Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS273987.roa
File: AS273987.roa (raw, json)
Hash identifier: UMwzOH6BPb8bK+VuupU55bDWaqsg7MRXghS2mGEzlus=
Subject key identifier: 9A:AD:69:4C:8C:56:D8:57:71:BC:53:51:CF:6D:E6:DA:21:34:41:B2
Certificate issuer: /CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
Certificate serial: 31C891539A351E87AA8AE647DFF8784C4FDB82E8
Authority key identifier: 09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS273987.roa
Signing time: Thu 28 Nov 2024 16:45:00 +0000
ROA not before: Thu 28 Nov 2024 16:40:00 +0000
ROA not after: Thu 27 Nov 2025 16:45:00 +0000
asID: 273987
IP address blocks: 190.171.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c8:91:53:9a:35:1e:87:aa:8a:e6:47:df:f8:78:4c:4f:db:82:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
Validity
Not Before: Nov 28 16:40:00 2024 GMT
Not After : Nov 27 16:45:00 2025 GMT
Subject: CN=9AAD694C8C56D85771BC5351CF6DE6DA213441B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:84:89:23:95:4f:be:45:94:7a:20:5d:12:
99:1a:c3:6f:c8:ee:f7:07:c3:9b:e3:b6:29:40:5c:
3a:09:31:54:70:e2:84:1f:da:28:66:0c:5e:48:ad:
9f:c5:31:ce:35:c2:36:d0:a7:c0:de:bf:09:4e:97:
45:6a:0a:f4:15:17:76:4b:a9:bd:58:e8:ba:10:00:
f9:82:fd:fd:45:7c:42:da:d6:a5:47:18:eb:4d:73:
62:9c:7e:66:37:52:db:04:62:8a:0a:20:90:db:be:
c5:d2:37:0f:ac:ec:ec:5b:12:df:88:d5:37:ca:c0:
aa:25:e3:31:fb:a0:f1:47:78:ee:eb:a2:5c:7a:f5:
23:37:9b:f7:57:15:09:28:b6:0a:b1:80:03:18:90:
26:8e:50:24:1b:cd:32:41:16:82:91:5a:4f:30:f4:
0e:20:87:a9:3d:0a:2c:1a:51:7e:af:48:fd:ae:0d:
72:d5:00:27:3a:9a:2d:3e:9e:8e:d4:d5:8d:10:ee:
35:03:1d:55:9b:50:5d:29:05:ac:fe:91:68:b6:e9:
f7:53:51:1a:b1:4b:54:0b:ef:69:11:ee:8d:00:c2:
c1:18:18:d0:56:ed:03:4d:9c:8e:56:98:23:fc:ae:
77:9e:f9:cd:a1:dc:b5:de:41:5c:31:b7:68:ad:5e:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:69:4C:8C:56:D8:57:71:BC:53:51:CF:6D:E6:DA:21:34:41:B2
X509v3 Authority Key Identifier:
keyid:09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS273987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.171.47.0/24
Signature Algorithm: sha256WithRSAEncryption
88:97:bf:cd:69:d9:7d:a4:98:cf:be:ba:12:58:08:c2:03:cb:
0c:e6:7e:fd:3e:49:f6:b5:af:48:6b:22:4e:2e:2c:d5:f1:26:
21:18:57:5b:65:fd:30:93:12:1a:51:23:ac:b9:a8:b9:a2:1d:
0e:c0:36:1b:2f:05:1c:66:be:5c:b8:44:d1:c1:03:eb:ce:05:
a5:28:09:c0:25:59:ea:8d:71:0f:fa:66:dd:98:e3:04:5d:64:
fd:74:66:01:30:27:c0:6a:1d:50:31:ce:12:a0:7c:bf:62:cf:
df:c2:68:a3:cd:06:61:80:69:9b:a1:ae:a5:24:ed:64:f0:db:
2a:f9:31:43:6c:c6:51:d4:f5:8a:59:04:94:88:ce:dd:8d:74:
ee:d9:90:21:14:ad:8f:f4:13:27:38:2b:44:e7:10:10:99:90:
fe:0c:5d:84:ad:e8:18:0d:e0:67:78:00:20:a1:94:ae:3c:ec:
7d:77:2f:aa:cd:41:de:b6:75:a9:dd:93:b4:97:69:4b:88:a6:
da:79:44:b2:b7:3e:2f:aa:8e:ff:7a:aa:b6:10:f2:87:71:94:
13:d8:e2:50:0e:c9:a5:76:1f:89:1d:5e:19:69:a8:65:fc:89:
09:f5:43:3b:70:fc:ea:27:46:da:02:26:b8:d7:08:69:4f:b1:
66:71:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:39:02 2025 by rpki-client