Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203134303830.roa
File: 3139312e3135362e3231352e302f32342d3234203d3e203134303830.roa (raw, json)
Hash identifier: 499rZ0idCqfEsSsZsEgkwJMVFvcJvtJDJm9GYerUeqQ=
Subject key identifier: A2:E2:3D:3B:42:1A:93:42:7E:3B:31:1C:8F:CB:71:CA:F0:89:CA:CF
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 03C8ADB8BE9019EC1487D6BBCF8E7DE93A7809D5
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203134303830.roa
Signing time: Tue 04 Feb 2025 18:05:00 +0000
ROA not before: Tue 04 Feb 2025 18:00:00 +0000
ROA not after: Tue 03 Feb 2026 18:05:00 +0000
asID: 14080
IP address blocks: 191.156.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c8:ad:b8:be:90:19:ec:14:87:d6:bb:cf:8e:7d:e9:3a:78:09:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Feb 4 18:00:00 2025 GMT
Not After : Feb 3 18:05:00 2026 GMT
Subject: CN=A2E23D3B421A93427E3B311C8FCB71CAF089CACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:43:e4:24:96:74:ec:f7:46:5c:e0:2f:ed:
78:e3:2d:dd:3b:f7:36:a6:9a:2b:3d:bf:c9:de:b5:
87:68:d3:a9:17:c6:5f:ce:43:d4:01:16:d4:5f:26:
43:7b:7e:d2:27:2b:fa:6a:19:73:38:c2:2c:f2:a2:
ee:a5:5f:40:95:4e:95:eb:73:f4:11:7a:6c:2f:af:
d0:08:3a:1e:fe:4e:60:8e:bd:ef:16:fa:85:6e:0b:
8f:84:7b:1f:8b:d7:d6:0b:b5:91:17:8d:38:38:e5:
8e:14:34:27:53:08:96:55:80:00:0a:3e:b7:1a:28:
22:35:3d:48:4a:6e:c8:6d:ae:aa:de:06:a5:2a:c1:
ad:2e:04:ee:f5:b1:26:60:9a:29:9e:21:9c:9c:2b:
f8:2a:b2:8d:d1:04:d4:77:69:01:01:97:13:3c:39:
71:06:78:82:9e:8e:8c:a5:a6:ab:f5:54:51:fc:3a:
0c:32:6a:28:d1:47:64:43:45:01:7a:cf:7f:0d:d1:
ee:12:74:fd:bd:e3:b8:87:70:25:81:af:e7:b8:d7:
41:06:f0:1e:80:4c:12:ab:f4:fa:9a:ab:5d:fd:8e:
64:aa:d6:3c:09:a4:df:37:98:28:84:d1:95:bc:d6:
a0:d2:02:e8:87:bb:77:50:2a:a5:e2:d4:a5:a3:d0:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E2:3D:3B:42:1A:93:42:7E:3B:31:1C:8F:CB:71:CA:F0:89:CA:CF
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3231352e302f32342d3234203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.156.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6e:48:d2:a9:3a:46:b7:a2:f1:0a:38:f4:ca:69:1f:98:20:
45:a5:e1:0a:71:44:10:5f:64:f4:88:32:6e:a9:c1:10:81:1a:
e7:25:c1:db:51:77:60:01:3d:4b:16:55:d9:60:4f:cb:37:62:
fd:24:e5:d1:03:51:41:bf:68:b8:f8:72:53:1e:93:5d:d4:fd:
15:77:5d:59:c6:c1:53:7c:10:da:7d:c5:0d:1f:1c:24:b4:08:
ea:6b:07:93:aa:eb:d9:45:13:6a:d6:95:33:00:18:8e:d3:db:
5a:77:0d:92:3f:a7:f1:e7:c0:08:4c:37:1d:b9:f6:6d:e5:ec:
99:3b:58:10:d0:29:ca:92:7c:68:4a:16:be:5b:a5:da:89:19:
59:0e:3a:9e:4a:0c:97:75:b1:df:59:55:91:f1:61:79:ce:01:
7f:c0:64:df:15:66:86:6b:84:71:55:20:dc:ee:d7:7e:83:87:
ee:01:2b:b2:2e:9d:d1:41:56:02:1a:ed:37:52:66:9f:4d:3a:
59:ad:93:14:7b:5c:a3:a8:c1:01:b6:0d:36:af:25:53:65:91:
eb:f5:2d:b2:7a:76:66:e9:e6:02:85:92:e6:05:9c:f0:d2:e5:
72:23:8e:9e:24:f7:58:67:85:f0:bf:1d:ff:1d:e7:c2:b5:08:
db:47:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:58:51 2025 by rpki-client