Y1RTBFNzYyNzZFMTEw
NjEyMUY1NDkwMjgxNjE1QUYxRDIxRi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM0MzAy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMyMzMzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvpeM
MA0GCSqGSIb3DQEBCwUAA4IBAQCDt3P1hbcuK7YEHUHgtttDUIP/y09laOWPYgKl
PXs575KiXt5GaNxn6vDks58kvrnPQwdzh9sMJQ0IKZYL3JTOS3vXrXWXAlYUtTpc
374nIZ/A4y182cqeP+shUStxd/2xoDgiLgMJ9wqbZVXozaYaWvwnXW9SfFtY7SQz
IinIkqS2PlnWv64fkePkpqbBmZX6iNNk4AFlHt3aVEwXqhNT0PnudN476YO77dnK
rFnXnQsVyjQq2l7js8NdlGmYyj7le8tHPkcbMY310AP54PAhiKPygQpQylIZj8Np
FpYyfrJD5zM2Zs/BSEUEF9Yc3FBjK7XY5sP7I0a1sTNw8a+c
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:32 2025 by rpki-client