Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e33362e302e302f31342d3234203d3e2038303438.roa
File: 3139302e33362e302e302f31342d3234203d3e2038303438.roa (raw, json)
Hash identifier: 0j+f8vvXedFcFjSI6MStk3B8rpO5ojIEQJvBhpf86Hk=
Subject key identifier: F3:E3:96:0F:6C:BC:C7:AE:0E:82:F1:87:99:4E:B5:FC:A2:A1:CB:EA
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 4A9B6F49891B11B90879DB565A560BEE349F2B5C
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e33362e302e302f31342d3234203d3e2038303438.roa
Signing time: Tue 04 Feb 2025 18:55:40 +0000
ROA not before: Tue 04 Feb 2025 18:50:40 +0000
ROA not after: Tue 03 Feb 2026 18:55:40 +0000
asID: 8048
IP address blocks: 190.36.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9b:6f:49:89:1b:11:b9:08:79:db:56:5a:56:0b:ee:34:9f:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Feb 4 18:50:40 2025 GMT
Not After : Feb 3 18:55:40 2026 GMT
Subject: CN=F3E3960F6CBCC7AE0E82F187994EB5FCA2A1CBEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:21:bc:c5:ec:0e:ee:61:0e:e1:c8:48:9d:
9c:f7:8c:1c:83:10:5d:6b:7c:18:5a:76:25:67:ff:
07:d8:45:33:f9:df:49:d5:2b:6f:b9:e5:3f:01:29:
81:b6:ff:d8:32:5f:8d:c5:69:a7:71:f7:8d:3b:17:
ee:bf:fb:15:f9:25:82:74:3d:74:fd:05:7d:6f:58:
a6:20:87:96:c2:56:5b:81:2c:93:57:56:5a:88:49:
2d:97:ad:fd:bc:da:f1:ec:3a:e6:6e:f1:a5:89:35:
64:c5:9d:2a:cc:19:68:79:db:a1:06:ed:36:ed:08:
76:f2:d6:3a:cb:2a:22:75:90:ca:f5:15:4b:fc:88:
29:93:2f:70:e5:32:d6:2e:67:22:5a:4e:91:0b:89:
05:a0:20:69:22:93:0e:5e:85:eb:6d:fa:08:ec:56:
6f:8b:d5:a9:f4:65:7a:2c:72:80:94:74:2c:ae:aa:
3c:60:cd:75:ba:a8:55:4e:d4:e3:6b:42:d3:fa:bd:
ef:b0:ce:56:aa:df:90:fb:f3:d5:4b:c8:80:b8:a2:
42:39:c3:a2:af:99:2d:a0:df:ea:a3:d2:57:80:e7:
5b:c7:6c:ef:38:23:7a:fa:68:e7:34:ad:7a:e5:80:
46:75:14:6e:17:e7:c6:d2:41:cd:cb:b0:a8:5f:4a:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:96:0F:6C:BC:C7:AE:0E:82:F1:87:99:4E:B5:FC:A2:A1:CB:EA
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e33362e302e302f31342d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.36.0.0/14
Signature Algorithm: sha256WithRSAEncryption
95:e7:04:eb:20:4c:35:3a:e0:77:0b:05:47:b8:7a:e6:f9:21:
34:5d:40:17:fd:4f:a6:58:cc:ac:9e:c2:4c:73:d4:2c:6a:95:
a2:15:69:54:0d:3e:3e:87:88:c8:89:f8:ca:5b:ca:45:21:81:
ff:27:2c:68:97:f5:d5:71:7c:3f:b6:1c:f5:4b:aa:02:d7:bb:
21:24:7c:04:dc:6c:bd:8b:3d:e1:02:02:99:88:e6:fe:f6:10:
56:39:02:31:cb:5f:62:e3:d7:90:0f:20:1b:63:65:47:34:28:
da:d1:c9:d5:5f:f7:d6:12:15:be:28:ff:da:ea:1e:da:b8:db:
65:4a:9d:a9:92:14:b9:d8:f0:22:ee:2e:14:2c:e0:2d:63:70:
96:11:c0:62:ad:83:fe:8b:cc:0e:64:7e:23:52:a7:be:cf:72:
fd:59:e1:94:22:94:66:ea:fd:17:cd:4c:46:4c:87:cf:dc:ef:
5b:55:0b:6e:df:b7:31:2b:4e:29:54:22:90:68:4c:55:7c:5a:
f6:7c:2e:f5:10:5d:5f:da:a4:23:9d:d5:dd:1a:05:ce:c8:7b:
1b:05:58:c5:0a:f9:56:4b:7b:68:6d:10:25:77:1f:14:c7:79:
ad:1e:2d:7c:fc:cf:a1:3b:4d:99:a7:02:bc:6c:88:40:bd:17:
7c:02:cf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:23 2025 by rpki-client