Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232382e302f32342d3234203d3e20323634363838.roa
File: 3139302e3139362e3232382e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier: cm+2+l8fDwyxqPwwlVf6aHiMLWm4RzB13GKLbpcixs4=
Subject key identifier: 32:5F:FA:CF:3F:0D:FD:B3:FF:6D:FD:14:1C:73:91:31:62:67:DB:0A
Certificate issuer: /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial: 049C17959013AFD195DE8CCEF4CDB3665A97952E
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232382e302f32342d3234203d3e20323634363838.roa
Signing time: Tue 04 Feb 2025 18:37:25 +0000
ROA not before: Tue 04 Feb 2025 18:32:25 +0000
ROA not after: Tue 03 Feb 2026 18:37:25 +0000
asID: 264688
IP address blocks: 190.196.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:9c:17:95:90:13:af:d1:95:de:8c:ce:f4:cd:b3:66:5a:97:95:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Validity
Not Before: Feb 4 18:32:25 2025 GMT
Not After : Feb 3 18:37:25 2026 GMT
Subject: CN=325FFACF3F0DFDB3FF6DFD141C7391316267DB0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:cd:4b:82:13:06:11:3f:15:14:48:05:52:
13:b1:db:49:48:2c:fa:17:32:f4:65:f7:fb:a7:9d:
60:9d:41:92:ba:de:17:73:ac:cf:4e:16:f9:cf:b3:
16:45:e6:79:dd:f0:bd:81:a1:1e:5d:92:fc:a4:ec:
6a:4b:6c:da:e8:aa:ba:41:b1:d0:8b:f7:46:9e:c5:
27:f8:9e:08:4c:9b:3f:aa:b1:5e:be:87:42:30:ca:
27:8f:d7:32:b5:41:3e:22:e4:09:34:d9:e2:85:1a:
ac:05:15:11:a4:83:bd:68:5b:e1:32:35:52:87:c0:
b2:14:20:4e:25:5b:b7:55:83:09:59:02:28:cd:81:
48:6a:eb:03:37:cd:3d:6c:94:98:b8:68:f7:47:36:
10:ae:ac:15:08:b4:01:b8:cf:52:3d:e3:11:10:6f:
9c:26:87:5b:b6:ed:49:30:f1:4b:48:f1:34:a2:1a:
77:bb:a2:bd:6f:2c:f6:3d:44:8f:02:9d:00:f4:52:
db:38:d2:90:70:ae:fc:fc:cf:a1:b8:8a:c2:31:92:
6e:19:94:49:0c:e0:4c:68:4b:fb:a8:02:e7:95:9d:
2d:db:44:72:da:90:8c:61:08:88:77:2c:e9:07:0a:
6a:69:b2:ad:0f:ac:b0:f3:6b:10:f5:65:60:3e:61:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5F:FA:CF:3F:0D:FD:B3:FF:6D:FD:14:1C:73:91:31:62:67:DB:0A
X509v3 Authority Key Identifier:
keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232382e302f32342d3234203d3e20323634363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.196.228.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5d:9b:d9:93:c9:88:dd:55:e7:b3:24:fe:53:01:86:02:7d:
e5:fd:d3:62:fa:ba:c2:d2:a6:65:e0:02:97:e3:84:6f:19:17:
1f:f9:eb:24:1c:6a:e3:91:9a:fb:9a:0c:f8:8d:8a:25:d2:68:
72:ed:a2:7a:5e:72:33:3c:d5:3a:c8:a0:f8:80:d5:48:13:6a:
7e:ed:11:50:93:ba:ec:31:c2:d9:ea:a6:a1:54:50:64:f9:61:
55:47:a5:40:81:c4:5c:13:74:b8:d9:64:3e:39:25:da:e3:c6:
54:ae:43:74:03:32:54:5c:fa:b6:5e:04:1c:83:d2:95:6e:94:
71:23:a1:49:55:90:a2:39:91:d0:2e:7d:d7:7e:de:96:01:54:
88:ea:a3:a7:45:fb:78:2f:4d:e0:c9:fa:a3:0e:92:b8:dc:65:
3e:18:ca:db:34:42:fa:43:93:fe:7f:d5:47:89:ec:0f:0b:56:
c4:5a:7c:8a:8d:eb:cd:f6:99:76:e5:e9:d2:02:96:15:08:37:
3e:2a:20:7f:76:95:ac:dc:31:b4:d6:96:72:7b:78:a9:35:85:
35:47:a9:db:42:18:d1:cf:c9:4f:52:da:ea:23:72:05:45:71:
83:74:f2:d3:74:6f:f2:a5:77:dc:fe:99:f9:f6:61:fa:90:84:
00:8a:40:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:03 2025 by rpki-client