Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37332e302f32342d3234203d3e203532333238.roa
File: 3139302e3231312e37332e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier: OFW8L4OuKgC4i6OHjgNQbPHi41pknFEUXHrR6IfyCls=
Subject key identifier: 32:B7:D8:D3:27:6E:22:98:BA:24:58:AE:75:6F:56:7B:A8:D6:7B:82
Certificate issuer: /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial: 3638BFDFBF8580C81AFA082431392E19DB99AB7C
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37332e302f32342d3234203d3e203532333238.roa
Signing time: Tue 04 Feb 2025 18:16:32 +0000
ROA not before: Tue 04 Feb 2025 18:11:32 +0000
ROA not after: Tue 03 Feb 2026 18:16:32 +0000
asID: 52328
IP address blocks: 190.211.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:38:bf:df:bf:85:80:c8:1a:fa:08:24:31:39:2e:19:db:99:ab:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Validity
Not Before: Feb 4 18:11:32 2025 GMT
Not After : Feb 3 18:16:32 2026 GMT
Subject: CN=32B7D8D3276E2298BA2458AE756F567BA8D67B82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:c4:0a:0e:2a:9e:e7:1d:0d:c9:5c:04:3b:
93:30:23:76:19:7c:9c:51:a4:75:96:04:b2:de:fd:
e1:5f:2c:2f:bb:ee:c9:f9:7d:04:d3:4f:ba:0e:a2:
9d:93:0f:b1:ce:71:2e:14:46:c3:1b:11:42:a2:50:
d9:62:e8:99:db:f0:bb:bd:7e:16:93:f4:fe:e9:e4:
8f:5e:e4:a0:9d:17:92:77:44:b5:53:f8:9d:a4:af:
89:de:ac:9d:f0:d9:0a:bc:54:25:0d:b7:fe:1d:77:
62:91:8e:ba:d5:7f:a0:ec:60:06:1a:e4:17:64:fd:
48:b8:01:89:6e:55:f9:55:36:47:19:d7:db:fd:7b:
f0:6f:ba:25:42:ad:d2:cd:77:08:db:f6:ef:b1:12:
dc:14:ee:48:73:64:cb:b8:d0:f7:48:4a:c7:cc:29:
2c:31:83:72:cb:6c:16:7b:85:37:fd:ca:d1:15:12:
c4:0d:0b:00:7c:07:67:70:5e:6e:f0:31:dc:78:7e:
b0:83:9c:49:45:d3:bd:a8:35:89:10:1c:11:b3:a3:
d1:a7:2f:b3:82:f3:c5:35:76:e6:cc:6b:15:93:6f:
b8:25:a6:ab:b2:ca:b2:72:76:c0:b4:c1:96:28:64:
db:a5:94:22:2c:f2:7e:5f:b4:0a:66:a3:9e:f1:be:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:D8:D3:27:6E:22:98:BA:24:58:AE:75:6F:56:7B:A8:D6:7B:82
X509v3 Authority Key Identifier:
keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37332e302f32342d3234203d3e203532333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.211.73.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:de:69:d5:f3:55:d7:22:b6:4d:91:b8:13:9d:e0:23:55:ce:
0e:0b:d3:2e:4a:b0:21:35:fe:09:b7:51:85:fe:5e:3f:6f:96:
d1:ef:84:58:72:dd:69:10:b3:ee:5e:00:79:1f:7c:96:05:69:
8f:58:1b:08:50:8d:af:78:4a:45:8b:15:d7:12:4d:b6:94:84:
2e:20:73:f4:d4:b2:86:91:b0:b7:04:90:f4:9b:af:0a:7d:aa:
3e:fe:88:01:da:fe:a8:2f:c5:af:d0:8d:83:92:8b:a6:24:32:
d9:39:42:cb:94:4e:10:a8:0a:8d:a9:ce:4b:c6:6a:7f:04:1f:
98:ef:74:9e:72:de:26:9e:c9:18:19:b9:72:5e:ad:b2:25:89:
24:ae:cf:da:77:22:36:14:bc:93:35:37:36:66:c3:2f:17:47:
a8:a4:e4:54:3e:2c:fd:46:8b:f5:43:52:6e:4b:50:59:1d:95:
c5:e3:32:8c:a4:4e:9e:b0:d0:5a:a6:a6:70:9f:e3:f2:f9:78:
f5:02:00:40:29:61:0b:ae:7e:7f:81:db:d2:8e:7e:62:81:9b:
67:4e:6b:6e:38:11:fd:d3:03:76:c7:4c:fd:52:90:3b:c9:3e:
bf:84:3b:04:fc:84:79:e8:ba:98:1a:12:dc:c5:d1:f7:6b:16:
20:cd:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:09 2025 by rpki-client