Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3139302e3131322e3232302e302f32322d3234203d3e203532343233.roa
File: 3139302e3131322e3232302e302f32322d3234203d3e203532343233.roa (raw, json)
Hash identifier: 8iGjKCTPg78tfrvd2egFEqDiuA986/CIWj6zklSHfyU=
Subject key identifier: 0C:2B:22:C0:0D:CC:3C:F2:2E:0F:EA:25:4D:5B:47:F5:46:EF:B2:FF
Certificate issuer: /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial: 30233C843A81FA113FB6059083872A7BA1DDEB02
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3139302e3131322e3232302e302f32322d3234203d3e203532343233.roa
Signing time: Tue 04 Feb 2025 18:20:46 +0000
ROA not before: Tue 04 Feb 2025 18:15:46 +0000
ROA not after: Tue 03 Feb 2026 18:20:46 +0000
asID: 52423
IP address blocks: 190.112.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:23:3c:84:3a:81:fa:11:3f:b6:05:90:83:87:2a:7b:a1:dd:eb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Validity
Not Before: Feb 4 18:15:46 2025 GMT
Not After : Feb 3 18:20:46 2026 GMT
Subject: CN=0C2B22C00DCC3CF22E0FEA254D5B47F546EFB2FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:b9:04:60:1d:9c:a9:16:b4:ab:ca:be:4b:
64:24:25:92:3d:fc:77:15:3c:fe:b4:94:43:70:3e:
d1:2c:a7:32:d4:f6:0a:5f:10:01:8f:7d:01:ba:d6:
4e:e3:ae:0a:30:8c:81:bf:f6:ba:2e:0a:49:7c:71:
97:26:2c:ee:cb:ab:97:7f:34:ad:46:30:a3:8c:1c:
ee:69:3a:6b:b3:95:68:2f:b4:da:15:53:20:0d:6b:
46:49:fc:14:6d:a5:0d:ab:cd:e6:42:c8:5f:a1:96:
44:f1:d9:ec:82:05:c2:fd:bb:bf:60:31:6f:c8:68:
cc:92:f5:c1:87:ce:ed:e7:f4:4a:b6:c5:3b:d8:9b:
d1:b1:31:4c:af:b8:e2:55:18:c8:38:be:7f:25:08:
e9:d4:bb:18:22:fe:ef:1f:73:96:85:c1:c8:41:51:
c9:6f:7d:57:61:8d:3f:88:55:12:4c:c9:cd:b9:7b:
d6:d4:2a:83:2b:89:56:af:20:d1:7a:bb:4a:9a:90:
64:c8:45:56:66:3d:f7:a5:29:b5:f7:1d:6c:79:50:
4e:8e:f8:2e:31:12:97:4d:95:87:2e:9d:fd:c5:eb:
34:a3:d4:ad:75:8e:33:7a:28:99:fe:0a:73:8d:63:
c9:df:6c:80:f6:08:e5:0e:9a:e0:6b:f7:fb:d8:2e:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2B:22:C0:0D:CC:3C:F2:2E:0F:EA:25:4D:5B:47:F5:46:EF:B2:FF
X509v3 Authority Key Identifier:
keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3139302e3131322e3232302e302f32322d3234203d3e203532343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.220.0/22
Signature Algorithm: sha256WithRSAEncryption
58:02:03:e1:b7:ef:69:ea:31:23:8f:00:ea:3d:4a:59:26:f8:
ef:98:47:41:c3:00:52:c7:ef:de:6b:b0:ca:eb:ef:39:97:69:
41:85:60:c3:52:dd:6e:04:b5:3c:bd:a0:4f:6d:36:72:fc:57:
96:56:60:a4:d6:59:fd:b7:97:6d:38:c2:1d:bc:22:ae:35:66:
8d:fb:f8:9f:e0:91:8f:6a:c4:0c:c3:2e:25:0f:ab:cf:4c:df:
59:f5:ba:0e:50:b1:51:79:17:29:22:b1:d7:da:55:ff:86:ea:
0d:0e:cd:f3:90:71:49:f1:e7:ed:ba:2d:a4:fb:29:db:f8:f3:
42:cd:32:d9:5f:42:e6:55:12:6a:54:95:38:a8:a0:ce:10:24:
1f:81:4f:df:bf:75:78:c5:e9:58:ac:8d:98:3b:11:1f:ec:c1:
d4:ba:9f:cf:60:a7:94:66:bd:0a:e5:3d:cf:3e:30:7c:2a:a5:
96:92:c5:66:e7:ee:92:e1:a1:10:b3:a0:84:62:74:d5:06:a2:
7a:cd:ba:7b:8b:9c:10:c5:a0:e8:c3:c2:2f:9e:ce:43:3e:39:
9d:15:ed:89:a8:90:0e:3b:dc:8b:1b:6a:78:9f:70:ab:24:02:
91:0a:72:1e:04:d9:1e:b6:69:4d:38:c1:e7:4a:6f:71:41:33:
a5:d7:92:54
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMCM8hDqB+hE/tgWQg4cqe6Hd6wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIyQTE5MDQxRjdBRDhEMEI0Rjk3RDZEREFGQzk5QzI1
OTAyNzZBQjAeFw0yNTAyMDQxODE1NDZaFw0yNjAyMDMxODIwNDZaMDMxMTAvBgNV
BAMTKDBDMkIyMkMwMERDQzNDRjIyRTBGRUEyNTRENUI0N0Y1NDZFRkIyRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSarkEYB2cqRa0q8q+S2QkJZI9
/HcVPP60lENwPtEspzLU9gpfEAGPfQG61k7jrgowjIG/9rouCkl8cZcmLO7Lq5d/
NK1GMKOMHO5pOmuzlWgvtNoVUyANa0ZJ/BRtpQ2rzeZCyF+hlkTx2eyCBcL9u79g
MW/IaMyS9cGHzu3n9Eq2xTvYm9GxMUyvuOJVGMg4vn8lCOnUuxgi/u8fc5aFwchB
UclvfVdhjT+IVRJMyc25e9bUKoMriVavINF6u0qakGTIRVZmPfelKbX3HWx5UE6O
+C4xEpdNlYcunf3F6zSj1K11jjN6KJn+CnONY8nfbID2COUOmuBr9/vYLghxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDCsiwA3MPPIuD+olTVtH9Ubvsv8wHwYDVR0j
BBgwFoAUUioZBB962NC0+X1t2vyZwlkCdqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MDcyQ0M3QUM5OTM1QTk2QUVDREMzQjE1NkYwQkUyODVB
QzBEMkYzRTJCMjY0NjZGODdEN0MzOTYzOUZFN0M5LzAvNTIyQTE5MDQxRjdBRDhE
MEI0Rjk3RDZEREFGQzk5QzI1OTAyNzZBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjJBMTkwNDFGN0FEOEQwQjRG
OTdENkREQUZDOTlDMjU5MDI3NkFCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTA3MkNDN0FDOTkzNUE5NkFFQ0RDM0IxNTZGMEJFMjg1QUMwRDJGM0Uy
QjI2NDY2Rjg3RDdDMzk2MzlGRTdDOS8wLzMxMzkzMDJlMzEzMTMyMmUzMjMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzMjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnDc
MA0GCSqGSIb3DQEBCwUAA4IBAQBYAgPht+9p6jEjjwDqPUpZJvjvmEdBwwBSx+/e
a7DK6+85l2lBhWDDUt1uBLU8vaBPbTZy/FeWVmCk1ln9t5dtOMIdvCKuNWaN+/if
4JGPasQMwy4lD6vPTN9Z9boOULFReRcpIrHX2lX/huoNDs3zkHFJ8eftui2k+ynb
+PNCzTLZX0LmVRJqVJU4qKDOECQfgU/fv3V4xelYrI2YOxEf7MHUup/PYKeUZr0K
5T3PPjB8KqWWksVm5+6S4aEQs6CEYnTVBqJ6zbp7i5wQxaDow8Ivns5DPjmdFe2J
qJAOO9yLG2p4n3CrJAKRCnIeBNketmlNOMHnSm9xQTOl15JU
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:57:26 2025 by rpki-client