Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e34302e302f32312d3234203d3e203232373234.roa
File: 3139302e3131302e34302e302f32312d3234203d3e203232373234.roa (raw, json)
Hash identifier: kT7z3m31NO1WZgSSB+N6RwBhGHob/ld5S2WYC3nNSIw=
Subject key identifier: CC:C5:EE:D5:D6:20:2E:4D:0B:59:05:02:18:9C:F9:14:54:33:10:F2
Certificate issuer: /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial: 6DDFC971BFAFBD79CFBBDC2CCFF5ECC6827C358D
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e34302e302f32312d3234203d3e203232373234.roa
Signing time: Tue 04 Feb 2025 20:07:35 +0000
ROA not before: Tue 04 Feb 2025 20:02:35 +0000
ROA not after: Tue 03 Feb 2026 20:07:35 +0000
asID: 22724
IP address blocks: 190.110.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:df:c9:71:bf:af:bd:79:cf:bb:dc:2c:cf:f5:ec:c6:82:7c:35:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Validity
Not Before: Feb 4 20:02:35 2025 GMT
Not After : Feb 3 20:07:35 2026 GMT
Subject: CN=CCC5EED5D6202E4D0B590502189CF914543310F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:ee:01:d8:f5:0d:79:09:5e:ce:a4:bd:80:
45:a1:04:f4:5a:8c:06:52:c7:b0:0f:71:ba:4f:b5:
59:54:82:f1:75:00:8d:0d:80:d3:66:79:1a:b3:f0:
4b:38:0e:d2:85:4d:6c:d5:a0:e1:16:b3:ba:39:92:
6a:54:3f:86:9d:3d:e5:1b:d6:29:76:2d:4d:29:82:
60:45:4f:21:66:ee:9a:18:ca:7d:7b:22:04:99:cd:
d0:f3:d7:61:e3:36:47:ae:b0:25:64:fe:1d:b2:3b:
71:53:57:b5:24:d6:48:f5:8a:a2:cb:4c:bb:e2:55:
5d:10:49:10:b9:c4:09:6a:a5:66:69:29:04:09:8c:
b4:da:89:82:5c:34:97:cb:06:ce:58:fd:c7:b3:e7:
3d:39:f2:9b:9f:db:a6:65:b0:55:58:db:85:e9:79:
ab:a1:06:f5:49:21:ec:9d:d5:f4:19:42:63:30:66:
26:f1:e0:08:a1:e4:d8:0b:8c:8a:46:5b:d7:72:89:
13:11:ba:96:7b:14:6b:22:3e:22:3c:42:dc:17:0b:
c9:0d:0b:b3:fa:41:05:e1:8e:d4:8b:3c:bc:8b:bd:
3c:26:f2:19:85:ba:fe:f9:9c:93:2b:34:af:11:59:
68:28:fb:9b:c1:0b:8a:1f:da:f6:c6:6f:6b:4b:67:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C5:EE:D5:D6:20:2E:4D:0B:59:05:02:18:9C:F9:14:54:33:10:F2
X509v3 Authority Key Identifier:
keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e34302e302f32312d3234203d3e203232373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.40.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:ed:48:b7:7f:6a:36:52:e5:ae:f5:3e:96:7f:90:15:f0:3d:
55:b8:10:5e:4e:31:fc:8b:1e:8c:c1:07:8a:a1:28:35:ec:42:
64:02:9f:95:a5:40:a2:97:61:f6:1f:9c:62:fb:c4:41:35:c6:
34:83:64:d6:88:68:82:76:12:2b:27:2d:f9:a6:d3:ba:5a:d9:
a6:29:ec:32:af:a6:73:9f:bd:1b:12:62:d7:5e:94:26:d5:70:
63:9b:47:d7:4c:c1:e0:e9:c9:ce:84:8b:7e:83:8e:be:b2:de:
ae:a0:e8:8f:76:64:22:4e:cd:17:3e:71:9f:0c:61:d2:46:e7:
00:6d:0a:7b:05:b2:d1:53:17:f4:dd:70:e0:e9:68:de:3a:e5:
32:8b:a7:15:16:22:7e:4d:bd:2c:17:34:44:fe:88:8d:f5:39:
56:f8:e1:ff:65:2b:79:19:6e:24:d3:4e:89:d5:b0:79:2b:91:
24:68:7b:06:81:14:03:ee:2c:31:af:95:eb:53:59:6a:9f:3d:
ea:d8:88:f4:f8:6b:dc:44:0e:46:f9:51:4c:83:ed:d9:4a:f2:
6d:e3:69:88:7d:ad:ef:9a:ac:be:7e:bd:67:32:53:d7:ff:1e:
04:d2:b8:9a:43:11:2b:3a:23:3b:2c:3a:4d:77:6e:41:d2:5d:
01:35:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:46:09 2025 by rpki-client