Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e34392e302f32342d3234203d3e20323731393532.roa
File: 3139302e3130392e34392e302f32342d3234203d3e20323731393532.roa (raw, json)
Hash identifier: lSyUIWqQm6WB+w98DIiANAUZ+j0FV0UdCrCLg7JG5RY=
Subject key identifier: 88:9B:4E:23:37:3F:1E:D2:F3:6A:24:F3:18:23:CD:D9:D7:46:80:C8
Certificate issuer: /CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
Certificate serial: 645AAF835F6106C94705361DE9D7F8457EE4D546
Authority key identifier: 72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e34392e302f32342d3234203d3e20323731393532.roa
Signing time: Tue 04 Feb 2025 20:05:28 +0000
ROA not before: Tue 04 Feb 2025 20:00:28 +0000
ROA not after: Tue 03 Feb 2026 20:05:28 +0000
asID: 271952
IP address blocks: 190.109.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:5a:af:83:5f:61:06:c9:47:05:36:1d:e9:d7:f8:45:7e:e4:d5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
Validity
Not Before: Feb 4 20:00:28 2025 GMT
Not After : Feb 3 20:05:28 2026 GMT
Subject: CN=889B4E23373F1ED2F36A24F31823CDD9D74680C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:65:9f:25:87:e0:71:43:c4:d8:0c:cf:32:
b4:3a:19:27:66:6c:88:35:5d:37:05:a7:9e:b1:44:
63:03:33:f5:8e:98:0e:c0:88:d4:a2:94:2a:ed:3c:
e0:83:ec:ed:7a:50:f5:fb:cf:06:cf:70:3d:fe:dd:
e7:42:87:16:96:f7:c9:2f:0e:55:ee:5e:61:64:ae:
5c:52:76:41:e9:9f:1c:87:05:6a:c9:fc:d2:aa:ea:
17:c7:01:f9:d0:1d:54:f7:2b:d0:40:72:d7:d0:42:
1d:47:24:8e:69:a6:1c:82:b6:cf:12:7a:5e:23:f2:
c5:f6:b6:12:2b:a4:ce:67:3a:b0:08:93:10:fd:0b:
c9:ca:a9:a2:29:eb:b3:e3:78:7c:26:b3:b9:45:cc:
21:e5:b4:74:f0:9f:14:af:ae:e8:e1:41:a2:4d:1b:
0b:65:31:b7:47:e2:dc:be:7e:aa:85:91:75:7e:8a:
09:45:f9:3b:2b:0d:fe:4e:1d:1c:7f:88:cf:16:76:
48:0e:27:7e:53:72:e1:15:7c:e3:a8:80:f8:f0:95:
4d:c7:92:c7:7b:c9:13:54:e0:d2:d5:30:dd:1c:39:
f2:a1:59:82:dc:f1:3b:00:2a:3f:cc:53:37:e2:b4:
b8:19:4b:0d:88:e1:43:7e:ec:bd:ab:64:1d:45:ce:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9B:4E:23:37:3F:1E:D2:F3:6A:24:F3:18:23:CD:D9:D7:46:80:C8
X509v3 Authority Key Identifier:
keyid:72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e34392e302f32342d3234203d3e20323731393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.109.49.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8c:2a:1e:18:61:6b:b7:3c:16:e7:17:42:26:b6:ac:56:40:
62:04:af:4c:d5:41:35:9e:58:a9:61:47:f2:ca:b3:24:a2:81:
62:08:24:e9:e4:b8:fc:75:98:6e:04:6f:05:a2:bb:4b:97:45:
db:f7:2b:7e:51:31:e0:24:37:7f:d1:1b:f2:61:33:ad:3e:75:
7e:c1:6e:dc:c8:f3:1b:dd:88:26:04:32:65:db:8a:d7:6d:0d:
ef:38:1b:be:85:65:c4:1d:b8:af:f5:f5:ac:4e:8a:73:b3:e7:
aa:cd:59:6d:22:eb:7b:cc:dc:25:4c:8b:13:2c:22:2c:1a:3c:
54:aa:f4:6c:b8:0e:39:39:2d:2a:60:4e:9c:2f:72:11:eb:51:
26:52:e1:9f:39:7c:bf:aa:60:76:55:99:0e:2b:74:67:f9:fb:
59:e2:9f:64:eb:61:bd:3d:fe:f6:85:2b:68:29:7a:27:ec:25:
fe:8a:22:aa:c2:11:7e:3f:83:23:0a:8c:5f:35:c2:1c:60:5f:
e8:57:fc:00:70:2c:60:f0:b7:e1:a6:3f:49:79:d9:5b:42:5e:
ec:3b:80:8f:30:b3:3a:d8:68:b1:4c:aa:18:a1:2f:51:6c:0c:
08:de:a7:a2:25:32:51:c0:94:60:18:32:49:e8:96:05:83:22:
35:8a:96:ab
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZFqvg19hBslHBTYd6df4RX7k1UYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI4RUU2RkY0NDQ5RDgzMEE3REQzNUFDRTQ3Nzc4QUI4
Q0EwRTI3NDAeFw0yNTAyMDQyMDAwMjhaFw0yNjAyMDMyMDA1MjhaMDMxMTAvBgNV
BAMTKDg4OUI0RTIzMzczRjFFRDJGMzZBMjRGMzE4MjNDREQ5RDc0NjgwQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1GWfJYfgcUPE2AzPMrQ6GSdm
bIg1XTcFp56xRGMDM/WOmA7AiNSilCrtPOCD7O16UPX7zwbPcD3+3edChxaW98kv
DlXuXmFkrlxSdkHpnxyHBWrJ/NKq6hfHAfnQHVT3K9BActfQQh1HJI5pphyCts8S
el4j8sX2thIrpM5nOrAIkxD9C8nKqaIp67PjeHwms7lFzCHltHTwnxSvrujhQaJN
GwtlMbdH4ty+fqqFkXV+iglF+TsrDf5OHRx/iM8WdkgOJ35TcuEVfOOogPjwlU3H
ksd7yRNU4NLVMN0cOfKhWYLc8TsAKj/MUzfitLgZSw2I4UN+7L2rZB1FzvnJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUiJtOIzc/HtLzaiTzGCPN2ddGgMgwHwYDVR0j
BBgwFoAUco7m/0RJ2DCn3TWs5Hd4q4yg4nQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84Q0M5MzJCMDNENjk1MkQ5Q0ZCN0RENDg4NjgwRDFFNjhE
N0QzMDI3M0U3NUE4MjU4OEE0MUYwM0Y5RUUyQjE0LzAvNzI4RUU2RkY0NDQ5RDgz
MEE3REQzNUFDRTQ3Nzc4QUI4Q0EwRTI3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjhFRTZGRjQ0NDlEODMwQTdE
RDM1QUNFNDc3NzhBQjhDQTBFMjc0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOENDOTMyQjAzRDY5NTJEOUNGQjdERDQ4ODY4MEQxRTY4RDdEMzAyNzNF
NzVBODI1ODhBNDFGMDNGOUVFMkIxNC8wLzMxMzkzMDJlMzEzMDM5MmUzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvm0x
MA0GCSqGSIb3DQEBCwUAA4IBAQBSjCoeGGFrtzwW5xdCJrasVkBiBK9M1UE1nlip
YUfyyrMkooFiCCTp5Lj8dZhuBG8FortLl0Xb9yt+UTHgJDd/0RvyYTOtPnV+wW7c
yPMb3YgmBDJl24rXbQ3vOBu+hWXEHbiv9fWsTopzs+eqzVltIut7zNwlTIsTLCIs
GjxUqvRsuA45OS0qYE6cL3IR61EmUuGfOXy/qmB2VZkOK3Rn+ftZ4p9k62G9Pf72
hStoKXon7CX+iiKqwhF+P4MjCoxfNcIcYF/oV/wAcCxg8Lfhpj9JedlbQl7sO4CP
MLM62GixTKoYoS9RbAwI3qeiJTJRwJRgGDJJ6JYFgyI1ipar
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:04 2025 by rpki-client