Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32302e302f32322d3234203d3e203233333833.roa
File: 3139302e342e32302e302f32322d3234203d3e203233333833.roa (raw, json)
Hash identifier: fz6JmAuAwsjUiVLl538+Y8yt/o6oNkNPfVvoJn13z2M=
Subject key identifier: EA:28:F9:41:59:99:D7:E4:25:01:AD:03:C2:D5:37:27:3A:2E:26:B8
Certificate issuer: /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial: 342A4D05A604594A145CA81FA233AD4727F2EAF8
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32302e302f32322d3234203d3e203233333833.roa
Signing time: Tue 04 Feb 2025 18:15:24 +0000
ROA not before: Tue 04 Feb 2025 18:10:24 +0000
ROA not after: Tue 03 Feb 2026 18:15:24 +0000
asID: 23383
IP address blocks: 190.4.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:2a:4d:05:a6:04:59:4a:14:5c:a8:1f:a2:33:ad:47:27:f2:ea:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Validity
Not Before: Feb 4 18:10:24 2025 GMT
Not After : Feb 3 18:15:24 2026 GMT
Subject: CN=EA28F9415999D7E42501AD03C2D537273A2E26B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:51:35:38:e5:66:4e:96:b3:1c:43:9d:70:
04:98:26:bb:60:3b:06:ca:d7:38:39:7c:58:77:eb:
e0:61:1f:68:ee:dc:18:f8:17:8b:15:98:f3:61:c0:
80:f5:35:3b:19:0a:fe:0b:60:5e:a1:50:f1:1b:fb:
9d:78:57:f8:e1:43:be:85:ce:53:77:60:28:2a:f1:
99:56:cf:bd:e4:e0:90:bc:b7:83:cf:5e:e4:4e:11:
c9:f5:c2:57:47:59:b6:24:9d:63:23:9e:42:b1:ed:
01:d9:de:fa:ae:bc:06:a4:8a:6e:58:9b:34:70:c3:
f1:3f:17:d3:8d:a5:48:38:c3:04:1f:8d:da:7d:89:
3c:df:ad:63:fd:af:29:21:d0:54:17:3f:df:1c:b7:
3b:48:e2:16:e8:0b:56:17:84:a9:8e:80:c1:4b:2e:
42:80:9a:1c:91:c6:17:56:2b:6b:e4:60:ce:ba:7d:
25:19:36:bb:77:e0:5f:0e:b4:8d:e4:1b:88:6d:17:
4c:f6:d7:3f:5c:9f:1f:91:bd:3a:ca:bf:f2:0f:99:
82:de:05:3c:c4:b4:05:81:13:74:1a:76:ed:0d:ec:
ac:a5:bd:3a:25:ab:c5:27:c6:5d:b9:6d:ff:f1:0e:
73:f6:9f:d4:75:2f:02:ec:13:38:50:ef:6e:22:dd:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:F9:41:59:99:D7:E4:25:01:AD:03:C2:D5:37:27:3A:2E:26:B8
X509v3 Authority Key Identifier:
keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32302e302f32322d3234203d3e203233333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.20.0/22
Signature Algorithm: sha256WithRSAEncryption
21:ce:cb:38:c4:ac:c3:c2:af:63:a7:1a:ba:ca:d4:13:1b:14:
7d:3b:a0:55:4d:f2:2b:05:35:cf:88:2c:34:ca:ac:c7:e9:05:
9a:53:a3:ed:61:11:ea:6a:0a:a1:87:d1:88:72:1b:a9:3f:77:
f0:7e:fe:42:8f:0f:e8:d9:c4:97:ad:fe:a9:51:33:30:f3:9b:
15:08:6b:ed:a3:29:27:5b:a6:9d:72:27:81:50:52:df:71:ab:
e6:58:3a:c3:1d:a4:7b:2c:f6:43:c3:ab:b3:7a:6a:4f:8a:96:
47:4d:f5:ac:aa:41:3b:84:86:ab:e0:d5:d7:20:12:4e:d2:f9:
04:8e:91:66:df:8d:c0:f3:2e:18:14:04:3f:a4:df:55:47:42:
5b:7a:7e:97:49:b3:a8:49:44:1d:86:e9:3e:99:4c:f9:7c:b4:
03:14:8b:c4:7c:04:38:b3:9e:02:27:ac:84:c1:f7:1c:54:b3:
b9:d6:8b:a7:40:f7:64:f3:d9:45:69:05:47:a9:0c:60:69:ef:
25:d1:51:b1:d7:7c:74:36:5a:9a:28:e1:a0:cd:05:fc:d6:00:
61:31:37:82:eb:01:00:d8:da:8b:8c:6b:59:06:9d:80:39:a4:
bf:2b:25:b3:ea:90:f9:33:73:60:13:54:cf:07:5b:bc:29:5c:
75:0b:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:28 2025 by rpki-client