Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3235322e302f32342d3234203d3e203237383839.roa
File: 3139302e37362e3235322e302f32342d3234203d3e203237383839.roa (raw, json)
Hash identifier: aWzg4G4oUinGO+Z5Mpl3S3AJVsYM+ksWh4PSWDHBWII=
Subject key identifier: E3:4B:C5:DF:47:57:1C:78:0A:92:E9:D9:E1:5C:6B:61:C8:52:DB:92
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 4B1F410F3AFDBB98428866B8E14C0C75405A7CEF
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3235322e302f32342d3234203d3e203237383839.roa
Signing time: Tue 04 Feb 2025 18:55:40 +0000
ROA not before: Tue 04 Feb 2025 18:50:40 +0000
ROA not after: Tue 03 Feb 2026 18:55:40 +0000
asID: 27889
IP address blocks: 190.76.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:1f:41:0f:3a:fd:bb:98:42:88:66:b8:e1:4c:0c:75:40:5a:7c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Feb 4 18:50:40 2025 GMT
Not After : Feb 3 18:55:40 2026 GMT
Subject: CN=E34BC5DF47571C780A92E9D9E15C6B61C852DB92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:85:39:92:40:1d:8b:36:bd:f7:29:b4:a6:
ce:b8:59:76:bb:47:f3:c9:cf:4f:83:f0:c1:e9:f0:
7f:5a:b1:57:53:13:e6:7c:63:72:82:c9:f8:96:f7:
6b:35:00:1f:3f:e4:c0:b4:f2:5c:7f:c1:b8:cc:a8:
05:0f:b5:15:6c:32:39:ef:a0:d3:d8:22:cd:8a:51:
1d:6c:1e:61:89:66:8b:41:22:01:6f:13:ff:ef:f4:
03:7e:88:18:ef:4a:42:1b:f6:93:76:7e:5d:76:fc:
57:d4:d9:ec:73:2d:6a:ed:28:ac:36:ab:43:de:1f:
b1:53:53:02:be:cd:fe:48:de:02:eb:16:cc:31:48:
fd:97:61:c7:47:8d:39:2b:d9:fc:a5:09:ce:f7:00:
0b:95:62:9c:6a:8d:9a:5a:99:c5:fc:23:ad:4e:c3:
14:db:52:45:c4:23:ac:8e:31:9b:b1:3e:ac:2e:b9:
ad:6b:f0:e7:7b:1b:31:69:6a:b7:2d:29:75:31:6f:
00:30:ad:71:2b:f0:eb:65:2e:e7:b6:f5:a8:79:d8:
61:06:02:91:8d:cd:ea:a8:31:93:19:90:d4:f8:0b:
1c:41:a0:71:04:87:ac:55:4f:2c:78:a6:5a:7a:84:
11:53:42:a1:68:0b:06:0f:d3:17:30:ea:1e:a9:6e:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:C5:DF:47:57:1C:78:0A:92:E9:D9:E1:5C:6B:61:C8:52:DB:92
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3139302e37362e3235322e302f32342d3234203d3e203237383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.76.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5c:38:11:a6:15:30:b1:16:f6:e3:e5:ba:11:5d:6d:33:b7:
29:c4:7f:9d:b0:f7:54:ed:50:e3:68:9d:7c:f4:81:97:1c:98:
f7:4f:d4:ef:80:19:bd:87:05:15:0d:f7:fb:54:e9:4a:ed:0b:
e0:6b:00:b9:23:2e:24:dd:53:4f:40:01:af:58:b1:7f:e0:e5:
0a:ee:8d:ea:57:7f:e3:59:4d:4d:77:21:17:01:8d:f5:11:3d:
24:7b:38:6f:16:b1:70:8f:cf:b3:aa:3a:44:5a:32:94:0f:1c:
8a:e8:f4:72:4f:fe:92:f6:0a:a1:04:73:c9:d0:80:b3:af:12:
ac:d7:5c:8e:42:fe:a7:6e:02:f9:1b:e3:7a:c8:de:74:23:3e:
e1:5a:b1:ff:8a:93:b4:a7:de:eb:7a:f1:ef:62:5c:f5:73:76:
59:ab:0e:e3:a0:26:85:fa:5c:c4:01:8c:ee:60:66:8e:80:4b:
b8:c7:ee:5d:b5:0c:bf:6c:b4:f4:e3:e5:80:fe:b0:73:00:e8:
e7:96:26:b8:ac:a7:a1:db:4e:28:d8:31:5b:29:92:9c:13:46:
f6:f8:88:64:d4:69:7b:53:f2:f5:11:4f:65:80:47:ab:52:5c:
45:7b:be:b7:35:03:45:70:e0:d0:59:3f:1c:5b:85:47:6f:b2:
a5:07:46:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:07 2025 by rpki-client