Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137322e302f32322d3234203d3e203237383435.roa
File: 3139302e362e3137322e302f32322d3234203d3e203237383435.roa (raw, json)
Hash identifier: Q7bml/8+wn0E/sMSqSu6ixHYiRKXE9Zx1WvGHJunMic=
Subject key identifier: D9:9A:34:F8:B7:4C:B1:6F:6F:DE:EF:10:70:69:E9:74:83:D9:07:86
Certificate issuer: /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial: 0639F18C8D6C0F55D109FF56A5A6C502FD1BE6BC
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137322e302f32322d3234203d3e203237383435.roa
Signing time: Tue 04 Feb 2025 18:51:42 +0000
ROA not before: Tue 04 Feb 2025 18:46:42 +0000
ROA not after: Tue 03 Feb 2026 18:51:42 +0000
asID: 27845
IP address blocks: 190.6.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:39:f1:8c:8d:6c:0f:55:d1:09:ff:56:a5:a6:c5:02:fd:1b:e6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Validity
Not Before: Feb 4 18:46:42 2025 GMT
Not After : Feb 3 18:51:42 2026 GMT
Subject: CN=D99A34F8B74CB16F6FDEEF107069E97483D90786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:11:06:d6:48:8b:6c:ba:d1:1c:49:a5:45:
5d:32:d4:4d:3f:46:de:ea:0f:3f:a1:59:e1:7b:a8:
9d:57:2c:13:03:fa:4e:c9:ee:00:cb:43:08:3e:54:
d1:4d:8a:97:06:11:17:51:56:60:ea:00:d1:bb:bf:
73:e6:02:36:9f:8d:fe:1f:2c:5e:1e:c3:c9:16:c4:
d3:89:f2:ff:d9:73:b6:ef:f1:c8:ce:a0:32:78:94:
93:e3:43:ba:d4:51:3e:80:41:3c:95:dc:d3:62:05:
97:95:26:dd:9e:cb:0b:06:5d:09:33:e8:f6:3b:3d:
6c:3a:0e:a3:06:5d:06:c9:32:a9:7b:10:7f:eb:27:
c5:81:33:f0:20:72:fc:36:60:c2:ea:1b:cf:1d:49:
5a:70:a6:d8:77:be:37:63:9e:6e:e2:2f:c1:8b:e1:
ea:42:87:e2:b1:53:3b:40:96:27:c4:b7:77:e6:26:
8e:c9:1f:25:94:32:8c:4d:a2:74:9c:50:16:f8:3e:
eb:61:5b:a8:91:4b:74:d4:56:38:ba:7b:25:4f:9a:
03:bb:71:36:22:5a:62:73:c3:d7:ee:47:a5:9e:9f:
2d:78:f1:bf:b5:2c:6e:87:70:a5:af:96:ca:b8:7a:
9f:9a:12:2b:84:93:c1:23:53:bd:c0:2d:5e:a3:55:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:34:F8:B7:4C:B1:6F:6F:DE:EF:10:70:69:E9:74:83:D9:07:86
X509v3 Authority Key Identifier:
keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3137322e302f32322d3234203d3e203237383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.6.172.0/22
Signature Algorithm: sha256WithRSAEncryption
64:10:05:80:9c:7e:f5:af:ec:a9:bd:92:34:b0:14:8c:32:a0:
f5:59:7c:21:c7:b1:28:a5:61:1e:75:19:a6:df:f8:7a:7d:8d:
29:77:86:8f:f9:80:aa:d4:f5:1e:f4:be:50:67:5f:48:06:a7:
e7:35:dc:a3:50:af:90:bd:d1:9c:b7:8f:00:ad:1c:77:db:74:
5f:cf:70:73:c1:39:e7:15:e2:58:75:c3:6d:8e:ac:ec:32:fd:
10:1c:0d:cd:e4:08:2c:37:4a:8d:95:04:05:cc:62:50:d4:0c:
54:95:31:3e:66:dc:cd:de:79:c5:bd:a9:aa:af:52:37:6c:7c:
c4:aa:c3:19:4a:c6:94:39:b8:b1:95:72:3c:ba:c6:17:cb:07:
f5:d3:93:11:53:4d:8e:0a:08:da:98:70:3f:11:f7:18:cb:b9:
c6:8c:c1:c6:fb:84:2d:0f:09:27:30:c3:d8:22:53:d8:b3:81:
6d:5d:6c:91:58:98:d1:20:23:c1:9e:14:fe:58:3d:81:7f:21:
79:64:aa:88:ed:40:9b:37:ef:f5:42:48:88:a9:6d:03:57:b5:
0b:f4:bd:5b:27:6d:da:6a:51:fe:c3:aa:6b:75:0d:14:36:fd:
84:8a:9d:e3:dd:27:b3:29:a3:3b:74:b1:b9:8e:5c:78:60:61:
3f:5c:63:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:54 2025 by rpki-client