Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e35362e302f32332d3234203d3e203233333833.roa
File: 3139302e342e35362e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier: Xg4Js0F5DbieCCATIYAKmrusPUAAfECCkcCr65Qt/yc=
Subject key identifier: F0:ED:72:B3:8D:BC:A2:30:06:92:A5:94:2B:05:4F:5F:C4:7F:F9:96
Certificate issuer: /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial: 3E3F36F92CE87164C6560C859B33E203A2AD3DA6
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e35362e302f32332d3234203d3e203233333833.roa
Signing time: Tue 04 Feb 2025 18:15:33 +0000
ROA not before: Tue 04 Feb 2025 18:10:33 +0000
ROA not after: Tue 03 Feb 2026 18:15:33 +0000
asID: 23383
IP address blocks: 190.4.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3f:36:f9:2c:e8:71:64:c6:56:0c:85:9b:33:e2:03:a2:ad:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Validity
Not Before: Feb 4 18:10:33 2025 GMT
Not After : Feb 3 18:15:33 2026 GMT
Subject: CN=F0ED72B38DBCA2300692A5942B054F5FC47FF996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:86:e5:c0:05:1e:d2:ca:14:34:21:cd:c7:
dd:3f:56:2b:1e:4b:6e:57:b6:6f:cf:ce:14:78:70:
1d:a7:b7:d5:98:d6:16:c0:d0:27:d7:94:79:ce:ff:
86:68:e7:e1:4f:d4:82:6f:38:8f:81:f0:c7:bf:32:
b7:52:56:99:20:c7:80:29:dc:31:76:df:c5:f5:ae:
f3:be:cc:67:2c:1a:e7:58:3d:65:80:d9:bf:39:23:
78:13:2b:11:d1:38:6d:8f:44:e9:69:4b:ae:03:de:
b1:5e:62:a2:fd:7e:83:50:f1:91:51:40:ee:6a:15:
85:0b:fc:7c:c0:b9:18:4d:8f:21:0d:91:1e:3b:56:
da:ab:69:70:a6:d6:cb:22:cb:3a:6d:80:c3:f1:b2:
4a:f3:33:cc:cd:38:92:fe:0b:c0:5d:7d:d1:4f:ae:
22:2f:2b:44:c5:18:60:70:10:d7:ee:8d:15:60:3b:
de:3d:4c:a6:2e:91:82:55:14:47:d4:05:2b:b3:d8:
cf:16:9d:da:38:e6:af:87:c2:24:b8:81:a2:9d:24:
4d:87:69:c4:43:58:da:ca:58:6d:86:84:b8:79:0e:
8e:cb:75:ba:db:45:d2:e9:71:3f:2e:94:1c:f8:bd:
fa:6c:49:39:0f:58:e0:da:fe:3d:f7:26:29:12:9b:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:ED:72:B3:8D:BC:A2:30:06:92:A5:94:2B:05:4F:5F:C4:7F:F9:96
X509v3 Authority Key Identifier:
keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e35362e302f32332d3234203d3e203233333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.56.0/23
Signature Algorithm: sha256WithRSAEncryption
11:f9:f5:6a:56:56:e0:0f:84:77:ac:58:b7:5f:a0:86:ac:c9:
b7:04:b6:3d:46:14:d2:5d:b4:09:dc:2c:81:78:67:6a:e9:04:
46:f6:ce:5b:d1:88:6c:6d:32:88:d2:bc:7e:4e:11:31:f2:de:
78:c3:15:92:44:6f:4e:07:97:5b:66:fb:34:ad:5e:7a:17:dc:
76:81:5c:3f:d3:54:94:51:72:57:3d:04:e9:4e:85:b1:40:93:
99:f2:95:cc:17:9f:54:ee:db:7f:18:84:27:eb:6e:42:57:01:
12:ad:15:4f:e0:c5:c7:8b:c8:c0:4d:4e:92:84:84:ec:3d:89:
3c:95:9e:f7:f5:ee:ea:ac:95:9b:a8:00:3b:b1:d7:b5:6a:72:
97:36:b1:99:a2:d3:bd:2d:46:38:81:ea:b9:f0:f0:95:20:62:
46:0c:00:1e:4b:6e:25:68:ce:fb:44:e9:81:24:38:f2:e7:cd:
ee:72:29:06:1e:8a:cd:29:1d:25:c7:8a:33:68:bc:f5:65:08:
27:b8:2f:f6:21:f0:68:44:22:ab:06:0e:f9:f4:54:12:c3:4d:
3c:2a:2a:39:6b:16:ab:02:df:15:ac:dc:40:e3:62:9d:b9:09:
ca:5d:70:4d:4d:f3:4e:e4:7a:71:95:6b:ea:1a:0d:ee:57:a2:
f0:6c:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:30 2025 by rpki-client