Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e3139382e302e302f31352d3234203d3e2038303438.roa
File: 3139302e3139382e302e302f31352d3234203d3e2038303438.roa (raw, json)
Hash identifier: KTlIcp85tl8pWwk3CX6hzA2b9fNICbF1dPvYHB4H8Ao=
Subject key identifier: 2B:DA:39:B8:75:A3:08:EF:5E:AD:A8:21:DA:D9:78:CB:00:35:E4:5D
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 221D45277390DC9B15531E106C0711E28012BF55
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e3139382e302e302f31352d3234203d3e2038303438.roa
Signing time: Tue 04 Feb 2025 18:55:34 +0000
ROA not before: Tue 04 Feb 2025 18:50:34 +0000
ROA not after: Tue 03 Feb 2026 18:55:34 +0000
asID: 8048
IP address blocks: 190.198.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1d:45:27:73:90:dc:9b:15:53:1e:10:6c:07:11:e2:80:12:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Feb 4 18:50:34 2025 GMT
Not After : Feb 3 18:55:34 2026 GMT
Subject: CN=2BDA39B875A308EF5EADA821DAD978CB0035E45D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:aa:f4:1c:03:63:ff:76:37:60:7e:2f:4c:
43:f0:db:06:bc:94:b9:e4:ce:38:85:71:18:96:19:
a6:ee:f7:3b:09:ef:16:da:fb:dc:b0:25:78:b9:bf:
f3:c3:ce:7d:47:3b:9f:a5:e8:47:bf:55:b9:13:da:
e8:8e:ab:0f:24:88:d2:0f:0d:42:7e:11:1e:77:b0:
fa:ef:ac:56:32:ae:84:b6:db:4b:19:8e:95:36:40:
ac:b4:d8:97:e4:12:42:0e:6b:7f:14:e8:02:ef:ee:
35:e7:ef:87:f2:f1:bb:f7:a1:08:19:78:de:50:10:
65:bb:58:87:56:2e:d2:8d:1c:3d:d5:69:cb:4c:d2:
72:b1:08:3a:3f:ff:a1:24:c8:af:1e:b6:e6:79:b7:
43:74:2d:e9:40:2b:5c:a1:a7:1c:de:2b:72:58:69:
84:ce:e5:5f:e5:b0:31:13:09:45:ca:7d:e3:84:61:
fe:de:c3:ac:39:a0:e8:45:20:09:f6:91:7c:a3:ec:
1c:c1:9b:20:cb:a1:7b:34:d5:88:c7:a8:57:83:90:
ea:f6:8c:42:70:81:ed:00:cd:50:6d:98:2e:3a:aa:
cb:8a:f5:5b:16:b8:dd:6d:9b:75:6c:52:b0:07:88:
43:0e:53:b9:74:51:13:56:fe:92:09:bd:98:d9:64:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:39:B8:75:A3:08:EF:5E:AD:A8:21:DA:D9:78:CB:00:35:E4:5D
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e3139382e302e302f31352d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.198.0.0/15
Signature Algorithm: sha256WithRSAEncryption
24:a7:0e:24:72:57:5f:c5:0b:d7:c0:8e:e2:1b:56:1b:9c:c5:
45:e9:1b:f2:e8:4a:a9:a1:f5:b7:20:4b:4a:b5:e0:33:de:bb:
35:a2:6b:24:59:ab:c0:03:23:e8:08:e1:6d:50:fd:de:67:b8:
6f:22:1a:18:6e:58:79:df:fc:7d:80:dc:19:e3:62:32:8e:c6:
8f:0b:b2:b7:26:c4:8d:0c:d5:43:4b:57:d3:a6:20:63:d3:30:
03:d0:9e:47:0a:00:19:7b:98:b9:03:97:dc:f4:b6:66:e8:27:
c9:89:cc:33:92:84:63:85:d7:6e:0e:67:6d:9f:04:f6:9c:73:
95:8c:a3:00:27:19:b2:50:07:c7:03:f4:83:52:30:58:19:59:
d2:07:27:30:82:b8:43:8d:98:cc:f0:c8:ab:76:c9:2f:a3:a1:
3a:47:71:5f:c1:1a:58:35:2f:81:ff:97:b8:9d:45:a2:77:a4:
1a:4b:45:8d:51:a6:7a:2d:8b:fb:e9:ea:4e:1c:6d:2a:28:d3:
96:da:fe:55:56:26:55:0a:13:20:30:69:2e:2c:1f:c6:43:0b:
fb:17:26:8e:4e:10:27:20:13:f6:24:48:f3:b1:6c:06:21:06:
e0:ee:ba:e4:fe:98:c7:d6:41:24:a2:9d:c6:3b:3b:32:25:22:
f4:e1:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:59 2025 by rpki-client