Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/3139302e3131312e3132302e302f32322d3234203d3e203532323835.roa
File: 3139302e3131312e3132302e302f32322d3234203d3e203532323835.roa (raw, json)
Hash identifier: HB7H/aUpCb6VJI+m0uc86fCesA3jj5hymcsrxxNBuas=
Subject key identifier: 85:62:31:3F:09:9C:8C:1F:01:44:0B:51:3D:A6:03:B9:C3:BF:9E:76
Certificate issuer: /CN=B64FACE36B310C0C008A1D26B030764FFFE873D3
Certificate serial: 7071705E3433BC5C866C40D4330F4A98C3FAE2F8
Authority key identifier: B6:4F:AC:E3:6B:31:0C:0C:00:8A:1D:26:B0:30:76:4F:FF:E8:73:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/3139302e3131312e3132302e302f32322d3234203d3e203532323835.roa
Signing time: Tue 04 Feb 2025 18:02:06 +0000
ROA not before: Tue 04 Feb 2025 17:57:06 +0000
ROA not after: Tue 03 Feb 2026 18:02:06 +0000
asID: 52285
IP address blocks: 190.111.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:71:70:5e:34:33:bc:5c:86:6c:40:d4:33:0f:4a:98:c3:fa:e2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B64FACE36B310C0C008A1D26B030764FFFE873D3
Validity
Not Before: Feb 4 17:57:06 2025 GMT
Not After : Feb 3 18:02:06 2026 GMT
Subject: CN=8562313F099C8C1F01440B513DA603B9C3BF9E76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:16:9a:52:25:19:d3:9d:2f:ca:e6:37:d5:
12:67:69:de:1d:56:6b:d6:32:aa:c6:4d:6c:b3:a6:
be:e4:0f:44:20:e5:b0:ce:78:4d:9b:1c:80:cc:40:
67:ea:13:56:e4:c9:b2:4b:65:9f:6b:7b:41:91:67:
4f:dc:e0:a6:a5:23:60:e8:84:21:27:1f:d1:c6:5d:
3f:6f:35:5e:a8:39:32:3d:df:a9:92:e1:af:69:95:
54:5f:80:fa:87:c8:7b:6e:d6:a7:6e:23:27:01:bd:
70:74:68:ca:7e:58:9b:e1:2c:8b:86:14:04:8c:40:
48:ba:7a:90:11:13:da:73:a0:38:0d:d7:84:d7:d8:
99:1f:d6:71:db:c3:cd:45:d8:65:eb:cb:da:28:a9:
03:42:01:4d:e9:35:a4:ee:2c:bd:d7:b2:17:ad:1a:
e4:08:86:90:ab:7c:3e:90:0f:0e:14:9b:41:9d:c4:
2a:13:99:cb:10:4d:ae:84:af:d1:0a:6c:e8:3e:f4:
06:48:c6:22:0f:46:ce:f6:8c:7f:2e:d2:92:e8:fc:
6c:6e:fc:6f:04:9e:a6:bb:5d:82:73:9e:39:47:47:
9e:b6:bf:c9:f3:78:52:9d:6e:fb:b4:ee:9b:dd:19:
5f:d5:d2:a0:3e:79:35:11:c2:8d:f2:93:29:3c:9d:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:62:31:3F:09:9C:8C:1F:01:44:0B:51:3D:A6:03:B9:C3:BF:9E:76
X509v3 Authority Key Identifier:
keyid:B6:4F:AC:E3:6B:31:0C:0C:00:8A:1D:26:B0:30:76:4F:FF:E8:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/3139302e3131312e3132302e302f32322d3234203d3e203532323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.111.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:56:77:e7:3e:46:ca:46:1a:46:99:3c:33:ba:73:90:52:fc:
49:d2:0d:41:f8:30:0b:ec:96:e6:07:db:b1:54:43:b6:19:9b:
eb:da:1a:ae:15:58:83:ea:50:af:cd:82:30:25:2e:f8:a5:76:
91:26:0f:18:9e:e1:3e:6c:0b:b5:f8:8d:d2:3c:ce:c6:dd:20:
d2:c9:d9:e8:20:b5:93:82:41:07:55:a5:44:22:0b:25:f4:f0:
25:23:da:61:61:d9:2b:14:a5:ad:0c:db:b9:9a:8c:36:e8:f2:
56:50:12:ab:2c:2c:90:d0:26:e8:28:12:11:29:89:d7:a8:40:
a2:d2:fa:9d:43:80:db:21:d7:b0:f4:f7:08:cc:ec:aa:de:19:
f7:50:c1:2f:21:74:af:0e:76:58:5e:b4:3a:8c:67:44:02:a7:
84:35:73:8c:f7:1c:a9:bd:7e:ab:bf:43:46:b5:3c:0c:73:84:
0e:f0:d7:93:21:8e:f4:82:29:6b:67:e6:1b:60:99:9f:65:d5:
a2:fd:01:24:14:6a:ab:cb:82:65:9e:30:5f:8c:47:e6:13:79:
27:91:f6:74:6a:05:f1:90:82:6f:af:34:b9:59:83:22:d2:26:
03:44:6e:a2:8c:61:aa:94:87:84:7f:0f:ac:d1:2f:65:54:18:
de:fa:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:56:00 2025 by rpki-client