Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa
File: 3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa (raw, json)
Hash identifier: g2C/dw3S3PCGetXLmHYk66Wgg+sB+82ytvep94ADQcI=
Subject key identifier: 98:25:1A:BA:A8:49:3C:7B:16:BB:79:FE:3F:A4:14:E5:B5:F5:5E:C6
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 5697C6CF6602837A623BFBC89647DED07434182D
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa
Signing time: Tue 04 Feb 2025 18:05:21 +0000
ROA not before: Tue 04 Feb 2025 18:00:21 +0000
ROA not after: Tue 03 Feb 2026 18:05:21 +0000
asID: 26611
IP address blocks: 190.127.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:97:c6:cf:66:02:83:7a:62:3b:fb:c8:96:47:de:d0:74:34:18:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Feb 4 18:00:21 2025 GMT
Not After : Feb 3 18:05:21 2026 GMT
Subject: CN=98251ABAA8493C7B16BB79FE3FA414E5B5F55EC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:9a:1e:5e:d3:36:14:0c:13:fd:fe:2f:a6:
38:79:41:0b:42:04:40:e6:ee:e7:8d:d3:cf:2a:89:
4d:0b:25:da:1a:57:31:ce:c3:63:8c:5c:0b:5f:16:
53:82:3d:8a:0c:cd:0f:3b:ba:44:e4:2e:6d:26:9b:
a2:97:aa:d0:a4:ce:db:62:24:a6:c5:e8:a8:90:f1:
eb:d5:20:ff:23:99:33:1a:c0:a7:46:09:b6:2f:14:
03:8b:a6:c0:5b:53:5a:5f:21:80:d5:5c:2b:76:81:
1f:f7:58:b2:bf:63:52:dc:ed:f8:d6:21:6a:b1:68:
a7:c3:61:fa:8a:09:5b:38:e1:94:7e:82:90:8e:50:
8a:19:a6:db:87:5f:31:c0:ed:8b:f2:2e:61:48:a0:
79:81:88:40:5b:a2:9b:76:16:22:05:6a:b5:64:8f:
5c:22:a3:f9:61:ce:6c:83:47:0b:88:bd:34:95:eb:
f6:4a:8b:37:ab:38:81:39:b4:0e:9e:bb:71:8c:0c:
61:6c:4e:98:91:fe:73:d3:3a:db:1c:a5:e8:fc:71:
d7:7c:da:af:82:8c:c4:1c:c2:38:6f:c5:5d:6b:2a:
47:84:f6:2c:32:25:73:97:b0:ac:d7:f5:e1:e8:fc:
4b:a0:c2:94:36:6f:ff:39:bd:47:6e:a6:25:1e:c3:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:1A:BA:A8:49:3C:7B:16:BB:79:FE:3F:A4:14:E5:B5:F5:5E:C6
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3232342e302f32312d3231203d3e203236363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.127.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:03:e0:24:d4:df:96:07:5a:ac:4c:e6:b6:41:a0:c0:35:2a:
d4:0c:9c:a7:6d:33:9c:f3:ba:eb:99:e4:af:19:49:30:32:46:
04:47:1b:b1:9e:17:2a:57:ca:56:08:7c:d1:e4:4d:c6:f7:01:
4b:20:b4:f7:d9:21:e8:bd:94:ea:f1:a7:9e:bf:e1:b5:15:90:
5b:24:80:e2:52:13:e6:22:64:1a:30:2f:0d:9e:0c:29:ae:b3:
fb:0f:ff:b0:e9:f9:b5:ab:90:1e:63:b6:a9:15:82:b9:a9:98:
5c:21:7e:ef:44:35:71:71:74:fa:ea:2b:93:21:51:ca:d2:5c:
03:a7:ef:8f:ac:b8:24:99:e6:5e:d0:09:9b:82:92:47:67:b6:
86:03:bf:c3:94:c2:55:8c:d7:35:38:14:b2:68:fd:48:4a:b9:
7c:58:73:5e:21:86:22:31:2c:ad:c4:6d:65:bc:4e:36:d4:b1:
36:dc:f8:bd:a3:b4:cc:56:86:3e:fe:3d:1c:d0:a0:fb:c1:c6:
68:b7:0c:a7:6c:f3:cd:2c:15:b4:26:06:93:74:cd:c4:43:55:
21:17:ab:13:4a:bc:76:25:60:2f:72:20:d4:08:ef:8a:68:bc:
2d:92:7e:92:88:74:f3:85:d2:93:b4:25:5a:39:8b:2e:5a:f9:
5a:ef:7c:b0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVpfGz2YCg3piO/vIlkfe0HQ0GC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNTAyMDQxODAwMjFaFw0yNjAyMDMxODA1MjFaMDMxMTAvBgNV
BAMTKDk4MjUxQUJBQTg0OTNDN0IxNkJCNzlGRTNGQTQxNEU1QjVGNTVFQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlW5oeXtM2FAwT/f4vpjh5QQtC
BEDm7ueN088qiU0LJdoaVzHOw2OMXAtfFlOCPYoMzQ87ukTkLm0mm6KXqtCkztti
JKbF6KiQ8evVIP8jmTMawKdGCbYvFAOLpsBbU1pfIYDVXCt2gR/3WLK/Y1Lc7fjW
IWqxaKfDYfqKCVs44ZR+gpCOUIoZptuHXzHA7YvyLmFIoHmBiEBbopt2FiIFarVk
j1wio/lhzmyDRwuIvTSV6/ZKizerOIE5tA6eu3GMDGFsTpiR/nPTOtscpej8cdd8
2q+CjMQcwjhvxV1rKkeE9iwyJXOXsKzX9eHo/EugwpQ2b/85vUdupiUew0zZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmCUauqhJPHsWu3n+P6QU5bX1XsYwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzEzMjM3MmUzMjMyMzQy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2MzYzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvn/g
MA0GCSqGSIb3DQEBCwUAA4IBAQA+A+Ak1N+WB1qsTOa2QaDANSrUDJynbTOc87rr
meSvGUkwMkYERxuxnhcqV8pWCHzR5E3G9wFLILT32SHovZTq8aeev+G1FZBbJIDi
UhPmImQaMC8NngwprrP7D/+w6fm1q5AeY7apFYK5qZhcIX7vRDVxcXT66iuTIVHK
0lwDp++PrLgkmeZe0AmbgpJHZ7aGA7/DlMJVjNc1OBSyaP1ISrl8WHNeIYYiMSyt
xG1lvE421LE23Pi9o7TMVoY+/j0c0KD7wcZotwynbPPNLBW0JgaTdM3EQ1UhF6sT
Srx2JWAvciDUCO+KaLwtkn6SiHTzhdKTtCVaOYsuWvla73yw
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:05 2025 by rpki-client