Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e32342e302f32312d3234203d3e203236363131.roa
File: 3139312e3135362e32342e302f32312d3234203d3e203236363131.roa (raw, json)
Hash identifier: JfDGLzCGHMxG0NiIrpulS6Fx0khuBOk+Fzds8ASpi+M=
Subject key identifier: 56:25:53:D8:C2:64:F6:4B:E8:A7:05:C2:FF:F9:3B:EE:D0:84:D0:0E
Certificate issuer: /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial: 781A8610B93AC1A58A13174EEEF76C2A7214B3CD
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e32342e302f32312d3234203d3e203236363131.roa
Signing time: Tue 04 Feb 2025 18:05:05 +0000
ROA not before: Tue 04 Feb 2025 18:00:05 +0000
ROA not after: Tue 03 Feb 2026 18:05:05 +0000
asID: 26611
IP address blocks: 191.156.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1a:86:10:b9:3a:c1:a5:8a:13:17:4e:ee:f7:6c:2a:72:14:b3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Validity
Not Before: Feb 4 18:00:05 2025 GMT
Not After : Feb 3 18:05:05 2026 GMT
Subject: CN=562553D8C264F64BE8A705C2FFF93BEED084D00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:1e:11:2b:81:07:fc:7a:48:01:a2:ec:37:
a9:5c:a4:0c:d3:ec:02:08:7f:d5:04:7f:a9:d3:60:
81:b4:e2:9a:b4:52:86:a4:e1:d0:d7:37:90:5d:96:
a5:44:da:b7:75:ac:a2:2d:7c:fb:be:67:68:c6:07:
2b:0b:85:ac:ae:a6:6c:6f:4f:d8:f7:a5:1b:d3:6c:
b4:6d:03:46:d1:6f:9a:28:84:6e:99:17:d5:02:f3:
3a:47:ac:a4:14:e1:2b:cf:73:21:21:21:92:bd:9a:
92:79:da:06:06:40:f8:2f:29:9e:a4:80:b0:f3:f8:
93:e4:fd:96:01:a1:eb:a2:cb:6d:a3:06:a4:7b:d8:
5b:13:af:11:1c:46:d8:c0:0e:87:3b:7d:a8:e6:05:
37:23:9c:69:e2:dd:b2:0b:bf:e1:e4:33:a1:ac:3a:
58:a0:b7:60:d8:be:fb:9b:e3:80:17:6c:5a:33:b0:
c2:ce:d7:e5:d4:1b:6f:a6:67:af:09:c2:9f:61:a6:
0c:8e:2a:75:d1:3e:ca:cc:73:92:72:ea:da:13:f1:
e4:4a:6a:3a:c6:3d:63:b6:c5:34:0d:50:f7:37:46:
38:2e:03:cd:0d:fb:42:dd:61:e4:84:6c:f6:d2:56:
d1:bf:62:83:a4:1f:93:0a:9f:0a:1d:b5:43:6b:95:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:53:D8:C2:64:F6:4B:E8:A7:05:C2:FF:F9:3B:EE:D0:84:D0:0E
X509v3 Authority Key Identifier:
keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e32342e302f32312d3234203d3e203236363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.156.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:13:90:19:07:29:df:bd:f1:cd:07:1f:25:c8:a7:2e:a0:0a:
65:9b:a3:d8:45:a7:6f:68:6d:c1:b4:c8:64:e1:85:73:58:a5:
5a:ef:d2:5e:8d:54:fd:a7:90:fb:6f:0d:24:67:5b:86:69:4e:
1f:64:2a:38:c6:8f:b6:0d:03:e8:20:66:1e:f9:c4:bc:aa:b8:
1f:0c:d2:4a:10:be:24:cf:1c:68:df:7b:51:8f:dd:1e:9e:19:
77:cb:86:2a:c7:62:bb:07:22:14:6f:87:a5:f0:6f:01:ac:a1:
04:bb:15:21:53:7f:9d:f1:e8:36:b8:e4:a9:5f:19:85:54:e0:
56:7c:fc:da:f0:15:7d:68:58:9d:fa:90:d7:84:ce:6f:07:00:
ad:f4:30:29:85:ae:b6:a4:0d:ff:d4:d8:7d:84:3f:d2:f9:34:
db:87:e7:bb:4f:37:12:ed:4b:ef:8e:90:c2:32:ac:db:71:5e:
dd:e9:85:5b:82:a3:f8:e5:9d:db:7d:6a:ed:28:51:c6:ef:40:
c1:68:4a:de:c3:ed:c8:3a:df:79:ec:0c:83:df:34:a8:8b:e0:
77:54:88:b4:32:e2:7b:2e:0e:58:3f:ad:70:da:ee:e6:08:fb:
76:aa:b5:b7:31:ad:e7:3f:44:82:48:9e:97:33:7b:56:17:0e:
5d:fc:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:51 2025 by rpki-client