Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3139302e3231312e3232342e302f32302d3234203d3e20323632313539.roa
File: 3139302e3231312e3232342e302f32302d3234203d3e20323632313539.roa (raw, json)
Hash identifier: nI1yGP5VvbTujaGzn7ak+ax2MzXbjE0kZwmnxlHijdE=
Subject key identifier: 89:33:E5:31:DB:FD:B7:45:9A:94:4E:F8:05:17:20:DA:96:C9:65:25
Certificate issuer: /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial: 0A66397554ACC54B720A2BEA26EE91139AEBA80B
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3139302e3231312e3232342e302f32302d3234203d3e20323632313539.roa
Signing time: Tue 04 Feb 2025 17:58:50 +0000
ROA not before: Tue 04 Feb 2025 17:53:50 +0000
ROA not after: Tue 03 Feb 2026 17:58:50 +0000
asID: 262159
IP address blocks: 190.211.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:66:39:75:54:ac:c5:4b:72:0a:2b:ea:26:ee:91:13:9a:eb:a8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Validity
Not Before: Feb 4 17:53:50 2025 GMT
Not After : Feb 3 17:58:50 2026 GMT
Subject: CN=8933E531DBFDB7459A944EF8051720DA96C96525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:42:46:80:65:be:70:1e:22:bb:d5:12:d8:
5b:42:0a:91:58:d9:33:44:6b:65:8e:7b:d2:95:4d:
48:ed:d8:86:1a:45:2c:c5:67:57:c5:ba:a8:82:51:
0d:37:7d:c1:f3:52:c5:b5:bb:cb:ed:bd:1e:a4:03:
95:ff:76:e7:7c:42:03:95:a3:c5:19:90:64:ae:84:
e1:f1:7d:00:78:8f:d8:88:0c:8a:4e:60:a2:95:f1:
a2:50:79:74:d3:48:60:fe:3a:0d:3f:b4:2c:42:d3:
d2:76:01:53:68:78:97:89:02:70:bb:0d:2d:56:de:
ff:a7:e6:4e:c1:1d:17:10:83:fa:c4:91:0f:ea:24:
39:83:fc:e6:05:72:eb:80:4f:c7:6e:d4:77:5c:ac:
96:18:05:dd:ca:dd:60:13:95:c5:13:01:03:17:96:
25:fb:75:10:c5:8a:3e:19:ab:85:d0:48:55:74:31:
13:49:93:9d:18:37:fc:1d:8a:22:ae:d6:38:83:44:
10:2e:98:2c:c9:7e:8d:da:5f:e3:71:d5:90:73:24:
50:40:2f:f9:f0:9b:f6:e0:3d:38:15:60:fa:d3:93:
b2:f3:c2:e2:c7:75:95:09:3c:6a:4a:81:14:74:2e:
db:82:f0:72:69:f0:35:0f:10:f4:d9:28:ea:55:95:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:33:E5:31:DB:FD:B7:45:9A:94:4E:F8:05:17:20:DA:96:C9:65:25
X509v3 Authority Key Identifier:
keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3139302e3231312e3232342e302f32302d3234203d3e20323632313539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.211.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:1d:02:94:9d:05:0e:07:77:cc:82:b4:c8:b1:fa:3e:e2:58:
d9:02:64:70:c5:7b:a0:fe:2f:55:dc:31:5f:fb:12:e2:f7:50:
2a:41:a9:f7:0d:49:a5:83:e3:14:05:3d:bc:36:4d:d8:76:8b:
f0:2c:ac:f2:9b:42:d8:13:90:44:80:77:8c:b4:53:63:2d:e2:
79:3f:2d:10:3f:27:97:26:19:cc:d0:53:1e:dc:83:e7:b0:a6:
31:91:ed:80:d4:fa:fe:4e:48:a4:93:e8:a1:19:0b:c2:dc:00:
1a:c2:ee:00:31:0e:0b:eb:b3:ba:e2:cb:ba:20:ff:18:c3:c3:
d6:4f:86:6e:b5:40:19:bf:2f:d7:39:f6:43:7b:4f:36:7d:7c:
cb:01:ba:82:db:f6:6a:69:5c:bd:08:6d:6c:6c:dc:c8:b6:71:
27:24:2b:50:61:42:da:22:3c:2f:4b:fb:2c:68:df:2a:e9:5d:
ff:87:33:1d:77:36:f1:a3:3d:36:dc:46:fb:72:3d:69:77:74:
fb:9f:e6:25:f6:02:3b:d6:af:21:d8:e7:e3:2e:52:be:7e:0c:
aa:52:85:b5:9b:9c:29:1e:24:13:0f:17:1c:35:89:70:00:9b:
a0:f5:97:61:4c:49:ea:50:0d:5e:86:44:fd:53:88:86:31:ed:
96:7e:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:05 2025 by rpki-client