Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3132302e302f32312d3234203d3e203131303134.roa
File: 3139302e31322e3132302e302f32312d3234203d3e203131303134.roa (raw, json)
Hash identifier: owrzXM5b7qmEvwOhqZRohVvbgXdr5TGfmWSYefnBPMg=
Subject key identifier: D0:47:AE:94:78:96:EE:1E:6D:F3:05:17:C2:45:FA:A5:BD:70:4F:83
Certificate issuer: /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial: 0792D30F3E408013A7CBDFDA992326E9182D049A
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3132302e302f32312d3234203d3e203131303134.roa
Signing time: Tue 04 Feb 2025 18:24:55 +0000
ROA not before: Tue 04 Feb 2025 18:19:55 +0000
ROA not after: Tue 03 Feb 2026 18:24:55 +0000
asID: 11014
IP address blocks: 190.12.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:92:d3:0f:3e:40:80:13:a7:cb:df:da:99:23:26:e9:18:2d:04:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Validity
Not Before: Feb 4 18:19:55 2025 GMT
Not After : Feb 3 18:24:55 2026 GMT
Subject: CN=D047AE947896EE1E6DF30517C245FAA5BD704F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:79:0d:41:d2:c6:bb:ff:e2:28:50:02:a2:
46:78:04:b1:56:40:af:6b:65:a5:fd:a0:a5:27:39:
39:d7:10:dd:ad:46:cc:e6:c0:8c:42:8e:d4:04:4a:
cc:d3:0c:a2:3e:64:2b:31:98:49:a9:85:a9:37:c1:
ce:f1:43:4c:33:1a:91:d9:79:88:53:1d:6a:83:b5:
26:a4:55:42:1f:f3:f3:78:f0:3c:dd:1c:f0:4e:70:
ec:00:9b:fe:50:2c:a4:0e:50:d6:2d:04:52:1a:9e:
0d:fb:d8:19:fa:c5:b1:90:16:a4:53:e6:c5:96:4c:
53:48:f4:8e:15:80:56:3e:7f:ae:8b:00:9f:57:c7:
24:16:6f:46:f2:60:cb:67:91:01:5c:bb:3e:34:a7:
93:1e:fb:f9:2b:74:de:97:1a:c9:64:b6:f0:10:78:
5d:ca:b1:56:aa:16:11:57:b4:ec:d2:df:5e:ca:79:
8f:4f:36:96:44:00:20:29:0c:67:f8:8c:90:9f:a4:
c4:a2:31:06:f2:75:e8:a1:d6:92:ee:9f:b5:c0:4b:
bc:df:40:9c:ca:38:b7:87:8c:7c:c5:78:8c:d4:b9:
87:1f:ea:80:ab:b4:8b:8f:61:88:3b:1e:59:54:6d:
54:0d:39:b5:2a:06:69:86:7f:87:dc:82:8f:e5:2f:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:AE:94:78:96:EE:1E:6D:F3:05:17:C2:45:FA:A5:BD:70:4F:83
X509v3 Authority Key Identifier:
keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3132302e302f32312d3234203d3e203131303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.12.120.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:a4:16:e2:2b:e7:60:b1:53:7b:11:66:6c:b8:20:1b:59:43:
be:aa:8f:b3:11:cb:84:10:61:97:15:e8:d6:7f:4e:bf:48:d4:
59:9e:a7:60:f9:23:a7:64:b3:78:c5:ec:d4:77:8d:c3:ef:72:
84:f0:0d:ae:26:46:08:15:a4:8e:8c:96:30:53:c7:c1:d0:bd:
22:33:06:94:8d:f6:49:64:e1:47:89:f3:74:ca:d9:40:ed:d8:
bf:f1:8e:1f:f9:c5:66:d6:85:dc:6c:95:ba:5a:0f:45:ce:fc:
03:a4:ab:22:82:e0:d4:e5:35:73:c4:76:d8:58:f5:00:23:53:
1f:5a:aa:a3:b9:65:47:6d:60:79:88:03:a0:a3:b3:74:53:9f:
e8:fe:62:51:ef:7b:66:e7:f1:82:77:e1:7e:41:d2:c2:0e:f9:
9f:10:73:b5:c5:a2:93:a8:3c:c1:4a:a8:d9:43:1b:52:9b:cd:
5f:01:89:c8:bd:ea:63:0e:1d:74:43:39:5f:c4:b1:a7:59:00:
2d:97:8d:3f:db:b8:7d:99:15:83:6b:1f:57:09:dd:32:53:4e:
62:b6:f1:eb:74:01:31:b6:30:33:2d:60:99:b2:c9:1b:2d:03:
93:d1:87:57:05:94:07:3c:d7:6a:69:37:9f:32:21:16:72:b2:
67:8e:9b:f9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUB5LTDz5AgBOny9/amSMm6RgtBJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM2OTEwRjNDMzk5NUQ3Q0NDMDZBREMyRjE1MkZGRDRB
MTY4RjI0QzAeFw0yNTAyMDQxODE5NTVaFw0yNjAyMDMxODI0NTVaMDMxMTAvBgNV
BAMTKEQwNDdBRTk0Nzg5NkVFMUU2REYzMDUxN0MyNDVGQUE1QkQ3MDRGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClH3kNQdLGu//iKFACokZ4BLFW
QK9rZaX9oKUnOTnXEN2tRszmwIxCjtQESszTDKI+ZCsxmEmphak3wc7xQ0wzGpHZ
eYhTHWqDtSakVUIf8/N48DzdHPBOcOwAm/5QLKQOUNYtBFIang372Bn6xbGQFqRT
5sWWTFNI9I4VgFY+f66LAJ9XxyQWb0byYMtnkQFcuz40p5Me+/krdN6XGslktvAQ
eF3KsVaqFhFXtOzS317KeY9PNpZEACApDGf4jJCfpMSiMQbydeih1pLun7XAS7zf
QJzKOLeHjHzFeIzUuYcf6oCrtIuPYYg7HllUbVQNObUqBmmGf4fcgo/lL8klAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU0EeulHiW7h5t8wUXwkX6pb1wT4MwHwYDVR0j
BBgwFoAUo2kQ88OZXXzMBq3C8VL/1KFo8kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzM5OUM1MTNCNjNBODczNzI3NUMxMjk3QjM3MDkwNEUw
NDcyMDk5N0ZFN0Y4RDEyNEQ5QjU0N0NDM0VERTdBLzAvQTM2OTEwRjNDMzk5NUQ3
Q0NDMDZBREMyRjE1MkZGRDRBMTY4RjI0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzY5MTBGM0MzOTk1RDdDQ0Mw
NkFEQzJGMTUyRkZENEExNjhGMjRDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczOTlDNTEzQjYzQTg3MzcyNzVDMTI5N0IzNzA5MDRFMDQ3MjA5OTdG
RTdGOEQxMjREOUI1NDdDQzNFREU3QS8wLzMxMzkzMDJlMzEzMjJlMzEzMjMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzMTMwMzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA74MeDAN
BgkqhkiG9w0BAQsFAAOCAQEAm6QW4ivnYLFTexFmbLggG1lDvqqPsxHLhBBhlxXo
1n9Ov0jUWZ6nYPkjp2SzeMXs1HeNw+9yhPANriZGCBWkjoyWMFPHwdC9IjMGlI32
SWThR4nzdMrZQO3Yv/GOH/nFZtaF3GyVuloPRc78A6SrIoLg1OU1c8R22Fj1ACNT
H1qqo7llR21geYgDoKOzdFOf6P5iUe97ZufxgnfhfkHSwg75nxBztcWik6g8wUqo
2UMbUpvNXwGJyL3qYw4ddEM5X8Sxp1kALZeNP9u4fZkVg2sfVwndMlNOYrbx63QB
MbYwMy1gmbLJGy0Dk9GHVwWUBzzXamk3nzIhFnKyZ46b+Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:20 2025 by rpki-client