Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa
File: 3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier: hSdbTQlChpKxhG6XFPbqjA/W1BNfWyKZd6fIFD/K9iI=
Subject key identifier: 20:EB:1C:3B:4A:58:72:7D:CB:F3:9C:44:68:FA:46:97:BF:5F:39:98
Certificate issuer: /CN=374193CBA9F2789EEAD8F4332D8C61B9E274DB1C
Certificate serial: 6E9C8DE2428684BEA73AF699B32A8CB833354DFF
Authority key identifier: 37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa
Signing time: Tue 04 Feb 2025 18:46:30 +0000
ROA not before: Tue 04 Feb 2025 18:41:30 +0000
ROA not after: Tue 03 Feb 2026 18:46:30 +0000
asID: 264750
IP address blocks: 192.141.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:9c:8d:e2:42:86:84:be:a7:3a:f6:99:b3:2a:8c:b8:33:35:4d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374193CBA9F2789EEAD8F4332D8C61B9E274DB1C
Validity
Not Before: Feb 4 18:41:30 2025 GMT
Not After : Feb 3 18:46:30 2026 GMT
Subject: CN=20EB1C3B4A58727DCBF39C4468FA4697BF5F3998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:fc:42:9d:aa:35:73:d0:67:e3:54:74:48:
a5:d7:2d:8b:b9:2a:04:b9:33:1c:91:2b:80:4f:72:
e6:cd:b4:95:0c:6a:b2:c7:3e:0d:0a:c8:80:79:4f:
1a:f3:8c:d3:e7:f1:66:02:00:c2:2e:f5:5b:66:d9:
9b:87:5c:31:28:68:cc:ed:81:98:8c:88:85:16:75:
8d:3a:c8:2d:20:0e:86:cf:fb:82:2f:91:a2:cb:28:
d4:47:09:96:e2:30:54:53:f6:38:1c:68:69:d5:35:
8d:e8:5b:d9:51:c9:67:8b:da:01:55:de:25:05:31:
e8:f0:21:e7:7d:8c:e9:27:7b:c5:16:4f:d6:11:ef:
7f:ca:8d:c2:da:9a:5f:d9:81:4a:34:77:d9:a0:f8:
ab:51:83:82:c8:b8:15:f9:46:f9:02:a6:a9:03:4e:
bb:c7:f5:d7:8e:82:96:57:0c:7a:7f:f8:35:a5:ef:
04:15:c0:98:62:e6:8b:10:32:5d:14:e4:2a:24:12:
c9:c7:0b:5a:4d:bb:05:03:fa:52:56:57:bb:a6:a8:
ff:c6:19:f9:ef:bf:fc:80:3e:02:90:74:9c:2b:84:
6f:de:82:bb:ab:b3:cc:bf:95:47:fb:7a:33:1e:74:
76:59:1e:08:c2:f2:06:d5:aa:19:a5:15:99:e7:e0:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EB:1C:3B:4A:58:72:7D:CB:F3:9C:44:68:FA:46:97:BF:5F:39:98
X509v3 Authority Key Identifier:
keyid:37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.128.0/22
Signature Algorithm: sha256WithRSAEncryption
64:b0:10:d3:41:8f:e6:80:e5:8f:60:4a:bc:42:d0:fc:3d:5c:
db:92:61:e5:62:3c:d9:8f:6d:0a:7a:a8:7d:cd:c2:61:7c:00:
31:4c:cf:cb:4f:96:a0:b8:0a:8f:f5:e7:bb:c9:8b:12:a3:98:
ca:d5:9e:06:8e:b0:f5:90:e5:e7:73:b6:f3:73:71:42:2a:d0:
2d:58:4c:3a:79:b5:e5:ec:d8:61:f5:b6:5a:4f:3b:ee:7e:43:
17:af:0a:92:91:29:9f:30:f0:ab:97:32:55:6b:5b:cf:21:c2:
2c:66:cb:4d:f7:95:c4:59:48:02:7e:1e:3d:01:5d:09:7a:df:
b6:c0:8e:fb:0b:97:08:6f:77:cc:f5:c3:c5:2f:86:5b:7b:9d:
d4:de:37:a0:d6:23:5b:5c:ae:f5:db:c3:78:dc:15:3a:5a:f1:
1e:e5:2a:c0:a8:05:4e:7a:4b:9a:d0:a1:7e:57:78:64:c7:d2:
28:d0:b5:4c:60:d4:7a:45:69:1e:67:73:fe:21:23:2f:79:90:
9e:30:9c:b2:44:03:21:96:6e:1f:38:19:bc:42:b9:de:58:46:
fe:00:82:12:fa:42:f2:4b:ee:d0:f1:22:95:e2:14:f1:f6:0b:
f1:3c:75:0c:21:e1:4f:fc:82:8c:2a:99:4d:0a:b2:36:4b:4c:
f9:79:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:58 2025 by rpki-client