Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/3139302e3138352e36342e302f32302d3234203d3e20323632313831.roa
File: 3139302e3138352e36342e302f32302d3234203d3e20323632313831.roa (raw, json)
Hash identifier: kY9iL2liSGn/u5uZZOqoNfTht+AoO1bd5YeiLBjfB6Q=
Subject key identifier: E4:AF:A6:1E:0A:7C:15:A8:08:A0:B5:35:E6:07:E6:49:B6:3D:62:1F
Certificate issuer: /CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA
Certificate serial: 0472DC6729B5EF085EDE23D245157BA724951995
Authority key identifier: BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/3139302e3138352e36342e302f32302d3234203d3e20323632313831.roa
Signing time: Tue 04 Feb 2025 18:20:23 +0000
ROA not before: Tue 04 Feb 2025 18:15:23 +0000
ROA not after: Tue 03 Feb 2026 18:20:23 +0000
asID: 262181
IP address blocks: 190.185.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:72:dc:67:29:b5:ef:08:5e:de:23:d2:45:15:7b:a7:24:95:19:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA
Validity
Not Before: Feb 4 18:15:23 2025 GMT
Not After : Feb 3 18:20:23 2026 GMT
Subject: CN=E4AFA61E0A7C15A808A0B535E607E649B63D621F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:7d:e1:5d:5e:27:e4:70:21:9b:ca:36:c7:
0f:b1:27:a6:b9:2f:4c:a3:af:6d:0f:66:8b:23:68:
00:e2:6f:06:23:fa:52:b6:75:c4:f2:f1:d7:dc:0b:
5c:c7:b5:ac:6e:aa:06:27:1d:21:ba:83:59:83:50:
03:74:06:81:fd:e1:5c:02:ad:78:e3:ee:d9:30:b5:
c2:ff:c3:4f:6d:8f:65:4a:4c:2b:aa:f8:a7:2d:2a:
ef:54:93:51:97:bf:6e:51:18:fa:39:70:93:1e:80:
7f:52:23:a0:1e:de:e7:b6:25:0c:44:40:25:de:3c:
15:3c:a7:d6:9e:ec:40:51:27:f2:0c:c0:f5:29:d9:
74:46:31:59:46:68:30:66:fe:c2:3c:99:78:9d:bf:
f6:d9:0c:0e:b5:ce:e1:8c:7c:f0:03:45:e1:e6:6f:
15:57:b4:c9:c3:7a:f8:c8:87:db:fb:93:5b:8d:a9:
bb:67:a6:0b:45:cd:b2:46:5c:f0:5d:38:18:a8:08:
8c:1e:4c:58:14:33:a1:c0:fe:ce:ee:87:b4:f1:38:
36:af:c8:c6:d4:e7:d1:96:8d:fc:2d:9e:d5:1c:e2:
67:15:8e:85:8f:af:e3:d2:7c:4f:40:d3:b4:3b:dd:
24:ed:18:0a:00:3b:55:11:2e:8c:9f:3d:f5:17:c0:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AF:A6:1E:0A:7C:15:A8:08:A0:B5:35:E6:07:E6:49:B6:3D:62:1F
X509v3 Authority Key Identifier:
keyid:BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/3139302e3138352e36342e302f32302d3234203d3e20323632313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.185.64.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:e5:e8:b7:0c:c2:6f:d4:a4:96:a0:fb:d6:c5:32:48:65:cb:
96:22:7e:84:a5:37:fd:03:14:4a:de:b3:44:4a:45:ab:eb:37:
60:92:eb:1d:00:49:c0:57:e3:f2:3e:b2:9a:0f:ea:e6:b6:4a:
30:26:84:af:0d:aa:b6:87:eb:5e:fc:bd:ba:9c:f1:49:ab:ac:
6f:86:5d:52:65:d9:36:45:3c:c1:c7:64:5c:9d:c2:59:49:82:
e1:84:43:eb:b2:df:75:8b:52:f2:03:62:31:67:72:d7:35:5b:
eb:21:22:6e:a2:9e:07:58:b6:9e:c7:e7:f6:00:68:a6:f3:a5:
a0:b3:ab:76:1e:51:0e:b7:7c:0f:39:0a:1a:98:bd:47:c2:cc:
fe:02:2e:4f:d7:b8:37:75:6b:e2:44:04:02:6a:09:98:3b:bf:
d2:7e:52:60:b8:55:2c:6b:e5:85:18:5c:60:a2:fb:dc:bc:8e:
2e:49:9e:d4:f4:4d:bc:60:10:d3:97:7f:e1:19:0f:8c:9d:b1:
94:a7:d3:d3:d8:64:a0:ae:83:45:ca:a7:4a:ff:e1:67:cd:39:
97:aa:5c:69:6b:01:a2:92:87:94:a6:ba:fb:97:1a:9a:d6:52:
d3:20:2b:55:69:6c:b1:15:ba:e1:33:76:6e:0b:e4:78:97:43:
0c:c7:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:31 2025 by rpki-client