Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3139302e382e3136382e302f32322d3234203d3e20323639373530.roa
File: 3139302e382e3136382e302f32322d3234203d3e20323639373530.roa (raw, json)
Hash identifier: UtWNbpcaOx4dXnwvc8FOMHSTl5Fy6LtCAa7z45s6mPk=
Subject key identifier: FD:86:8D:46:21:24:E8:A2:03:26:8B:C6:9E:72:2B:85:99:31:0F:DC
Certificate issuer: /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial: 7F274288538EB27C17BFFC7D2B124D6B52E17437
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3139302e382e3136382e302f32322d3234203d3e20323639373530.roa
Signing time: Tue 04 Feb 2025 18:49:18 +0000
ROA not before: Tue 04 Feb 2025 18:44:18 +0000
ROA not after: Tue 03 Feb 2026 18:49:18 +0000
asID: 269750
IP address blocks: 190.8.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:27:42:88:53:8e:b2:7c:17:bf:fc:7d:2b:12:4d:6b:52:e1:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Validity
Not Before: Feb 4 18:44:18 2025 GMT
Not After : Feb 3 18:49:18 2026 GMT
Subject: CN=FD868D462124E8A203268BC69E722B8599310FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:5a:96:de:29:b1:88:3c:1a:9a:42:31:7a:
09:31:d1:0c:de:0b:fd:41:ce:73:bf:a6:57:44:f2:
4a:15:c2:2d:2b:66:10:21:f2:70:7a:82:12:bb:0c:
58:c4:2f:23:6c:e6:3b:b4:b9:9d:78:f5:36:db:a6:
47:c9:38:fb:f2:f3:4e:4c:4b:8b:f9:f7:fd:00:12:
94:61:38:77:9c:0d:7b:87:bc:48:95:f0:5e:4b:61:
b7:ed:5f:8f:03:4a:15:47:54:62:e1:0d:7b:cd:61:
97:98:65:e4:5f:79:7c:73:29:1f:2c:43:e6:e6:66:
71:80:d8:21:5d:7e:c6:db:65:04:14:03:a8:b4:ad:
0c:29:be:2a:f6:64:2e:6a:fa:56:09:6a:42:79:12:
c8:91:5f:c7:bb:d4:e6:a2:3c:e1:fd:af:d8:1c:94:
c5:7b:56:61:be:c5:e5:50:6d:47:da:06:12:0a:50:
c8:2d:8f:46:f3:9e:75:15:70:fd:dd:9b:1c:7e:f3:
34:fd:c6:a2:d9:ab:23:5d:dc:86:10:f7:81:91:61:
6b:e5:34:5c:e3:ce:4e:48:11:d8:a5:b0:18:4f:e3:
f1:de:71:70:60:5b:12:a5:0b:7b:c9:bf:10:67:c2:
b4:fc:6c:28:2f:38:79:5e:b2:a2:ec:e2:08:77:46:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:8D:46:21:24:E8:A2:03:26:8B:C6:9E:72:2B:85:99:31:0F:DC
X509v3 Authority Key Identifier:
keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3139302e382e3136382e302f32322d3234203d3e20323639373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.8.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:00:c4:79:2e:a1:42:7d:13:66:2c:8f:d1:cc:5f:c7:88:2a:
52:b5:04:77:78:a0:b9:37:59:ce:3f:67:d2:ad:65:2b:1a:59:
dd:e5:e3:5e:fb:35:33:ba:27:86:56:c7:59:95:72:c8:3f:80:
e5:4f:cc:72:72:a2:af:6b:a3:e1:6c:cb:b6:ea:34:77:39:b7:
5b:f1:1f:5d:ae:b4:7a:0c:87:72:d5:92:1a:0f:a7:7b:48:87:
92:e1:0f:98:44:da:e7:fa:81:db:c4:e8:d3:04:70:5c:be:b6:
9d:18:6a:7a:13:04:47:13:1b:41:0c:56:cd:f5:aa:5b:21:b4:
ef:19:9b:6c:55:60:b4:ad:ed:cd:a5:c7:a5:ad:7e:44:9f:f7:
74:96:10:31:ae:0d:ae:fb:a8:78:fa:19:c6:11:e8:fb:65:3c:
ed:04:de:09:5d:00:19:be:2e:2c:51:d3:fa:08:79:1c:4f:77:
df:a5:6f:7a:95:48:27:51:08:71:e8:8a:bd:b6:e6:a7:9e:c5:
43:1f:39:d2:2b:6e:bf:90:54:fe:f7:f4:86:61:40:57:56:1b:
17:ba:63:86:02:8c:be:3b:f9:a6:9b:e6:51:39:14:08:58:ed:
c9:2c:94:dc:c8:4e:b8:c2:c4:e7:b2:f3:49:c0:5d:f0:89:fe:
98:83:3d:6f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfydCiFOOsnwXv/x9KxJNa1LhdDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFFRkEzMkU5QjA3N0YwMDQ1RjY2QThDNkIyRUU1ODIw
RkFCMDRDNTAeFw0yNTAyMDQxODQ0MThaFw0yNjAyMDMxODQ5MThaMDMxMTAvBgNV
BAMTKEZEODY4RDQ2MjEyNEU4QTIwMzI2OEJDNjlFNzIyQjg1OTkzMTBGREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NFqW3imxiDwamkIxegkx0Qze
C/1BznO/pldE8koVwi0rZhAh8nB6ghK7DFjELyNs5ju0uZ149TbbpkfJOPvy805M
S4v59/0AEpRhOHecDXuHvEiV8F5LYbftX48DShVHVGLhDXvNYZeYZeRfeXxzKR8s
Q+bmZnGA2CFdfsbbZQQUA6i0rQwpvir2ZC5q+lYJakJ5EsiRX8e71OaiPOH9r9gc
lMV7VmG+xeVQbUfaBhIKUMgtj0bznnUVcP3dmxx+8zT9xqLZqyNd3IYQ94GRYWvl
NFzjzk5IEdilsBhP4/HecXBgWxKlC3vJvxBnwrT8bCgvOHlesqLs4gh3RhZdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/YaNRiEk6KIDJovGnnIrhZkxD9wwHwYDVR0j
BBgwFoAUqu+jLpsHfwBF9mqMay7lgg+rBMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80REJCRTFBNTZGRkQ2MUFGMURGMjZBM0Y0RjQwNzlCOEE1
NjExRUM1MTE1QkJEQzc5NTcwMURDMTQ0NTU4MkJFLzAvQUFFRkEzMkU5QjA3N0Yw
MDQ1RjY2QThDNkIyRUU1ODIwRkFCMDRDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUVGQTMyRTlCMDc3RjAwNDVG
NjZBOEM2QjJFRTU4MjBGQUIwNEM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNERCQkUxQTU2RkZENjFBRjFERjI2QTNGNEY0MDc5QjhBNTYxMUVDNTEx
NUJCREM3OTU3MDFEQzE0NDU1ODJCRS8wLzMxMzkzMDJlMzgyZTMxMzYzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM3MzUzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr4IqDAN
BgkqhkiG9w0BAQsFAAOCAQEACgDEeS6hQn0TZiyP0cxfx4gqUrUEd3iguTdZzj9n
0q1lKxpZ3eXjXvs1M7onhlbHWZVyyD+A5U/McnKir2uj4WzLtuo0dzm3W/EfXa60
egyHctWSGg+ne0iHkuEPmETa5/qB28To0wRwXL62nRhqehMERxMbQQxWzfWqWyG0
7xmbbFVgtK3tzaXHpa1+RJ/3dJYQMa4NrvuoePoZxhHo+2U87QTeCV0AGb4uLFHT
+gh5HE9336VvepVIJ1EIceiKvbbmp57FQx850ituv5BU/vf0hmFAV1YbF7pjhgKM
vjv5ppvmUTkUCFjtySyU3MhOuMLE57LzScBd8In+mIM9bw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:09 2025 by rpki-client