Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37322e302e302f31332d3234203d3e2038303438.roa
File: 3139302e37322e302e302f31332d3234203d3e2038303438.roa (raw, json)
Hash identifier: f4toMcmjK3clsEgGxLz5tX0mveoVqgqt9PxFpbrYR+w=
Subject key identifier: C9:EF:5C:A2:97:3D:D9:12:03:72:8E:A2:18:0A:8F:40:1D:3A:84:BE
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 3BB1659B585C312AC27B2F8B8478744139490FB9
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37322e302e302f31332d3234203d3e2038303438.roa
Signing time: Tue 04 Feb 2025 18:55:36 +0000
ROA not before: Tue 04 Feb 2025 18:50:36 +0000
ROA not after: Tue 03 Feb 2026 18:55:36 +0000
asID: 8048
IP address blocks: 190.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b1:65:9b:58:5c:31:2a:c2:7b:2f:8b:84:78:74:41:39:49:0f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Feb 4 18:50:36 2025 GMT
Not After : Feb 3 18:55:36 2026 GMT
Subject: CN=C9EF5CA2973DD91203728EA2180A8F401D3A84BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:b3:e1:74:9a:96:16:0b:df:fd:fb:3c:99:
43:b7:ec:2d:36:a7:73:8a:a7:4f:ee:46:82:cb:2a:
0c:30:81:48:61:3d:75:91:4f:77:97:df:8f:3c:f4:
32:e1:30:49:b8:09:c6:f1:63:2e:69:f4:a4:b7:7e:
3c:34:e2:08:ec:f3:84:bf:cd:7a:26:73:50:b7:53:
48:54:dd:71:03:21:b5:75:06:a6:13:e7:6f:43:7b:
90:a4:21:ca:db:ae:82:ae:e7:99:82:73:66:f7:d1:
a4:58:ee:d9:a6:28:c9:cb:e1:0b:ea:83:c6:dc:d8:
02:44:3e:0a:e2:46:70:1d:bf:41:58:86:30:77:21:
d6:ab:1b:2a:34:cc:c6:20:34:8f:71:b6:89:20:3c:
d5:ca:7f:3e:67:81:69:79:86:75:13:a9:65:4e:84:
99:78:15:e7:60:52:a9:84:a0:41:f1:21:5e:3f:d5:
4f:d7:b3:9e:f0:4c:57:60:de:27:55:f3:7e:b7:67:
28:64:8a:5f:fc:49:e5:92:c9:75:d1:3b:7c:9c:03:
b6:cb:b6:c1:55:de:ec:58:7f:50:1e:9d:21:95:00:
d7:dc:c9:1a:22:69:86:23:28:b1:f8:70:93:f3:fd:
1a:a2:c8:cb:fd:6c:a9:ce:7a:73:82:b1:1a:2d:26:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EF:5C:A2:97:3D:D9:12:03:72:8E:A2:18:0A:8F:40:1D:3A:84:BE
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37322e302e302f31332d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.72.0.0/13
Signature Algorithm: sha256WithRSAEncryption
99:a7:45:a4:48:44:2d:54:65:96:9a:37:c9:df:bd:cc:4e:ca:
93:ff:c3:cd:4f:da:50:4c:86:fe:27:8d:cd:da:41:c7:44:00:
2e:9b:fa:64:40:9e:e8:56:20:6b:a4:d1:98:fd:65:b7:8c:e8:
94:0a:5f:e7:c6:7f:bb:1a:9f:5a:0b:55:08:75:b8:bf:98:c4:
c6:14:a5:4b:ea:55:d5:50:47:81:84:97:7b:d1:33:e2:52:05:
38:70:54:95:bc:6c:0e:4d:c3:ab:f0:9a:1d:5d:9d:e8:e0:58:
c2:9a:99:31:fc:46:aa:5a:89:a0:e5:44:53:db:0f:9c:cf:b2:
24:22:2f:ab:bf:0d:28:1a:b2:4b:3d:4f:7f:bb:f2:b1:a2:64:
d6:03:12:8c:14:97:50:1a:a1:6c:1b:29:09:5f:c7:05:dc:26:
dc:d5:14:de:f3:15:76:c6:5d:a4:b8:01:65:93:f8:83:23:c9:
3a:87:6a:4d:24:24:cb:40:23:b5:d0:b5:d4:94:3f:78:ac:ae:
6c:ad:6c:b2:f5:b5:2c:e5:2e:6d:bd:f3:6d:74:e9:ce:69:27:
03:b2:35:5c:95:83:7e:9c:6b:16:ae:90:64:2f:eb:bd:bc:dd:
a7:7e:d7:0e:d0:3d:30:16:23:5e:02:c3:e4:05:a3:62:8b:bd:
85:ae:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:04 2025 by rpki-client