Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/3139302e3130382e36342e302f32312d3234203d3e203237373430.roa
File: 3139302e3130382e36342e302f32312d3234203d3e203237373430.roa (raw, json)
Hash identifier: +6Lrcn9wtCAKhPmaJpwAkFs3/f2FaKDHkeUsatILNHQ=
Subject key identifier: 92:33:10:22:30:43:87:31:F2:B2:8D:33:2D:72:44:34:07:C1:8D:0F
Certificate issuer: /CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1
Certificate serial: 0FA4460513F3A71C0EC45E8728EC7A18C859886D
Authority key identifier: C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/3139302e3130382e36342e302f32312d3234203d3e203237373430.roa
Signing time: Tue 04 Feb 2025 18:10:34 +0000
ROA not before: Tue 04 Feb 2025 18:05:34 +0000
ROA not after: Tue 03 Feb 2026 18:10:34 +0000
asID: 27740
IP address blocks: 190.108.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a4:46:05:13:f3:a7:1c:0e:c4:5e:87:28:ec:7a:18:c8:59:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1
Validity
Not Before: Feb 4 18:05:34 2025 GMT
Not After : Feb 3 18:10:34 2026 GMT
Subject: CN=9233102230438731F2B28D332D72443407C18D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5a:72:0a:c5:d7:73:4e:38:e7:9f:9a:2c:2b:
32:b4:65:a7:93:68:3e:45:6d:4b:96:45:02:dd:a4:
a0:88:d8:54:41:f7:a8:6d:82:e9:c9:9e:68:55:92:
7f:b0:92:1e:2c:1d:85:79:9e:51:2c:62:43:b2:ed:
92:03:21:f8:91:38:99:f3:3c:de:04:09:c0:2b:18:
a7:ec:bc:d6:b4:6f:c3:c7:86:8b:47:67:4a:73:eb:
50:c6:c4:18:43:81:65:7d:4a:02:bd:ff:30:27:f6:
aa:17:31:89:74:da:ce:c9:ec:fa:ed:8c:49:37:d2:
cf:92:18:50:97:57:93:2b:10:4f:a1:b0:a3:e7:98:
48:42:73:0d:87:88:a5:65:0e:e6:40:16:74:0d:fe:
49:c8:b4:a4:21:13:f4:53:3c:2a:4a:0b:2c:f0:51:
ad:68:67:87:04:dc:38:be:4f:35:ef:8b:0f:3f:6f:
a3:d5:9a:68:06:55:21:67:c6:be:f6:64:44:eb:10:
35:8c:6e:83:22:6d:aa:0f:06:dc:4f:53:1b:c7:af:
db:a7:fd:00:4d:68:5a:67:be:db:ed:7f:ed:fb:86:
45:7b:91:3e:95:48:cb:01:8e:e7:0b:46:54:b0:c3:
c6:a0:79:6f:b9:40:e2:4d:cd:64:72:fe:ec:93:5a:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:10:22:30:43:87:31:F2:B2:8D:33:2D:72:44:34:07:C1:8D:0F
X509v3 Authority Key Identifier:
keyid:C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/3139302e3130382e36342e302f32312d3234203d3e203237373430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.64.0/21
Signature Algorithm: sha256WithRSAEncryption
33:08:c6:1e:fc:c9:4a:7b:0f:65:71:ae:21:4f:c9:e6:72:34:
80:50:ee:33:d3:46:63:dd:39:c4:44:55:5b:b0:63:fd:68:8f:
fc:b0:d1:19:bb:5a:ed:9e:96:06:d5:f6:fc:5b:32:03:2a:9c:
36:d3:21:c4:f6:08:5e:cf:66:52:19:40:3c:8d:74:df:a8:44:
5d:24:cb:eb:6a:f5:1e:ab:ed:39:19:87:d1:bb:72:1f:96:ad:
c3:e7:af:21:bd:af:fc:26:de:e6:9c:f9:94:5d:ed:1e:de:f5:
53:05:d5:9f:93:d4:55:ce:19:00:22:54:22:55:8b:59:bb:f5:
46:54:1f:07:3c:47:10:45:6a:bf:2f:8c:58:5f:0d:23:01:7f:
45:58:6a:d4:e6:6b:e2:13:76:87:a3:c5:a5:7e:19:a0:f4:f6:
06:bf:4b:02:d7:ea:0a:29:01:f4:02:4e:0b:d4:6d:a6:9f:ed:
59:49:67:81:d6:20:e4:ea:a1:2c:46:b9:18:e3:c4:1e:c1:06:
5a:f8:c3:d9:e6:0d:77:6a:7d:65:df:04:86:28:ec:82:fa:7f:
f8:b6:5e:d5:7d:47:3f:59:e3:e8:f4:97:1c:0d:86:c4:2a:b5:
33:83:85:30:95:8a:ac:cc:f2:7c:32:f4:80:ea:f8:c9:4d:d1:
40:3f:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:46 2025 by rpki-client