Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3139312e39372e3130342e302f32322d3234203d3e203532343731.roa
File: 3139312e39372e3130342e302f32322d3234203d3e203532343731.roa (raw, json)
Hash identifier: /AJgZo+XUYpOryVGA8Ui5TGmjRw0x745Ef4ashIPqMY=
Subject key identifier: 8A:0E:92:6F:03:34:2D:8A:29:14:B0:69:E2:B8:55:FB:49:68:78:4E
Certificate issuer: /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial: 35E2246004C758AC69F41AD1DB70E3916E932EA1
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3139312e39372e3130342e302f32322d3234203d3e203532343731.roa
Signing time: Tue 04 Feb 2025 18:17:09 +0000
ROA not before: Tue 04 Feb 2025 18:12:09 +0000
ROA not after: Tue 03 Feb 2026 18:17:09 +0000
asID: 52471
IP address blocks: 191.97.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e2:24:60:04:c7:58:ac:69:f4:1a:d1:db:70:e3:91:6e:93:2e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Validity
Not Before: Feb 4 18:12:09 2025 GMT
Not After : Feb 3 18:17:09 2026 GMT
Subject: CN=8A0E926F03342D8A2914B069E2B855FB4968784E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:9e:37:b2:d3:ed:66:93:33:07:65:38:c6:
dd:cc:66:3f:97:84:95:04:3c:79:2f:da:41:25:c9:
c6:19:3c:f3:3c:04:84:8f:a4:a4:61:57:5e:cb:e8:
ba:d0:1d:2d:aa:31:14:52:b2:eb:f7:d4:9d:9f:52:
2a:0c:93:9f:46:ad:bc:55:45:27:cf:6a:0e:e5:1e:
0a:7b:af:76:77:75:1d:a0:7c:a3:22:a0:8a:12:c9:
77:cf:90:9f:fa:a4:80:d0:e5:8f:9f:bb:b1:da:f0:
bc:14:fc:57:40:29:3f:55:86:e0:fb:34:c7:85:20:
6a:c8:49:a5:3b:57:ce:9e:83:ff:b2:3a:ab:41:04:
da:1d:af:19:af:34:52:0a:23:96:07:06:43:06:9e:
6d:96:96:81:4d:30:50:9f:a4:7f:3f:73:80:2b:9a:
e6:b8:ab:cb:3f:48:12:c4:60:44:3a:73:3d:c9:8a:
0b:2e:95:48:fb:e4:77:9c:c5:43:a9:1e:39:22:46:
47:1c:f9:eb:70:c9:62:7a:8c:9d:79:6c:7d:4b:1c:
a9:66:c0:bb:d9:0d:b7:56:4e:d1:74:df:38:8d:95:
b2:57:29:ad:fe:9e:8c:57:fe:61:10:42:24:f0:97:
c1:ab:a2:b9:8b:36:b6:15:69:8c:d0:b1:21:62:89:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0E:92:6F:03:34:2D:8A:29:14:B0:69:E2:B8:55:FB:49:68:78:4E
X509v3 Authority Key Identifier:
keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3139312e39372e3130342e302f32322d3234203d3e203532343731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.104.0/22
Signature Algorithm: sha256WithRSAEncryption
47:16:10:f4:6f:f0:96:7e:f0:81:9c:fc:19:fe:ab:07:7e:31:
bd:41:16:6d:84:6d:a6:44:c1:14:24:fc:c7:21:5f:76:f7:50:
3d:dd:b2:66:c7:36:69:1c:ea:98:d3:f4:b4:4b:6d:de:6f:f4:
54:96:47:b9:7e:78:48:f2:3f:89:df:2f:f6:29:c8:c0:2f:2b:
91:44:2e:11:8f:02:5c:ff:fe:49:7d:d0:34:69:97:5b:08:99:
39:15:d4:20:22:d4:67:2e:c1:89:65:cc:d2:f9:c4:32:fb:4a:
a9:11:f0:ef:82:20:57:49:cd:68:0e:c8:39:fb:e2:7e:91:4b:
ac:92:ce:43:e8:be:44:c7:f9:7f:d2:b9:01:5e:cc:63:6c:d1:
9a:ca:aa:cb:97:7f:77:ba:da:a3:37:77:ce:53:5a:16:ce:f4:
20:b1:d0:c1:fd:a4:5f:78:83:7b:de:fc:74:8f:d5:ef:f0:6b:
a1:66:ec:7d:2d:9a:9e:a4:e9:8b:a6:f4:6b:e6:2f:e6:c2:6b:
b2:d4:ca:e9:9b:08:d8:68:d5:ea:2d:5d:b9:57:c5:b0:6e:bb:
cf:17:9a:41:22:47:0d:7c:8a:fc:a7:40:54:8b:7f:f0:f1:d1:
43:20:40:11:c9:f9:85:29:84:c8:9d:e6:fb:78:8a:b0:0c:05:
76:b8:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:25:14 2025 by rpki-client