Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231312e302f32342d3234203d3e203532323533.roa
File: 3139302e3130382e3231312e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier: 2dk9ECpkRr71Q/bh19O2W35yn2KAufP7lF2976gAXpk=
Subject key identifier: FF:96:10:DF:63:BD:5B:69:C0:99:5A:74:9D:03:82:E1:BE:77:52:83
Certificate issuer: /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial: 54E2AA34D7B263F1FBC0B1D931972BB7BAD982B8
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231312e302f32342d3234203d3e203532323533.roa
Signing time: Tue 04 Feb 2025 18:28:40 +0000
ROA not before: Tue 04 Feb 2025 18:23:40 +0000
ROA not after: Tue 03 Feb 2026 18:28:40 +0000
asID: 52253
IP address blocks: 190.108.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e2:aa:34:d7:b2:63:f1:fb:c0:b1:d9:31:97:2b:b7:ba:d9:82:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Validity
Not Before: Feb 4 18:23:40 2025 GMT
Not After : Feb 3 18:28:40 2026 GMT
Subject: CN=FF9610DF63BD5B69C0995A749D0382E1BE775283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:4d:ec:fc:f2:21:a2:2b:78:98:32:0a:e5:
87:75:74:fc:ed:0a:ef:8b:2b:50:64:34:f1:bf:8c:
e2:c7:bd:f4:65:d8:67:92:35:61:70:87:44:b8:f2:
42:a6:45:81:b8:02:b7:1a:7b:15:4e:c0:7c:00:f4:
d5:43:81:bf:3e:84:29:b6:9f:55:5c:aa:d8:fe:ba:
6f:70:98:7a:6f:7c:4e:f5:90:ba:92:53:a5:44:db:
af:92:1e:75:a8:cc:3f:c0:9d:dc:03:5a:9f:f6:f1:
9c:67:e5:db:16:4c:7f:e2:96:82:74:ac:c3:23:14:
e2:cd:1d:fe:99:1c:05:1d:f5:9b:33:e6:3c:ac:da:
3d:11:75:93:79:51:4d:6e:e8:14:4a:3d:c1:28:20:
3a:a3:8a:35:d3:27:e0:56:bd:10:e1:f0:0f:3d:49:
20:44:d5:e2:e4:cd:17:c2:7e:de:cd:22:ae:07:dc:
7d:ac:f2:84:43:64:cb:96:ea:e2:79:44:a8:7f:c1:
14:4e:52:81:30:16:14:10:52:ca:bf:62:2b:90:e4:
cb:21:68:7a:52:84:de:f4:91:5e:79:0c:d5:e9:71:
5e:bb:22:15:cf:bc:ac:f3:28:af:d5:61:ea:8c:77:
de:b5:5b:a4:22:62:c4:76:a5:02:1d:9e:18:16:da:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:96:10:DF:63:BD:5B:69:C0:99:5A:74:9D:03:82:E1:BE:77:52:83
X509v3 Authority Key Identifier:
keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231312e302f32342d3234203d3e203532323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.211.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a1:36:e0:a8:c5:0a:41:3c:f1:ab:e0:37:ee:a2:71:36:9c:
e1:a6:15:c2:c6:91:e5:2e:ba:fe:3b:87:f7:db:9d:d0:b1:bb:
84:c4:2b:eb:1d:9d:a2:68:94:61:04:c0:52:75:6d:99:58:ee:
3e:ee:56:aa:3e:7b:75:83:7b:3c:6d:f1:20:ff:08:c8:79:9c:
fc:e7:94:0c:b8:fb:10:83:fd:0e:ee:e0:41:ae:e1:75:2e:a3:
0c:bd:4b:e9:a4:ea:ba:a5:19:45:f0:9b:d6:a2:53:57:aa:59:
57:bf:67:12:cf:8e:d0:84:ae:5f:ca:bf:45:b8:38:a7:47:d1:
10:80:ba:62:bd:a6:40:7f:6f:ad:02:a4:f2:f5:4a:3f:62:34:
98:cc:0c:3f:30:7e:d6:2c:ba:0d:1c:d0:7c:e4:54:22:b6:63:
64:3d:35:e7:e8:81:fb:ce:8a:58:16:ab:ec:e1:dc:38:d2:7d:
b2:3f:d3:13:e5:a7:21:53:85:b4:24:93:4e:21:9f:14:61:5f:
63:1a:64:6d:50:01:76:3c:2b:6a:d3:9a:7e:14:bc:f3:d5:06:
89:ad:31:70:34:f1:34:11:73:72:b4:34:d9:ac:54:52:78:1e:
54:43:bd:5c:a0:18:b5:81:a0:7d:50:a0:81:e6:e7:02:8d:b7:
35:bd:61:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:56 2025 by rpki-client