Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS19905.roa
File: AS19905.roa (raw, json)
Hash identifier: Tvtx6X9lN7MoS/IOtRJ4soYYYOafancUc4K4QQ+J4Bc=
Subject key identifier: FC:72:BE:37:BE:60:D6:6C:A5:58:0A:E9:50:7F:24:EF:75:77:EE:2C
Certificate issuer: /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial: 303B5DF3C2778B4AF1D237D3CFC3CD64137377F5
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS19905.roa
Signing time: Wed 26 Mar 2025 15:12:56 +0000
ROA not before: Wed 26 Mar 2025 15:07:56 +0000
ROA not after: Wed 25 Mar 2026 15:12:56 +0000
asID: 19905
IP address blocks: 181.211.6.0/24 maxlen: 24
190.152.52.0/24 maxlen: 24
200.125.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3b:5d:f3:c2:77:8b:4a:f1:d2:37:d3:cf:c3:cd:64:13:73:77:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Validity
Not Before: Mar 26 15:07:56 2025 GMT
Not After : Mar 25 15:12:56 2026 GMT
Subject: CN=FC72BE37BE60D66CA5580AE9507F24EF7577EE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2d:5f:08:50:1e:34:a2:b3:72:ff:d3:f3:d5:
ce:ca:c0:2a:4a:2f:d7:6f:2b:e1:f1:e6:17:04:2e:
62:03:81:2d:b4:e1:c3:85:ca:9b:15:f0:34:b4:57:
9b:89:58:14:3e:e6:8b:eb:b6:5d:93:8a:13:d9:80:
69:1b:19:fe:21:eb:74:37:62:7f:d7:85:28:04:67:
6e:85:2c:e2:f1:59:44:d4:0b:1d:18:fd:f9:ee:5b:
4e:75:2e:85:27:ec:6d:cd:1b:3e:24:df:fb:a0:e0:
e6:8b:32:c4:2c:6c:de:d2:ab:bc:9a:af:cd:5d:ea:
27:d3:e2:fc:2a:86:d8:ec:25:69:3a:28:84:63:90:
09:66:f5:cc:1d:d1:e1:78:a9:78:45:33:fb:2b:26:
0d:01:08:46:da:dd:25:7e:52:ad:5c:75:e5:a7:35:
13:0c:b1:f7:86:04:2c:a4:67:7b:d7:bd:2f:69:63:
af:bb:24:6d:3b:3d:6b:26:6b:90:8e:86:0e:4e:4c:
e7:85:c4:ed:65:5b:c7:1c:b9:cc:13:50:cf:03:7b:
8d:55:5a:07:d0:3c:8d:fe:83:51:44:54:70:af:0b:
8f:f5:fa:b3:6f:ac:0e:1c:2a:b5:ce:74:05:a4:87:
55:a6:11:43:db:e3:88:7a:f0:f8:71:c5:29:ba:58:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:72:BE:37:BE:60:D6:6C:A5:58:0A:E9:50:7F:24:EF:75:77:EE:2C
X509v3 Authority Key Identifier:
keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS19905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.211.6.0/24
190.152.52.0/24
200.125.208.0/24
Signature Algorithm: sha256WithRSAEncryption
53:88:17:7a:e4:bb:ed:09:6e:3f:8d:f7:e2:15:64:1d:09:a3:
9b:2e:2d:c5:4d:3b:17:9b:97:09:07:a0:56:0c:e8:a4:14:68:
ba:fa:c9:1c:f6:80:66:65:53:02:ef:98:f9:30:ec:c4:76:1b:
64:cf:4e:a7:ec:53:98:68:0f:60:0c:09:be:97:16:05:d0:01:
e7:bd:f7:ab:b3:1e:85:7e:d3:d9:d4:b0:25:d3:a3:20:a7:f7:
87:d6:36:35:20:c7:46:48:b5:35:83:d9:6e:b3:e4:3b:18:ef:
ec:38:74:ba:5e:91:0e:18:ae:4b:74:e5:b4:46:05:8e:ba:79:
c6:60:8e:91:33:43:18:1f:34:dc:52:ae:e9:c5:27:c4:cc:48:
c1:13:a7:66:c0:f6:3d:eb:e6:45:2c:83:79:03:ca:e4:85:60:
12:75:95:c1:78:cd:26:d3:1c:24:9d:bb:ed:6b:09:a3:96:21:
71:06:3a:84:33:9f:a3:96:76:8f:6b:bd:e6:e4:93:67:20:a2:
dc:2c:ab:96:89:19:74:60:bf:13:35:82:7d:53:af:5e:84:20:
25:06:98:b2:7c:d8:49:15:4b:c0:6f:12:05:73:d4:f2:8d:b6:
45:d4:ee:15:c4:f8:d2:d5:3b:3b:71:b9:15:54:ba:29:d9:cd:
16:85:c7:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:39 2025 by rpki-client