Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e302e302f32302d3234203d3e203236363131.roa
File: 3139312e3135362e302e302f32302d3234203d3e203236363131.roa (raw, json)
Hash identifier: y9hoQat2QQk7OO4XMKR+hn/w5oeuhaIx2BvffCxST1c=
Subject key identifier: 5D:68:1C:6A:E4:1C:31:07:D3:FD:BA:49:FA:4E:64:42:59:20:CB:5A
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 4AC19DAACDCC89FFAE571AAD71333A6D55292B66
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e302e302f32302d3234203d3e203236363131.roa
Signing time: Tue 04 Feb 2025 18:05:18 +0000
ROA not before: Tue 04 Feb 2025 18:00:18 +0000
ROA not after: Tue 03 Feb 2026 18:05:18 +0000
asID: 26611
IP address blocks: 191.156.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c1:9d:aa:cd:cc:89:ff:ae:57:1a:ad:71:33:3a:6d:55:29:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Feb 4 18:00:18 2025 GMT
Not After : Feb 3 18:05:18 2026 GMT
Subject: CN=5D681C6AE41C3107D3FDBA49FA4E64425920CB5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d6:69:e4:0b:6e:bf:f1:78:3a:97:5c:b4:4a:
6d:83:29:d7:c7:23:80:5d:da:5f:c6:2d:8a:a7:c2:
65:58:f9:6f:57:4d:97:c0:47:c9:22:60:47:ef:65:
84:bb:c6:74:c9:69:26:c2:29:6d:3a:fd:a6:8d:cd:
d9:48:2e:49:c6:fa:0f:85:86:65:9a:80:88:ee:ae:
06:2b:aa:4a:14:59:73:3b:ce:a5:62:1a:a0:82:24:
cc:44:b4:dc:4f:8d:b9:1f:d1:60:c2:7a:82:65:6f:
fb:88:4b:da:19:ca:99:d3:70:2c:fd:2d:c8:3d:6f:
ea:ae:28:68:88:51:50:18:34:cd:e2:2c:53:aa:37:
39:cf:52:1a:6b:96:2f:f9:88:64:c4:c7:03:11:01:
f3:60:b2:5c:ff:8d:63:1b:2b:55:ec:50:6e:98:4d:
77:40:ed:62:96:94:60:42:25:01:f2:d0:09:9f:3d:
e1:23:4e:75:b0:b3:f7:3b:77:59:08:6c:8c:02:67:
3e:d1:c8:a2:d4:46:cb:53:7d:92:39:82:1f:e6:5e:
7d:cb:86:25:f7:d6:66:ad:26:94:70:c4:42:74:5d:
d4:47:5e:57:b9:e3:99:58:ce:6e:af:60:91:d9:3d:
a0:55:40:fc:c1:e2:67:1f:09:d1:90:00:2c:54:26:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:1C:6A:E4:1C:31:07:D3:FD:BA:49:FA:4E:64:42:59:20:CB:5A
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e302e302f32302d3234203d3e203236363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.156.0.0/20
Signature Algorithm: sha256WithRSAEncryption
02:94:ce:66:3b:c7:84:05:eb:f4:32:fc:43:f6:f4:c6:e7:55:
3c:d5:c1:b7:b2:d0:f7:de:f2:45:06:1b:8a:85:88:a4:84:89:
04:fe:91:79:57:c3:cc:09:bb:8f:99:a2:cd:16:0b:ff:e7:b9:
df:94:59:92:35:64:09:0a:c2:fe:e3:40:92:7c:9e:ee:b5:8c:
c2:38:8e:5d:f6:ae:39:fa:3a:62:c6:31:97:e8:8f:26:44:b3:
a7:a7:c2:1c:05:54:6d:1a:66:92:af:b1:bb:0f:2a:59:74:14:
07:cd:c9:3c:fb:00:49:a4:26:d2:7d:f8:1d:e0:ea:b4:76:a3:
ab:df:bb:5c:d1:04:3c:c9:49:5d:03:88:6c:7d:df:7e:a3:0a:
24:74:7f:85:f7:18:99:16:04:97:e6:d2:c4:24:03:b2:b9:b0:
c5:02:af:9b:55:a5:11:59:f1:da:1e:fc:63:b3:8f:98:a7:29:
4f:fe:75:8a:1a:29:a5:03:2a:ee:22:89:37:73:02:1c:87:9a:
6a:39:ab:01:6b:00:df:e5:2a:b4:13:0b:d4:d5:f4:af:e9:4d:
67:d8:2f:e8:cf:30:bd:bd:f0:ba:1e:36:04:b0:36:02:56:a7:
f2:06:cc:d8:cf:a4:36:8b:d5:00:19:bc:e7:26:6b:2a:f7:37:
7e:4f:cd:91
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSsGdqs3Mif+uVxqtcTM6bVUpK2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNTAyMDQxODAwMThaFw0yNjAyMDMxODA1MThaMDMxMTAvBgNV
BAMTKDVENjgxQzZBRTQxQzMxMDdEM0ZEQkE0OUZBNEU2NDQyNTkyMENCNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU1mnkC26/8Xg6l1y0Sm2DKdfH
I4Bd2l/GLYqnwmVY+W9XTZfAR8kiYEfvZYS7xnTJaSbCKW06/aaNzdlILknG+g+F
hmWagIjurgYrqkoUWXM7zqViGqCCJMxEtNxPjbkf0WDCeoJlb/uIS9oZypnTcCz9
Lcg9b+quKGiIUVAYNM3iLFOqNznPUhprli/5iGTExwMRAfNgslz/jWMbK1XsUG6Y
TXdA7WKWlGBCJQHy0AmfPeEjTnWws/c7d1kIbIwCZz7RyKLURstTfZI5gh/mXn3L
hiX31matJpRwxEJ0XdRHXle545lYzm6vYJHZPaBVQPzB4mcfCdGQACxUJn9BAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUXWgcauQcMQfT/bpJ+k5kQlkgy1owHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzEzNTM2MmUzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS/nAAwDQYJ
KoZIhvcNAQELBQADggEBAAKUzmY7x4QF6/Qy/EP29MbnVTzVwbey0Pfe8kUGG4qF
iKSEiQT+kXlXw8wJu4+Zos0WC//nud+UWZI1ZAkKwv7jQJJ8nu61jMI4jl32rjn6
OmLGMZfojyZEs6enwhwFVG0aZpKvsbsPKll0FAfNyTz7AEmkJtJ9+B3g6rR2o6vf
u1zRBDzJSV0DiGx9336jCiR0f4X3GJkWBJfm0sQkA7K5sMUCr5tVpRFZ8doe/GOz
j5inKU/+dYoaKaUDKu4iiTdzAhyHmmo5qwFrAN/lKrQTC9TV9K/pTWfYL+jPML29
8LoeNgSwNgJWp/IGzNjPpDaL1QAZvOcmayr3N35PzZE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:43 2025 by rpki-client