Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32322d3232203d3e203532343933.roa
File: 3136382e39302e37322e302f32322d3232203d3e203532343933.roa (raw, json)
Hash identifier: TNwZmwnSBldmh04wf341Y5sl8dHEQGP5vWwE21NuumY=
Subject key identifier: BA:D4:01:A5:A3:08:4D:1F:14:57:B5:24:99:90:9D:4D:2B:D5:92:23
Certificate issuer: /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial: 43CFBBC969D6E959C27E49ED4126707BF9E137C0
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32322d3232203d3e203532343933.roa
Signing time: Tue 04 Feb 2025 18:13:35 +0000
ROA not before: Tue 04 Feb 2025 18:08:35 +0000
ROA not after: Tue 03 Feb 2026 18:13:35 +0000
asID: 52493
IP address blocks: 168.90.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cf:bb:c9:69:d6:e9:59:c2:7e:49:ed:41:26:70:7b:f9:e1:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Validity
Not Before: Feb 4 18:08:35 2025 GMT
Not After : Feb 3 18:13:35 2026 GMT
Subject: CN=BAD401A5A3084D1F1457B52499909D4D2BD59223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:8d:41:7f:ba:ff:8f:77:cb:ea:8f:0f:0f:
c3:27:a3:8b:7c:eb:45:8e:44:8d:11:6a:7b:af:f7:
51:be:9b:42:ef:02:1f:da:4e:67:3b:1e:d9:e1:aa:
a0:e8:11:99:8d:37:22:12:e1:fb:0b:55:69:05:a9:
b6:25:20:71:8b:c4:f8:94:0c:1e:0c:91:ab:7d:07:
c4:1c:c6:84:bb:91:5e:eb:8c:93:7f:57:02:46:89:
10:20:d5:bf:e6:43:cd:18:00:56:d2:aa:74:d7:6e:
c5:11:e2:2a:32:8a:8a:7d:45:ac:98:f4:66:84:6e:
ee:98:b8:ea:99:90:2b:1e:99:89:6e:25:51:9e:37:
22:56:5b:42:a0:9f:0b:11:11:49:ea:64:aa:3c:56:
30:bb:cc:89:bb:92:e7:27:2e:0e:59:15:63:52:3e:
31:c0:28:f3:fd:e2:9a:34:82:43:dc:0c:85:59:90:
b5:26:5a:ff:8c:63:fa:f9:32:ce:9e:a3:64:16:8d:
a0:79:2f:10:aa:56:61:ef:7a:5a:f4:88:f0:ab:56:
ed:54:d3:1d:c9:90:bc:10:02:c8:0d:1a:51:fd:34:
0c:8d:42:6c:83:4a:3c:66:36:d3:a2:58:25:48:c8:
97:46:68:ad:f4:f6:ef:dc:37:a8:4f:a5:9e:ba:d5:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:01:A5:A3:08:4D:1F:14:57:B5:24:99:90:9D:4D:2B:D5:92:23
X509v3 Authority Key Identifier:
keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32322d3232203d3e203532343933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:bb:91:1d:51:6d:aa:1d:80:69:94:01:86:e1:81:3f:d0:44:
69:c5:7c:fd:b8:82:89:be:ac:8b:a9:5d:8c:3d:f9:a2:f6:bf:
77:f1:32:56:95:0d:e9:96:8b:90:04:7d:4e:25:bd:73:55:85:
5a:d3:2c:e1:82:be:4d:7f:c2:d2:33:64:3f:91:87:d1:74:de:
89:de:5d:84:05:32:bd:1e:f6:48:da:28:82:95:73:64:82:d1:
af:2c:06:70:4c:9f:1c:56:ed:b9:0e:03:ba:0d:69:3c:54:25:
7f:ce:f8:c6:06:1f:8a:34:93:4a:a7:c4:2c:73:f8:92:cc:22:
d4:71:28:c6:92:a5:83:a3:f6:57:b7:d3:11:49:f0:81:20:a0:
82:1e:8c:d2:f6:47:e6:74:e2:70:75:0f:09:6f:9a:11:ae:c2:
1e:9c:50:37:97:13:f0:bd:91:99:5b:ef:02:9c:55:45:1b:3b:
53:a5:71:62:5f:54:ae:51:1e:66:b5:22:de:c9:1e:4d:27:b5:
9e:1c:2f:80:3a:3b:b3:ae:8e:1a:d0:0d:02:6d:c4:ab:2f:99:
4b:41:f6:28:93:80:79:13:0f:12:d4:d9:b4:b1:07:32:e3:77:
9f:b1:83:5b:c7:b2:32:fe:04:14:bd:9b:21:73:f1:3b:86:5a:
da:c0:a2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:18 2025 by rpki-client