Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3234203d3e20323632313936.roa
File: 3139302e342e3131322e302f32302d3234203d3e20323632313936.roa (raw, json)
Hash identifier: HmC7SJJRS7pOVMstRTMLTLq2HhXcJZN30yxOnCGkBtU=
Subject key identifier: 64:03:7D:B9:B3:5F:3B:21:BB:73:89:1B:D3:06:15:34:BF:65:53:84
Certificate issuer: /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial: 7CF81E5844E6D4B747E86D8A01AEE9D363C5703A
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3234203d3e20323632313936.roa
Signing time: Wed 04 Dec 2024 19:25:01 +0000
ROA not before: Wed 04 Dec 2024 19:20:01 +0000
ROA not after: Wed 03 Dec 2025 19:25:01 +0000
asID: 262196
IP address blocks: 190.4.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f8:1e:58:44:e6:d4:b7:47:e8:6d:8a:01:ae:e9:d3:63:c5:70:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
Validity
Not Before: Dec 4 19:20:01 2024 GMT
Not After : Dec 3 19:25:01 2025 GMT
Subject: CN=64037DB9B35F3B21BB73891BD3061534BF655384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:b3:b3:b5:46:fd:d2:7c:64:38:74:3a:2d:
7a:e6:72:d8:7e:e4:32:f0:a5:b1:7f:a8:ed:5f:f3:
b7:1c:73:b6:92:53:0a:80:d3:63:28:01:80:e2:a5:
a7:11:da:3b:a5:43:b0:61:e1:5e:47:ae:2c:6c:47:
42:c4:ff:4a:9f:40:d1:5d:b9:bc:2d:72:68:45:0a:
eb:d6:73:db:4d:76:9e:e2:19:6d:b7:16:81:1f:05:
f0:06:9a:da:83:6a:3f:b2:7c:5e:76:03:34:36:79:
9d:13:21:c3:3c:fe:da:fc:fa:91:45:23:f9:3f:db:
80:dd:a8:61:ca:ba:72:33:12:78:b2:8f:46:7f:1b:
77:63:06:a4:1a:f9:f8:1b:a7:d7:01:b2:97:14:ef:
84:04:91:b1:b4:b2:83:cb:2f:6e:a5:d9:2b:0b:a5:
d3:a9:32:41:0e:e3:c9:c4:db:37:f1:8c:ef:15:69:
e1:09:55:aa:65:90:7b:34:5a:76:71:bd:c4:24:6a:
cc:f9:a2:cf:32:59:65:41:2a:91:9c:18:f2:5b:6c:
75:41:01:82:be:b1:c3:11:ca:c0:53:85:eb:0f:f3:
c2:a1:a1:a7:85:4b:a6:88:2a:bb:c2:0c:b1:50:33:
de:9f:71:23:a1:eb:62:e6:10:10:1d:a5:99:08:b1:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:03:7D:B9:B3:5F:3B:21:BB:73:89:1B:D3:06:15:34:BF:65:53:84
X509v3 Authority Key Identifier:
keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e342e3131322e302f32302d3234203d3e20323632313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.112.0/20
Signature Algorithm: sha256WithRSAEncryption
45:7b:7e:62:59:aa:38:d3:19:fa:3c:31:99:6d:f0:1e:92:12:
91:17:4e:70:e2:e0:f9:7f:80:0b:05:d6:2f:85:42:28:56:bb:
af:85:21:bd:30:69:ec:94:c7:f1:69:3b:79:5f:90:79:3d:78:
2f:24:be:85:4c:11:14:d1:00:6b:34:7d:d8:b4:70:9e:28:d8:
cf:35:9b:04:d1:38:09:1f:10:cb:34:d2:27:96:8a:a1:06:56:
a5:d1:a4:35:ac:76:8f:d2:cf:36:1c:0d:d3:e0:c1:86:01:d9:
0f:9d:9b:95:d4:f5:30:fe:56:d2:ce:46:a4:de:71:b9:79:4f:
0c:c1:30:a1:8f:d5:8d:47:05:3c:c6:c3:0c:1e:cb:89:1d:e2:
c1:15:49:e1:c2:79:ff:68:08:a6:cf:fd:fd:fc:9d:3c:f8:01:
09:12:34:f8:64:96:b2:d4:08:35:5b:2f:89:8e:82:9a:7d:a7:
09:e7:69:07:9d:ff:8c:95:fd:29:a0:30:7b:97:d8:c8:b0:e9:
5d:5e:af:94:35:1b:b3:39:db:1d:7f:40:24:47:36:d7:1b:5d:
94:e9:fe:ab:e0:00:d6:df:9f:2b:d8:b0:53:82:f1:1b:37:a8:
e1:a1:71:a2:bd:97:cf:53:1f:43:08:d9:1f:f6:77:ef:eb:f6:
35:51:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:43 2025 by rpki-client