Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e203230323037.roa
File: 3139302e39332e3132352e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier: x9X0oqrbdIZdXHWStSTnMkzyTbUzhCMnD5q6+AZTnX4=
Subject key identifier: 89:64:C3:6D:38:89:22:46:E0:80:DD:B5:87:DD:7D:F5:78:CD:F6:0D
Certificate issuer: /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial: 08705FCD49EF36180ABE4AEA4E59181E0AD845A2
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e203230323037.roa
Signing time: Wed 12 Mar 2025 15:40:00 +0000
ROA not before: Wed 12 Mar 2025 15:35:00 +0000
ROA not after: Wed 11 Mar 2026 15:40:00 +0000
asID: 20207
IP address blocks: 190.93.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:70:5f:cd:49:ef:36:18:0a:be:4a:ea:4e:59:18:1e:0a:d8:45:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Validity
Not Before: Mar 12 15:35:00 2025 GMT
Not After : Mar 11 15:40:00 2026 GMT
Subject: CN=8964C36D38892246E080DDB587DD7DF578CDF60D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:a1:48:24:79:a4:f6:b8:c9:0b:5e:4a:24:
51:8b:cc:12:87:91:b4:2f:69:c4:d4:6f:58:4d:24:
ec:da:2d:11:9f:b4:61:64:a5:0f:02:2d:2c:fe:b1:
d1:e8:ef:ba:a2:d8:37:b2:2e:1f:30:ef:5e:ed:f9:
ba:20:19:84:c1:27:76:99:12:a3:8d:c9:4d:a1:be:
70:ab:e8:07:93:38:6e:22:6e:e9:70:ce:06:05:19:
97:05:91:4d:5a:54:53:58:8c:50:1d:bb:63:0d:12:
ae:20:9e:f1:19:f5:b9:32:6d:57:50:98:92:b0:8f:
6f:90:6c:85:06:7a:53:3a:30:1b:da:34:1d:90:5b:
d1:92:ae:f3:e6:bc:7e:f9:e6:86:6b:5d:c7:82:d5:
75:d4:c8:23:f0:00:09:ec:01:86:56:cd:1b:7d:3a:
ab:aa:c9:53:ec:9b:a1:c3:5f:1a:02:fc:38:86:2a:
2b:cb:fd:7d:c5:0b:1d:85:33:6c:33:a9:d7:45:6d:
05:0a:60:60:4a:c7:bd:13:27:6c:fb:d0:b9:4b:5b:
75:be:f2:5d:d1:94:ac:d8:2d:b0:7f:07:ac:e0:88:
01:20:b8:da:5e:58:75:4e:4d:2e:44:33:0d:e6:50:
8b:62:5a:4a:f2:d1:5a:4e:fd:c0:24:84:5a:69:96:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:64:C3:6D:38:89:22:46:E0:80:DD:B5:87:DD:7D:F5:78:CD:F6:0D
X509v3 Authority Key Identifier:
keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e203230323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:dd:65:67:81:97:88:fe:dc:89:5c:75:11:81:6f:69:d3:e1:
0f:7a:be:ea:73:50:a1:79:78:50:6c:eb:bc:b9:e7:68:97:ca:
c5:a5:4d:c3:4b:02:bf:76:89:73:6e:0a:17:00:e1:36:5f:ff:
f6:c5:99:e4:44:cc:a6:bd:22:fa:f8:b3:7f:da:1f:ce:ac:e8:
d8:7f:20:1a:74:25:e8:26:17:da:b5:78:bd:2d:a9:69:43:11:
fc:1a:8d:89:7b:61:46:75:71:b8:0c:1b:f8:57:08:8d:1b:6f:
64:16:2c:19:a9:e2:c9:da:d4:d6:69:96:1c:70:9f:f5:f5:91:
ad:93:79:43:16:41:59:ff:92:5b:5d:04:4a:fd:0d:2a:92:bb:
d6:4f:76:89:55:38:38:81:8b:00:d8:79:c9:ee:ab:62:c0:4c:
b3:2d:fd:3a:2d:23:87:45:ce:0b:eb:19:00:6c:57:b2:db:74:
22:35:9b:70:8b:48:ae:a4:07:91:59:46:9e:f3:3d:e5:e9:31:
8b:7c:d9:b9:a0:01:01:28:67:c4:52:db:06:bf:9c:b3:2b:b8:
7b:ac:77:2b:05:fa:26:45:9c:74:c3:fd:39:54:1b:d7:2c:fd:
fb:f7:12:b1:89:d1:40:65:69:c0:83:a9:0a:ca:49:d1:2f:c8:
e0:fc:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:06 2025 by rpki-client