Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa
File: 3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: Mzb3tcz/ErgZ/FIKGpo/cR88A3QWrLw35JonPNgKD0I=
Subject key identifier: 4F:A6:98:71:AF:C1:15:32:ED:4B:CE:68:29:14:09:BA:7C:C1:40:89
Certificate issuer: /CN=6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF
Certificate serial: 76B64E280F94BD647E4DBA3861E9D944A4926284
Authority key identifier: 66:90:D3:CA:7A:AB:44:AA:19:56:8C:A2:CF:F8:AC:6E:E7:0E:DC:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa
Signing time: Tue 04 Feb 2025 20:06:15 +0000
ROA not before: Tue 04 Feb 2025 20:01:15 +0000
ROA not after: Tue 03 Feb 2026 20:06:15 +0000
asID: 201341
IP address blocks: 168.90.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b6:4e:28:0f:94:bd:64:7e:4d:ba:38:61:e9:d9:44:a4:92:62:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF
Validity
Not Before: Feb 4 20:01:15 2025 GMT
Not After : Feb 3 20:06:15 2026 GMT
Subject: CN=4FA69871AFC11532ED4BCE68291409BA7CC14089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:5d:e2:48:48:e5:34:18:71:2a:4a:90:4f:
eb:fc:f0:dd:eb:6e:17:ec:28:61:8d:75:49:7f:de:
58:bd:3c:7a:d5:1c:58:3c:4b:63:9a:73:91:f1:fa:
69:3e:36:46:6f:ba:c0:89:25:f9:a0:03:c7:f1:0d:
04:cf:58:0a:fb:7e:a1:a9:72:d8:dd:31:d7:c1:5e:
07:2b:70:74:c2:8e:ba:96:87:04:1b:cb:f2:e2:13:
2c:c8:d6:c0:23:ee:14:73:a6:72:94:11:4d:9a:ec:
f8:43:61:94:7c:62:ae:e9:cd:15:d3:cb:95:f3:11:
aa:77:f4:79:19:89:9b:db:eb:86:a3:fd:6e:12:44:
6c:58:e2:da:fe:c5:0c:9d:47:48:f7:a9:19:7f:da:
29:64:0b:01:0a:39:2f:4a:b4:4a:68:5d:bd:d9:84:
c0:78:95:6c:4d:44:d4:35:6f:88:a3:aa:c8:3c:0e:
1e:32:99:22:3e:59:92:fd:bd:b7:e3:3b:dd:5c:bf:
3b:6d:2f:e9:8d:5c:b6:6b:f3:74:fd:e7:70:3a:60:
7a:59:65:3f:4a:31:04:62:bb:5e:a3:36:6d:95:b8:
78:da:2c:a6:3f:2a:57:57:f5:14:27:78:61:fe:a3:
5a:18:75:72:50:e0:71:d5:57:d0:f6:97:7e:1d:76:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A6:98:71:AF:C1:15:32:ED:4B:CE:68:29:14:09:BA:7C:C1:40:89
X509v3 Authority Key Identifier:
keyid:66:90:D3:CA:7A:AB:44:AA:19:56:8C:A2:CF:F8:AC:6E:E7:0E:DC:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.244.0/22
Signature Algorithm: sha256WithRSAEncryption
37:9e:ad:29:87:8b:de:db:85:ce:f2:40:ff:c5:42:5b:69:e2:
cb:60:03:6c:92:39:f9:70:23:68:55:29:99:08:85:88:3e:e7:
3b:8b:31:83:52:13:d5:71:5b:60:a1:48:75:5f:64:ce:93:d2:
0a:a0:29:20:a2:15:15:45:b5:cd:34:a7:ba:5f:c8:62:92:fc:
ea:a5:83:a5:69:d9:ef:0c:dc:0e:15:69:35:cc:a9:f5:e2:5a:
88:5e:8c:56:65:e2:a7:c3:44:c1:3a:fc:a1:91:60:74:c4:15:
15:e8:b0:66:f1:62:a6:72:83:cc:a1:a0:af:65:09:c9:41:25:
3f:9a:0e:6b:0b:29:fa:51:3e:a4:25:33:4e:a8:bb:34:6d:6c:
96:90:7e:3a:9b:d5:09:0e:c5:08:b4:ed:d8:1c:3b:f8:c5:d1:
89:18:fa:89:f2:1a:2a:5b:b7:9a:52:b4:4c:11:b0:97:27:a8:
cc:41:19:51:ba:30:67:c2:d8:31:0d:87:aa:49:4d:c0:53:fe:
aa:34:00:c5:08:7d:f4:9e:a5:84:07:95:fe:b8:de:7d:06:f3:
2a:df:d0:56:ec:a8:0e:0f:39:85:dd:38:f5:83:4e:5a:fd:65:
5a:4a:a5:38:5d:a8:ad:70:a1:36:8b:bb:ac:1f:a1:f2:93:53:
a6:b1:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:40:06 2025 by rpki-client