Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e33322e302f32302d3234203d3e203233333833.roa
File: 3139302e342e33322e302f32302d3234203d3e203233333833.roa (raw, json)
Hash identifier: asiItOwbFp/+w6J0m7lCKFT19GXcZtMGZW+ATzEvFfs=
Subject key identifier: 3A:8A:AC:86:12:3E:E5:94:64:9E:EB:8C:9F:95:45:B8:71:9F:5A:B9
Certificate issuer: /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial: 707175447595ACAB49EB61C6ACF34C0FEE2F537C
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e33322e302f32302d3234203d3e203233333833.roa
Signing time: Tue 04 Feb 2025 18:15:22 +0000
ROA not before: Tue 04 Feb 2025 18:10:22 +0000
ROA not after: Tue 03 Feb 2026 18:15:22 +0000
asID: 23383
IP address blocks: 190.4.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:71:75:44:75:95:ac:ab:49:eb:61:c6:ac:f3:4c:0f:ee:2f:53:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Validity
Not Before: Feb 4 18:10:22 2025 GMT
Not After : Feb 3 18:15:22 2026 GMT
Subject: CN=3A8AAC86123EE594649EEB8C9F9545B8719F5AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:06:a4:7e:99:bd:27:88:c8:99:a7:fe:8e:
04:bb:6a:0d:65:13:69:2c:9e:e4:6c:13:cf:ef:e4:
51:8d:c4:b7:12:11:44:e4:26:1e:27:08:1b:c0:c1:
79:5d:24:c2:c0:3a:d8:ec:26:e0:7f:51:3b:84:1a:
51:05:22:8d:08:40:bd:5a:a5:6e:b2:9e:b2:e7:30:
6d:68:57:2e:17:62:f4:10:ec:9b:09:65:b2:d4:22:
b8:81:01:94:f5:aa:85:11:af:26:38:af:57:d7:34:
a3:96:ce:00:56:ef:e3:8f:ab:f1:82:ae:ee:b6:a5:
ff:68:a2:cf:ca:99:d8:28:ba:73:e3:a9:80:c1:07:
aa:a3:44:7a:10:97:0e:0f:75:a5:27:b4:c0:10:8f:
c7:46:95:e2:79:1a:42:df:f3:17:37:15:dd:f2:7b:
6f:71:6f:79:33:6d:ad:b6:9b:10:45:7c:d6:ae:b1:
5d:33:63:35:8d:00:6a:50:0f:75:d0:21:d3:45:e6:
ef:93:f2:d6:e1:08:e4:64:a5:61:a5:b0:7f:36:5c:
0f:67:e3:bb:78:6f:7c:c6:1f:bc:c5:df:a9:8d:a2:
62:e7:b9:29:04:75:44:9a:b5:4c:cb:7d:e4:80:6b:
93:79:08:59:5c:e7:57:bd:6e:c8:c7:ba:d0:ac:e8:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:AC:86:12:3E:E5:94:64:9E:EB:8C:9F:95:45:B8:71:9F:5A:B9
X509v3 Authority Key Identifier:
keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e33322e302f32302d3234203d3e203233333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.32.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:ac:2b:6d:09:94:3a:10:05:c3:af:25:48:5f:73:7e:a8:1e:
b0:05:1f:11:b5:fb:b0:d2:7f:79:2b:0b:a1:33:f3:b7:7e:c2:
7a:04:5e:b7:c5:38:2e:b3:7c:0d:b0:36:4e:15:b3:78:0d:91:
70:6d:9d:fa:f4:ba:43:28:7b:1e:3a:3d:b3:23:e9:a0:45:26:
bd:05:cf:f7:73:50:63:80:fb:5a:3f:88:3a:67:ba:80:95:0b:
0c:f3:a2:59:11:89:1c:3a:73:4f:5f:e8:16:05:48:ea:e1:b3:
1b:cd:92:34:7e:58:2a:f0:d1:1b:18:9e:c1:b5:f1:21:ab:da:
88:d5:20:3a:ae:6e:a9:24:84:d0:cf:07:1e:ca:4d:db:cf:d0:
d2:c7:3f:03:43:78:0e:60:ad:af:68:19:a2:bd:9a:32:81:68:
28:1e:23:a6:c3:90:5f:de:a2:c9:3e:ea:5f:7a:4e:f6:92:ce:
27:51:87:62:70:d7:f2:08:83:14:26:0d:98:ee:fd:c2:9e:ce:
b6:6d:28:72:e4:01:e6:17:55:15:b5:93:c0:66:30:f0:17:c2:
7a:73:ee:19:3c:bf:ed:b6:86:6c:52:ff:97:d4:6e:98:dc:fc:
45:3a:a2:67:ad:27:94:8e:af:78:92:4f:01:5f:a6:ba:2a:a5:
0b:4c:b8:7c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUcHF1RHWVrKtJ62HGrPNMD+4vU3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMTAwODdCMzJFRTY5QTQ4OEY1QUU4QUZBMkVFMkY1
MDYxQURFMDAeFw0yNTAyMDQxODEwMjJaFw0yNjAyMDMxODE1MjJaMDMxMTAvBgNV
BAMTKDNBOEFBQzg2MTIzRUU1OTQ2NDlFRUI4QzlGOTU0NUI4NzE5RjVBQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWAakfpm9J4jImaf+jgS7ag1l
E2ksnuRsE8/v5FGNxLcSEUTkJh4nCBvAwXldJMLAOtjsJuB/UTuEGlEFIo0IQL1a
pW6ynrLnMG1oVy4XYvQQ7JsJZbLUIriBAZT1qoURryY4r1fXNKOWzgBW7+OPq/GC
ru62pf9oos/KmdgounPjqYDBB6qjRHoQlw4PdaUntMAQj8dGleJ5GkLf8xc3Fd3y
e29xb3kzba22mxBFfNausV0zYzWNAGpQD3XQIdNF5u+T8tbhCORkpWGlsH82XA9n
47t4b3zGH7zF36mNomLnuSkEdUSatUzLfeSAa5N5CFlc51e9bsjHutCs6H2nAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUOoqshhI+5ZRknuuMn5VFuHGfWrkwHwYDVR0j
BBgwFoAUTMEAh7Mu5ppIj1ror6LuL1BhreAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MDA3MkU1NzQzMTQzOTc1QzUxQjQ3RDlGM0E3MjhGMjk1
MkQyMjYwQURERDAwMUYwQ0E2MzA3ODc1QUQ0MUM4LzAvNENDMTAwODdCMzJFRTY5
QTQ4OEY1QUU4QUZBMkVFMkY1MDYxQURFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0MxMDA4N0IzMkVFNjlBNDg4
RjVBRThBRkEyRUUyRjUwNjFBREUwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTAwNzJFNTc0MzE0Mzk3NUM1MUI0N0Q5RjNBNzI4RjI5NTJEMjI2MEFE
REQwMDFGMENBNjMwNzg3NUFENDFDOC8wLzMxMzkzMDJlMzQyZTMzMzIyZTMwMmYz
MjMwMmQzMjM0MjAzZDNlMjAzMjMzMzMzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvgQgMA0GCSqG
SIb3DQEBCwUAA4IBAQCrrCttCZQ6EAXDryVIX3N+qB6wBR8Rtfuw0n95KwuhM/O3
fsJ6BF63xTgus3wNsDZOFbN4DZFwbZ369LpDKHseOj2zI+mgRSa9Bc/3c1BjgPta
P4g6Z7qAlQsM86JZEYkcOnNPX+gWBUjq4bMbzZI0flgq8NEbGJ7BtfEhq9qI1SA6
rm6pJITQzwceyk3bz9DSxz8DQ3gOYK2vaBmivZoygWgoHiOmw5Bf3qLJPupfek72
ks4nUYdicNfyCIMUJg2Y7v3Cns62bShy5AHmF1UVtZPAZjDwF8J6c+4ZPL/ttoZs
Uv+X1G6Y3PxFOqJnrSeUjq94kk8BX6a6KqULTLh8
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:43 2025 by rpki-client