Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131372e302f32342d3234203d3e20323632313832.roa
File: 3139302e35322e3131372e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier: T53nn0fZWWiZC/mnZlNhJxAsoe42+ChIX0GmMSuuCCc=
Subject key identifier: A0:3E:6B:4C:E9:EA:59:7D:FC:03:CE:50:D7:08:8E:27:C8:C0:E1:FB
Certificate issuer: /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial: 1A401664606A6E71F599D3F399DEF15CABE5FE56
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131372e302f32342d3234203d3e20323632313832.roa
Signing time: Mon 10 Feb 2025 20:09:32 +0000
ROA not before: Mon 10 Feb 2025 20:04:32 +0000
ROA not after: Mon 09 Feb 2026 20:09:32 +0000
asID: 262182
IP address blocks: 190.52.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:40:16:64:60:6a:6e:71:f5:99:d3:f3:99:de:f1:5c:ab:e5:fe:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Validity
Not Before: Feb 10 20:04:32 2025 GMT
Not After : Feb 9 20:09:32 2026 GMT
Subject: CN=A03E6B4CE9EA597DFC03CE50D7088E27C8C0E1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:de:ba:5a:cd:50:92:20:7a:99:10:73:ef:
7a:fd:66:a4:e6:bd:da:62:85:bc:c8:e9:6b:ae:7b:
76:64:16:f0:b0:96:17:0b:af:f2:39:72:12:80:53:
2f:77:da:e0:22:8d:19:ba:f8:71:b1:44:a7:f5:fa:
a6:30:9b:cb:3a:c9:c6:db:7f:78:53:21:36:d7:9d:
52:7c:41:7b:c8:78:9a:e1:80:4c:78:89:88:0a:9e:
fa:23:6a:93:24:63:f6:69:63:53:7b:47:66:5b:a3:
68:e8:55:3a:c9:cb:ae:9d:3f:c5:b0:62:ea:b3:28:
0c:18:ee:7f:d3:dc:76:53:df:af:40:16:b0:e4:89:
51:61:82:ef:99:24:28:78:5d:cb:43:8a:ee:d6:aa:
67:30:e1:cc:49:29:53:89:90:aa:f4:5e:28:6f:91:
3a:15:82:ed:48:de:da:2a:80:f1:5d:31:54:f8:cc:
1e:39:8c:d0:20:80:e3:f4:3a:83:2c:f4:a4:ba:fd:
52:cf:3b:9e:65:4d:e4:e2:22:42:62:4c:58:cc:2f:
cb:04:b8:44:b5:57:90:ce:1b:46:be:df:48:f2:e1:
46:f2:3b:37:ce:16:47:95:cc:c7:6b:4f:e6:12:f5:
f2:8d:03:0c:bf:03:5c:af:df:e3:2c:a9:7f:92:67:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3E:6B:4C:E9:EA:59:7D:FC:03:CE:50:D7:08:8E:27:C8:C0:E1:FB
X509v3 Authority Key Identifier:
keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131372e302f32342d3234203d3e20323632313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.117.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:73:38:23:d7:a4:b6:31:c7:e5:3f:3a:62:c4:bf:cc:97:7b:
3f:8e:4d:f4:b1:fe:13:bf:5c:7d:5e:99:91:a2:46:fb:7e:21:
83:95:a3:d9:56:9d:0a:f6:55:b7:a6:04:71:14:c5:01:87:05:
72:0e:b9:1b:de:9d:9d:be:6c:e3:d6:de:01:74:88:86:93:4b:
16:0a:54:b5:3c:28:d5:60:62:ce:4f:5c:e3:56:dc:43:91:da:
a0:10:ee:76:4a:d3:0e:f5:1d:c8:a2:b4:e2:47:22:1f:b5:36:
28:a5:04:78:3b:70:5e:bd:d2:06:fd:4b:be:ca:ba:09:8f:8f:
16:25:07:59:5d:be:da:fe:14:5a:bf:26:29:d8:20:ca:4f:49:
8f:50:92:59:fa:ce:1c:82:08:c7:0a:ad:c7:ff:20:06:63:9c:
8d:b6:b5:68:c7:de:aa:3b:52:47:96:b8:44:f1:80:6c:d0:4b:
9b:8b:c8:44:b4:21:db:e9:ce:4c:1f:03:f5:38:43:20:55:17:
9d:f4:d2:e6:c3:02:d1:49:05:2d:d2:ec:fd:28:60:1f:03:dd:
6d:88:25:a0:2b:c9:14:ed:97:74:62:a0:21:c5:d7:86:d7:4b:
73:da:66:52:80:18:7b:39:72:a7:37:1e:29:62:fd:74:75:4c:
d0:2d:3b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:08 2025 by rpki-client