Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e302e302f32312d3234203d3e203233333833.roa
File: 3139302e342e302e302f32312d3234203d3e203233333833.roa (raw, json)
Hash identifier: piZ9VR1tNNYp7CnWcSJwTIbSfD/1zNDDrp7lDb2K7XY=
Subject key identifier: 95:57:98:67:B3:FA:FB:ED:AB:BA:21:C4:F3:01:C3:A2:3D:6F:DA:6F
Certificate issuer: /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial: 1B2C77F9B814CB0F856D6073C8AA45FCE9FF1AAB
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e302e302f32312d3234203d3e203233333833.roa
Signing time: Tue 04 Feb 2025 18:15:25 +0000
ROA not before: Tue 04 Feb 2025 18:10:25 +0000
ROA not after: Tue 03 Feb 2026 18:15:25 +0000
asID: 23383
IP address blocks: 190.4.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:2c:77:f9:b8:14:cb:0f:85:6d:60:73:c8:aa:45:fc:e9:ff:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Validity
Not Before: Feb 4 18:10:25 2025 GMT
Not After : Feb 3 18:15:25 2026 GMT
Subject: CN=95579867B3FAFBEDABBA21C4F301C3A23D6FDA6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:97:07:72:d0:b9:1b:2f:9c:df:50:19:9a:
a2:31:70:f9:fc:99:54:11:e8:bc:66:28:c2:5d:00:
46:ef:23:15:ae:26:59:e5:bc:6d:5e:f2:a3:d8:4b:
26:ec:19:15:ed:cd:29:fa:5e:38:50:45:ce:24:11:
5f:bc:50:e9:76:2a:05:e9:b7:43:4e:59:43:7e:3c:
52:5f:19:4f:60:1c:65:89:d5:ec:8a:b0:77:2b:96:
56:b4:a4:ef:0f:ad:e1:d8:71:d5:f8:36:36:b3:aa:
28:31:ff:ec:3f:b2:62:e6:18:f2:74:aa:8a:e7:8e:
d4:be:64:fa:3f:3c:7f:bb:a6:ac:12:6f:c3:c8:10:
62:97:11:25:fa:6b:c6:b9:0d:3a:96:66:85:26:48:
50:7c:d4:73:21:3a:e1:a2:5b:9b:7a:30:54:7d:c5:
1a:08:e4:f8:da:b4:f9:64:4f:a0:d1:cc:48:1d:d2:
87:a0:a5:51:08:b8:16:01:74:cb:50:5d:76:2b:f7:
dc:3c:dd:b9:72:63:85:23:4b:0d:d7:88:1b:85:76:
0f:ec:d0:21:82:b5:03:36:ba:28:a5:ac:c8:71:f0:
ce:5e:54:c9:14:9c:c9:41:e4:ac:7c:e1:03:56:b2:
c5:e0:2b:14:e0:6e:ac:d9:0d:f9:8e:6a:21:47:4f:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:98:67:B3:FA:FB:ED:AB:BA:21:C4:F3:01:C3:A2:3D:6F:DA:6F
X509v3 Authority Key Identifier:
keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e302e302f32312d3234203d3e203233333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.0.0/21
Signature Algorithm: sha256WithRSAEncryption
37:8e:f3:07:f7:6c:8c:ca:a7:56:09:e0:db:73:5a:2c:e1:74:
d7:58:53:b5:15:00:61:07:de:fe:72:8a:fc:91:05:bf:fb:e0:
95:e7:10:78:35:4d:91:b8:2b:b2:16:18:10:f1:f7:02:b7:81:
e1:6f:c5:af:01:89:e7:2e:dc:2b:c8:68:9c:f9:2e:e3:45:e7:
7a:e7:29:fa:e5:b7:59:61:41:2d:98:99:3b:fd:b0:70:23:76:
29:c5:b6:fa:3b:f5:d1:35:7f:87:fe:d4:8f:da:f1:47:f9:8f:
7b:0d:b7:b2:b1:c5:6f:69:59:c5:75:13:f3:69:2f:82:b2:8e:
5c:99:01:ea:b3:b3:a6:ac:a8:a4:02:8c:27:f8:38:b6:39:6e:
e9:39:e0:bf:5d:a7:d8:88:79:cf:d2:0e:6c:3d:a4:a6:e4:86:
a5:8f:9a:db:78:22:c6:29:fb:45:bf:f9:c7:93:bd:db:e0:d5:
58:70:a4:e6:30:62:43:d4:e5:0e:95:43:50:ad:2d:7f:52:0c:
c4:de:c7:2d:2c:10:93:ed:35:a7:59:a0:f2:b8:d1:48:ee:dc:
8c:c1:a6:f7:78:73:30:f7:62:3a:66:3d:08:09:50:3f:d0:29:
7a:46:3b:72:35:b1:bf:39:ad:d7:e0:18:e7:73:62:00:a8:ed:
57:5d:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:48 2025 by rpki-client