Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3232342e302f32302d3230203d3e203237383839.roa
File: 3139302e37362e3232342e302f32302d3230203d3e203237383839.roa (raw, json)
Hash identifier: hHzYHDTNLtEf20f92pxdrBubnlkqEbBsc8scd1M9/tY=
Subject key identifier: 61:70:C8:AE:DD:ED:5B:97:FC:9D:2E:C8:A7:7E:DD:C9:C6:7C:26:50
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 151FD2CD8C46ABA2EA1A554DFDEA33D153DB0367
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3232342e302f32302d3230203d3e203237383839.roa
Signing time: Tue 04 Feb 2025 18:55:41 +0000
ROA not before: Tue 04 Feb 2025 18:50:41 +0000
ROA not after: Tue 03 Feb 2026 18:55:41 +0000
asID: 27889
IP address blocks: 190.76.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1f:d2:cd:8c:46:ab:a2:ea:1a:55:4d:fd:ea:33:d1:53:db:03:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Feb 4 18:50:41 2025 GMT
Not After : Feb 3 18:55:41 2026 GMT
Subject: CN=6170C8AEDDED5B97FC9D2EC8A77EDDC9C67C2650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:e2:b2:2a:1a:33:35:c8:81:e8:29:ea:b1:
96:9d:a1:99:a7:a8:7c:61:ba:5a:8b:0e:95:e8:69:
b3:2a:83:aa:0e:ea:61:8a:9b:07:c0:c2:d2:a8:d7:
0a:55:ba:fc:c6:83:1a:1e:db:27:89:e2:3d:77:43:
ba:79:2a:5a:12:25:9a:d4:10:60:2c:6f:05:6c:01:
fc:c7:ce:e0:7b:8e:4f:e0:4b:fa:a5:5e:cb:f0:0e:
65:69:93:c6:5a:e7:09:7d:8a:87:ba:ac:d3:0a:ef:
1f:8e:1b:4f:1a:1c:39:2f:cb:69:8e:5d:e9:7c:a1:
36:a7:16:1b:48:90:59:15:d3:ca:6c:b1:d9:ad:4f:
90:b0:7b:98:bb:b0:ab:8f:b7:8a:ab:46:eb:c3:a5:
a8:20:15:f2:0b:c6:e3:f3:a0:9b:32:f9:63:6e:c5:
2e:d0:65:38:14:d1:fb:6d:49:94:b1:cd:5e:13:19:
29:6b:b9:76:ad:78:a3:bf:b2:f6:ad:43:7d:5c:0f:
a3:3d:84:49:a9:6a:4a:7b:dc:8a:6e:4a:ea:be:69:
68:b4:01:fe:7b:82:36:c8:a8:23:5a:12:30:37:28:
1d:52:6e:63:0e:5d:95:48:e5:8e:56:1e:83:2f:85:
1c:f0:ec:5b:ac:c8:2d:0e:f4:76:46:7f:93:e5:00:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:70:C8:AE:DD:ED:5B:97:FC:9D:2E:C8:A7:7E:DD:C9:C6:7C:26:50
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3232342e302f32302d3230203d3e203237383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.76.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:38:70:b6:9a:8d:c9:dc:8b:e9:45:1a:dd:ee:eb:1a:c7:49:
f9:75:17:58:21:1f:49:98:cb:93:28:77:08:18:16:8b:4f:48:
38:7c:53:90:7e:58:29:ab:23:ed:05:a4:12:a7:5a:6e:c3:47:
4b:d0:42:10:30:48:8f:e9:66:5b:cd:6e:2c:f1:94:9c:b1:c1:
33:53:1d:1d:97:54:90:6f:bf:6e:e5:ea:f2:36:ac:40:bc:a3:
b7:e4:14:33:1e:e6:2c:b5:42:df:90:43:a4:2e:98:07:03:c5:
d1:80:69:36:58:5c:bd:c0:21:0c:dd:df:eb:a1:5c:b6:85:f9:
10:b6:8f:bb:e3:c8:24:ef:af:29:ca:c5:e2:7e:b3:24:82:bc:
97:df:67:7b:91:2e:f4:4b:d8:44:0c:00:ae:40:c2:f0:56:7f:
b7:b1:36:b5:c8:33:b5:77:d4:d7:1c:84:14:98:fe:11:b0:4c:
92:84:5c:76:19:09:d9:52:0b:13:5d:df:9d:29:ad:32:80:cb:
50:62:a1:e3:01:b7:39:dd:7a:4e:fe:d1:82:ac:b9:2a:a0:e7:
a1:16:52:f0:3a:e2:cf:07:74:7d:f9:5f:6b:b4:51:77:ff:89:
14:3b:24:eb:4a:ab:91:12:d9:86:d6:5d:52:aa:09:ea:97:69:
4c:55:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:03 2025 by rpki-client