Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa
File: 3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa (raw, json)
Hash identifier: JzGuIyAZvPNtfieIG219HJG+QhlOJjtpfCANB7A3tqo=
Subject key identifier: C0:E5:A5:39:AC:87:F6:6A:C7:4F:B4:F5:DC:C7:15:CF:52:F5:00:E7
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 191CCF8DEC17332C8E1D4373ED9D0832BCD5AF4B
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa
Signing time: Mon 16 Dec 2024 19:20:03 +0000
ROA not before: Mon 16 Dec 2024 19:15:03 +0000
ROA not after: Mon 15 Dec 2025 19:20:03 +0000
asID: 27695
IP address blocks: 191.103.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1c:cf:8d:ec:17:33:2c:8e:1d:43:73:ed:9d:08:32:bc:d5:af:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Dec 16 19:15:03 2024 GMT
Not After : Dec 15 19:20:03 2025 GMT
Subject: CN=C0E5A539AC87F66AC74FB4F5DCC715CF52F500E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:a6:bd:ce:8e:00:68:79:56:32:2d:73:7d:
13:d2:bd:5b:8f:e6:e7:04:71:85:3a:63:76:7c:52:
11:e9:10:a5:cf:d0:26:b6:35:3e:ee:08:13:4f:9f:
32:d8:c4:42:bb:c6:2e:89:c5:60:cb:d8:8a:e0:29:
fb:8b:14:b8:10:91:fc:16:01:36:97:47:a7:56:42:
83:e6:0a:51:4c:5a:d8:36:89:77:9b:aa:27:43:45:
83:ec:a9:d1:6d:49:3d:40:bf:0f:d1:df:fe:f1:32:
02:56:24:98:18:41:48:88:4d:e6:05:44:9f:6a:bd:
0f:66:85:b0:42:fb:2b:65:7d:51:92:be:ad:b6:0a:
84:5b:fd:3f:c1:3e:47:6c:6b:2f:26:e3:e3:51:d1:
4f:4b:2e:04:41:ba:ff:6c:8f:00:fd:9c:34:0b:6f:
74:fc:65:94:88:fc:8f:60:41:6f:19:2c:0e:d4:ef:
bc:07:0d:fc:c2:ef:b0:c6:94:47:9b:20:36:96:b8:
1b:6f:25:a2:8b:b1:80:8c:4f:a5:83:94:f8:50:ec:
f3:ec:44:85:f2:a7:2d:cf:27:c3:ab:13:4b:33:d0:
2b:51:f8:8f:85:75:b0:bb:50:19:8f:91:64:28:7c:
43:94:e0:18:ba:37:03:3f:aa:f1:bd:49:72:35:98:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E5:A5:39:AC:87:F6:6A:C7:4F:B4:F5:DC:C7:15:CF:52:F5:00:E7
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e3130332e3132382e302f31372d3137203d3e203237363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.103.128.0/17
Signature Algorithm: sha256WithRSAEncryption
40:14:f1:80:ee:a8:c4:d9:91:35:bf:3f:16:a1:8d:f9:c7:a9:
96:2f:68:5d:5c:e0:d3:fc:92:52:a9:fb:30:62:30:48:1c:5d:
aa:b2:cd:fb:70:e6:f5:57:8b:b3:da:b5:32:f6:ae:83:fa:c0:
12:b1:6a:1d:1b:43:d9:5b:e3:d9:cc:67:23:25:41:23:95:bf:
9b:1d:3b:42:77:eb:bb:ca:d1:f4:91:f7:70:dd:84:4e:9c:7c:
2b:a6:1e:c1:41:d3:89:ad:89:37:4f:0d:bb:fb:a1:01:b6:7d:
d7:7c:db:ca:01:c2:5b:de:06:d4:1d:c7:d8:96:d9:f7:9f:62:
ab:6a:ee:20:0f:fd:88:4f:bd:16:7b:5a:77:83:b8:93:6c:a4:
9d:f5:ea:89:32:de:72:ec:cc:a9:2b:22:b3:00:7a:37:ff:e2:
d2:33:fa:34:28:4a:40:ef:52:0d:2a:54:d6:dd:2d:41:07:15:
e1:ab:cc:f3:02:41:03:bc:0e:25:89:8d:ec:35:2a:85:c8:c6:
5d:07:13:da:2b:76:16:ca:05:b7:db:73:ca:25:92:1f:88:09:
3b:25:b1:04:ff:f9:58:d9:2a:bf:6b:e9:6c:49:52:ae:5b:57:
87:ed:ed:22:45:c1:dd:78:01:fb:1c:cb:da:c0:00:df:79:58:
75:97:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:59 2025 by rpki-client