Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31362e302f32332d3234203d3e203233333833.roa
File: 3139302e342e31362e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier: 4w5NKn6aThOSYYxe61P9Fs8/9GBtdoKEEAx9F8ueUUI=
Subject key identifier: 43:52:DB:89:B3:BC:0D:05:04:E6:7F:A1:1F:19:AF:6D:C8:1B:C8:B9
Certificate issuer: /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial: 793191387CC28035828FBA19586BE4C37C7FF377
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31362e302f32332d3234203d3e203233333833.roa
Signing time: Tue 04 Feb 2025 18:15:39 +0000
ROA not before: Tue 04 Feb 2025 18:10:39 +0000
ROA not after: Tue 03 Feb 2026 18:15:39 +0000
asID: 23383
IP address blocks: 190.4.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:31:91:38:7c:c2:80:35:82:8f:ba:19:58:6b:e4:c3:7c:7f:f3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Validity
Not Before: Feb 4 18:10:39 2025 GMT
Not After : Feb 3 18:15:39 2026 GMT
Subject: CN=4352DB89B3BC0D0504E67FA11F19AF6DC81BC8B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:e8:5d:4b:72:62:42:d5:d6:47:11:e9:9c:
da:a9:49:21:55:59:60:3a:42:1d:eb:5e:7a:28:b4:
94:80:c5:0b:b9:47:a9:f3:8f:a3:3b:13:93:a0:bc:
22:30:53:78:77:79:2a:95:59:6d:05:d1:6c:78:ee:
e8:70:a5:da:52:be:ed:02:46:f8:27:16:cc:97:9b:
fc:dc:3e:32:0f:1a:3f:7d:3e:da:1e:31:39:9e:4c:
20:01:51:10:cf:75:cc:cf:40:ae:94:d0:d7:37:43:
90:cb:32:3f:28:a2:de:74:cd:72:96:bd:91:f1:3b:
6d:07:39:55:6d:17:10:62:bb:83:87:25:1e:ad:ae:
62:6c:79:8b:51:6a:a0:ed:da:5e:e9:f7:d2:64:ec:
5b:73:e9:eb:8c:a7:c4:9a:d2:89:7a:01:50:8b:ea:
e1:e4:f5:10:71:fb:0d:1f:07:1b:4b:06:8d:0e:6d:
3e:7f:53:8c:a2:cc:5e:75:17:d5:ec:5e:b7:ff:c7:
32:e9:64:75:5a:d4:12:66:89:5a:d8:41:13:5d:88:
26:53:ad:2e:cb:79:6f:48:96:89:5c:62:3c:f8:ea:
5c:3a:d3:3e:49:2b:11:cc:91:06:df:ac:e3:63:57:
65:85:b4:2e:69:3c:81:82:47:16:8a:59:b8:8b:1e:
37:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:DB:89:B3:BC:0D:05:04:E6:7F:A1:1F:19:AF:6D:C8:1B:C8:B9
X509v3 Authority Key Identifier:
keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31362e302f32332d3234203d3e203233333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.16.0/23
Signature Algorithm: sha256WithRSAEncryption
82:ba:09:e4:e7:ff:00:bb:7b:78:0c:7f:90:23:e0:76:d9:fe:
25:71:b2:bc:cc:18:d8:02:61:03:9b:7c:66:4e:2f:0f:b7:b1:
9e:b9:1a:8a:10:09:37:a4:80:08:7f:c4:f5:8e:2d:0c:ef:81:
cc:91:8a:91:f6:86:79:37:e7:66:38:b4:54:ab:7c:ef:ee:d8:
37:76:ec:02:38:aa:c6:9c:2a:54:3d:22:e3:6a:65:91:2c:20:
82:75:43:f3:61:0d:4d:2d:75:63:b9:e6:bc:38:1a:87:a7:86:
b2:cc:1e:9a:30:1f:a5:1c:17:77:22:a8:86:ac:e7:85:c9:ff:
1d:2d:aa:bf:8e:8d:e3:eb:18:be:4d:15:21:cf:b2:a3:e8:88:
f5:03:c3:6c:6c:7c:12:1d:ea:fd:fc:fa:81:e2:96:8a:80:06:
83:a4:fb:ad:fa:c5:1e:e2:ba:1a:bc:ec:94:b3:50:b2:b5:95:
b8:e3:02:a0:ff:6a:9f:d0:36:6b:48:bc:dd:90:41:e2:a5:4c:
06:0d:e9:43:51:b4:98:c3:5c:e9:5f:de:0e:79:73:8c:6d:34:
95:ae:25:2d:e3:3c:85:dc:5d:09:cd:23:69:4e:62:b3:ef:c7:
cf:94:e5:d5:39:69:b3:87:eb:38:72:09:c1:b8:55:3b:b1:f6:
9a:77:64:f1
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUeTGROHzCgDWCj7oZWGvkw3x/83cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMTAwODdCMzJFRTY5QTQ4OEY1QUU4QUZBMkVFMkY1
MDYxQURFMDAeFw0yNTAyMDQxODEwMzlaFw0yNjAyMDMxODE1MzlaMDMxMTAvBgNV
BAMTKDQzNTJEQjg5QjNCQzBEMDUwNEU2N0ZBMTFGMTlBRjZEQzgxQkM4QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zuhdS3JiQtXWRxHpnNqpSSFV
WWA6Qh3rXnootJSAxQu5R6nzj6M7E5OgvCIwU3h3eSqVWW0F0Wx47uhwpdpSvu0C
RvgnFsyXm/zcPjIPGj99PtoeMTmeTCABURDPdczPQK6U0Nc3Q5DLMj8oot50zXKW
vZHxO20HOVVtFxBiu4OHJR6trmJseYtRaqDt2l7p99Jk7Ftz6euMp8Sa0ol6AVCL
6uHk9RBx+w0fBxtLBo0ObT5/U4yizF51F9XsXrf/xzLpZHVa1BJmiVrYQRNdiCZT
rS7LeW9IlolcYjz46lw60z5JKxHMkQbfrONjV2WFtC5pPIGCRxaKWbiLHjehAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUQ1LbibO8DQUE5n+hHxmvbcgbyLkwHwYDVR0j
BBgwFoAUTMEAh7Mu5ppIj1ror6LuL1BhreAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MDA3MkU1NzQzMTQzOTc1QzUxQjQ3RDlGM0E3MjhGMjk1
MkQyMjYwQURERDAwMUYwQ0E2MzA3ODc1QUQ0MUM4LzAvNENDMTAwODdCMzJFRTY5
QTQ4OEY1QUU4QUZBMkVFMkY1MDYxQURFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0MxMDA4N0IzMkVFNjlBNDg4
RjVBRThBRkEyRUUyRjUwNjFBREUwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTAwNzJFNTc0MzE0Mzk3NUM1MUI0N0Q5RjNBNzI4RjI5NTJEMjI2MEFE
REQwMDFGMENBNjMwNzg3NUFENDFDOC8wLzMxMzkzMDJlMzQyZTMxMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjMzMzMzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvgQQMA0GCSqG
SIb3DQEBCwUAA4IBAQCCugnk5/8Au3t4DH+QI+B22f4lcbK8zBjYAmEDm3xmTi8P
t7GeuRqKEAk3pIAIf8T1ji0M74HMkYqR9oZ5N+dmOLRUq3zv7tg3duwCOKrGnCpU
PSLjamWRLCCCdUPzYQ1NLXVjuea8OBqHp4ayzB6aMB+lHBd3IqiGrOeFyf8dLaq/
jo3j6xi+TRUhz7Kj6Ij1A8NsbHwSHer9/PqB4paKgAaDpPut+sUe4roavOyUs1Cy
tZW44wKg/2qf0DZrSLzdkEHipUwGDelDUbSYw1zpX94OeXOMbTSVriUt4zyF3F0J
zSNpTmKz78fPlOXVOWmzh+s4cgnBuFU7sfaad2Tx
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:25 2025 by rpki-client