Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/3136382e3139372e38382e302f32322d3234203d3e20323632323133.roa
File: 3136382e3139372e38382e302f32322d3234203d3e20323632323133.roa (raw, json)
Hash identifier: GOwrQY99GeP+6jBDq9PuSV1UplFb+oe+faTrE//uh74=
Subject key identifier: A4:20:FC:C7:67:84:5B:05:00:EC:7B:91:85:0D:4B:6E:16:8E:DD:40
Certificate issuer: /CN=D7EDF5B751B151464FD315A68BF0C47236A0E241
Certificate serial: 58B7752E242F1F1B1CE031053ED2839D603C6686
Authority key identifier: D7:ED:F5:B7:51:B1:51:46:4F:D3:15:A6:8B:F0:C4:72:36:A0:E2:41
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/3136382e3139372e38382e302f32322d3234203d3e20323632323133.roa
Signing time: Tue 04 Feb 2025 18:02:37 +0000
ROA not before: Tue 04 Feb 2025 17:57:37 +0000
ROA not after: Tue 03 Feb 2026 18:02:37 +0000
asID: 262213
IP address blocks: 168.197.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b7:75:2e:24:2f:1f:1b:1c:e0:31:05:3e:d2:83:9d:60:3c:66:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7EDF5B751B151464FD315A68BF0C47236A0E241
Validity
Not Before: Feb 4 17:57:37 2025 GMT
Not After : Feb 3 18:02:37 2026 GMT
Subject: CN=A420FCC767845B0500EC7B91850D4B6E168EDD40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:0c:7f:2d:7d:fc:84:81:b4:a1:2c:7e:c1:
26:78:43:2f:7f:00:9f:1c:81:f0:77:a5:ac:f4:c3:
86:10:03:12:2c:5d:c8:cc:86:da:cf:72:07:63:29:
31:75:9a:16:8e:79:51:6f:c4:7b:7a:9a:0c:db:5a:
e0:19:f0:16:12:1d:44:53:02:91:f8:90:fe:4f:c8:
3d:8f:ea:6f:8b:77:21:cd:a8:1d:6e:5b:cb:9d:48:
d6:27:c4:ce:7c:5c:45:00:0c:c9:b9:f7:eb:29:5c:
68:9d:06:ae:94:cf:b9:d8:1b:e0:44:92:6f:e3:94:
54:a5:aa:40:42:44:c4:1e:4a:3f:fe:90:83:bc:a8:
2c:3f:06:76:eb:e1:8c:f0:1f:56:9c:42:ba:87:27:
ea:a3:75:e6:ca:03:37:0d:c9:5c:b0:ef:ae:d1:8c:
52:70:09:8d:9d:c8:2f:14:46:01:eb:0b:46:a5:44:
d4:51:73:5c:d3:94:f4:35:eb:8f:e9:c9:4d:7b:9b:
7f:3f:f6:6b:0a:4d:06:e5:6c:58:14:71:ad:d4:67:
72:41:00:a1:46:20:7a:5e:53:c4:17:0f:e9:db:59:
cb:76:2a:3e:b5:c0:55:b3:da:79:d2:f0:ed:b7:e0:
4d:e0:93:d0:5c:8a:a7:fd:bf:54:10:f8:ad:66:9d:
e0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:20:FC:C7:67:84:5B:05:00:EC:7B:91:85:0D:4B:6E:16:8E:DD:40
X509v3 Authority Key Identifier:
keyid:D7:ED:F5:B7:51:B1:51:46:4F:D3:15:A6:8B:F0:C4:72:36:A0:E2:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/3136382e3139372e38382e302f32322d3234203d3e20323632323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.88.0/22
Signature Algorithm: sha256WithRSAEncryption
04:7e:02:d6:9a:0b:18:0e:58:90:f1:95:10:69:a3:8c:15:55:
12:c9:af:6a:e6:03:88:43:ef:fb:ca:be:0b:76:93:8b:2c:71:
9d:79:69:cb:03:c5:aa:80:cc:84:50:66:9b:d4:c2:f9:c7:ff:
d9:1b:58:1d:80:12:2e:fd:5f:b5:bd:8a:b1:96:85:96:f6:94:
d8:dd:16:d4:fb:f5:a7:50:b8:45:ec:ea:0d:e0:fe:d3:d6:2a:
d6:02:e1:67:33:0f:87:bc:28:da:4a:56:49:9a:d3:3a:00:a7:
df:c9:71:2e:c3:2b:db:24:57:dd:37:29:6d:c4:1c:c7:00:4c:
57:91:aa:b0:d5:72:85:10:b8:84:a6:59:fb:24:c7:d3:db:8a:
63:12:24:d1:3e:dc:c1:ad:06:63:25:57:2c:e9:68:d5:1c:f2:
e4:8d:e3:c1:06:57:66:46:05:14:3f:36:a8:6c:d4:43:69:9a:
05:a6:9b:73:1b:8c:c1:85:f5:f0:ae:77:cb:6f:49:53:b4:24:
f5:f9:95:ce:f6:14:26:36:fb:b0:32:7c:d4:60:56:f7:87:ac:
95:41:99:22:df:38:5e:4c:a2:25:1c:6e:f3:5d:ad:2c:d5:e7:
25:93:20:23:db:00:ae:bf:90:1d:8a:c1:c9:01:8e:0a:02:7f:
6a:37:f8:fe
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWLd1LiQvHxsc4DEFPtKDnWA8ZoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdFREY1Qjc1MUIxNTE0NjRGRDMxNUE2OEJGMEM0NzIz
NkEwRTI0MTAeFw0yNTAyMDQxNzU3MzdaFw0yNjAyMDMxODAyMzdaMDMxMTAvBgNV
BAMTKEE0MjBGQ0M3Njc4NDVCMDUwMEVDN0I5MTg1MEQ0QjZFMTY4RURENDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCimgx/LX38hIG0oSx+wSZ4Qy9/
AJ8cgfB3paz0w4YQAxIsXcjMhtrPcgdjKTF1mhaOeVFvxHt6mgzbWuAZ8BYSHURT
ApH4kP5PyD2P6m+LdyHNqB1uW8udSNYnxM58XEUADMm59+spXGidBq6Uz7nYG+BE
km/jlFSlqkBCRMQeSj/+kIO8qCw/Bnbr4YzwH1acQrqHJ+qjdebKAzcNyVyw767R
jFJwCY2dyC8URgHrC0alRNRRc1zTlPQ164/pyU17m38/9msKTQblbFgUca3UZ3JB
AKFGIHpeU8QXD+nbWct2Kj61wFWz2nnS8O234E3gk9Bciqf9v1QQ+K1mneAZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUpCD8x2eEWwUA7HuRhQ1LbhaO3UAwHwYDVR0j
BBgwFoAU1+31t1GxUUZP0xWmi/DEcjag4kEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MEE1M0IxQUYxNDEzRTlCRDVGMkQ2NkVCN0FDMjM0OTIw
QjM4MTkxOTNGMjdFQ0RFMzY2NkI1ODYyQTI4NEVFLzAvRDdFREY1Qjc1MUIxNTE0
NjRGRDMxNUE2OEJGMEM0NzIzNkEwRTI0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0VERjVCNzUxQjE1MTQ2NEZE
MzE1QTY4QkYwQzQ3MjM2QTBFMjQxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTBBNTNCMUFGMTQxM0U5QkQ1RjJENjZFQjdBQzIzNDkyMEIzODE5MTkz
RjI3RUNERTM2NjZCNTg2MkEyODRFRS8wLzMxMzYzODJlMzEzOTM3MmUzODM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqMVY
MA0GCSqGSIb3DQEBCwUAA4IBAQAEfgLWmgsYDliQ8ZUQaaOMFVUSya9q5gOIQ+/7
yr4LdpOLLHGdeWnLA8WqgMyEUGab1ML5x//ZG1gdgBIu/V+1vYqxloWW9pTY3RbU
+/WnULhF7OoN4P7T1irWAuFnMw+HvCjaSlZJmtM6AKffyXEuwyvbJFfdNyltxBzH
AExXkaqw1XKFELiEpln7JMfT24pjEiTRPtzBrQZjJVcs6WjVHPLkjePBBldmRgUU
PzaobNRDaZoFpptzG4zBhfXwrnfLb0lTtCT1+ZXO9hQmNvuwMnzUYFb3h6yVQZki
3zheTKIlHG7zXa0s1eclkyAj2wCuv5AdisHJAY4KAn9qN/j+
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:11:16 2025 by rpki-client