Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31312e302f32342d3234203d3e203233333833.roa
File: 3139302e342e31312e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier: NGgdkaMsv/4xxExFD1kbWs9VUSDcgzT+vmoazstl/08=
Subject key identifier: BB:EC:97:8C:76:51:20:AE:D8:7B:3A:EA:5B:B1:EF:C0:AA:64:EE:41
Certificate issuer: /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial: 3215EB7BD6AF7F6D11BB499977E4CFC7A9C1317A
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31312e302f32342d3234203d3e203233333833.roa
Signing time: Tue 04 Feb 2025 18:15:24 +0000
ROA not before: Tue 04 Feb 2025 18:10:24 +0000
ROA not after: Tue 03 Feb 2026 18:15:24 +0000
asID: 23383
IP address blocks: 190.4.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:15:eb:7b:d6:af:7f:6d:11:bb:49:99:77:e4:cf:c7:a9:c1:31:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Validity
Not Before: Feb 4 18:10:24 2025 GMT
Not After : Feb 3 18:15:24 2026 GMT
Subject: CN=BBEC978C765120AED87B3AEA5BB1EFC0AA64EE41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:3d:09:76:91:f6:0e:1d:d5:59:c7:33:38:
e8:5f:95:db:f9:8f:c6:c5:18:50:02:c7:28:33:aa:
74:da:4c:8b:ae:e2:b3:73:9e:61:03:d7:8f:90:37:
20:d0:50:ae:1d:2f:34:7c:3c:e2:05:34:40:a0:64:
a0:87:d2:18:29:e9:41:ce:10:17:75:68:b2:40:93:
55:9e:5d:42:fa:22:80:68:5d:a1:fa:91:84:fc:82:
a1:68:08:88:11:84:b5:75:d4:8d:09:5b:5b:3b:62:
a0:17:ad:c3:41:b9:11:b4:fb:a2:56:ca:27:ac:cd:
be:a3:de:3d:a0:d8:75:fb:4a:9d:4b:67:ac:91:90:
4c:63:70:80:94:e2:5a:fe:2a:8f:93:77:40:45:ab:
4e:6c:e1:c9:9c:80:fc:d7:aa:d8:4a:e7:9a:06:ba:
5f:84:20:09:7e:da:87:ee:a2:ac:3f:14:2b:34:a0:
86:3f:71:15:ff:b7:d8:b1:fb:93:d4:4a:29:f3:69:
9e:87:8b:2d:1b:70:84:6d:19:87:37:e0:40:42:d2:
ab:d6:8b:9b:79:b3:d0:91:38:01:3c:2f:96:e0:8b:
3d:e1:a8:c3:30:0c:a2:b0:44:cb:0e:9b:c8:55:c0:
30:9a:8f:8a:ad:ca:36:85:ea:04:15:fb:a9:d0:5d:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:97:8C:76:51:20:AE:D8:7B:3A:EA:5B:B1:EF:C0:AA:64:EE:41
X509v3 Authority Key Identifier:
keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31312e302f32342d3234203d3e203233333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.11.0/24
Signature Algorithm: sha256WithRSAEncryption
77:95:d1:7e:56:a4:0a:58:1d:8d:73:3e:0c:5c:df:6a:09:7b:
76:cc:d8:98:f6:14:22:92:84:c1:cb:2a:3b:f5:18:43:04:02:
5e:36:e5:15:dd:a5:ca:63:51:b4:ee:c5:12:f8:32:f9:2d:e6:
7a:06:be:7e:96:13:7c:b1:90:be:df:1b:a6:c1:ab:44:f5:68:
c6:1d:39:1a:2a:93:29:bf:f7:93:48:f0:ed:f1:f7:8d:df:c2:
eb:62:c1:4d:20:3e:13:64:32:3e:82:f3:9a:59:45:e9:d0:c1:
32:78:77:62:01:19:97:e7:c9:e2:ba:c4:b8:ff:25:24:d6:78:
6e:a2:aa:3f:18:3a:a9:b1:6d:d2:05:88:21:74:a4:f8:7b:40:
95:6f:76:e7:5c:e9:15:8b:ec:fd:58:8f:97:8c:c5:31:88:16:
84:80:1d:99:a8:f7:76:48:43:5a:e0:fb:42:0f:81:5b:0f:48:
c9:cc:3a:a7:6b:d9:05:91:c4:f5:a5:b9:f0:de:2d:c1:4e:7b:
69:26:27:15:6a:ac:31:b2:ef:90:ec:51:fb:f3:9a:a3:ba:df:
13:4b:dc:ee:bc:2c:5c:1b:32:85:4d:a7:36:46:04:45:54:66:
82:12:5f:40:eb:db:34:df:7a:2e:5f:13:89:e7:48:85:93:92:
6d:af:42:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:39 2025 by rpki-client