Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa
File: 3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier: dzIrg29PBghrDahTTrEBo9NSnW9+2FEOy/3vkGfW5t8=
Subject key identifier: BD:32:B3:57:CA:97:F9:30:CE:7A:8E:30:62:4F:00:05:D0:11:A9:3F
Certificate issuer: /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial: 120E106E36444ED504D936AAAF0AF6D324427F0A
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa
Signing time: Tue 04 Feb 2025 18:37:25 +0000
ROA not before: Tue 04 Feb 2025 18:32:25 +0000
ROA not after: Tue 03 Feb 2026 18:37:25 +0000
asID: 264688
IP address blocks: 190.196.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0e:10:6e:36:44:4e:d5:04:d9:36:aa:af:0a:f6:d3:24:42:7f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Validity
Not Before: Feb 4 18:32:25 2025 GMT
Not After : Feb 3 18:37:25 2026 GMT
Subject: CN=BD32B357CA97F930CE7A8E30624F0005D011A93F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:92:d9:e1:f3:68:78:ad:2d:a6:03:0e:10:
ee:79:ac:79:ae:38:cd:c6:0d:3c:35:ab:2e:cf:87:
5d:a6:7e:cb:05:65:26:9d:f8:8a:a0:ad:17:2a:91:
0e:1e:29:ae:e6:6d:a4:dd:13:21:8a:44:58:53:e5:
7a:47:16:ae:93:73:91:11:d2:ba:e0:f3:15:06:3e:
30:97:ed:8e:26:41:bc:9e:87:bb:33:ce:1a:40:88:
49:7b:27:f0:ff:75:cb:19:6c:4d:18:5c:46:e5:97:
a8:39:2a:d4:e9:94:d4:fe:d5:14:2d:3a:72:4a:56:
f1:11:aa:ef:ee:70:b5:fd:31:c0:a9:04:da:34:b0:
19:61:60:43:ac:f8:0c:69:18:ee:41:25:00:17:9d:
49:be:0d:61:71:be:b7:91:36:50:04:c7:eb:03:1e:
46:48:dd:2d:a5:59:cf:80:45:3d:67:d3:e6:d9:3f:
8e:0c:0d:ad:ff:43:a0:b3:61:bb:cd:18:60:6b:22:
52:a7:5c:72:85:df:bd:29:db:37:04:42:ff:98:5d:
fa:6a:ee:ab:fc:e1:d1:f9:95:c4:1a:38:17:a5:82:
2b:e3:5f:26:32:91:02:eb:20:ec:70:d1:30:3b:d9:
b9:69:d9:10:2b:76:ec:01:f7:ad:60:4e:a5:73:8e:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:32:B3:57:CA:97:F9:30:CE:7A:8E:30:62:4F:00:05:D0:11:A9:3F
X509v3 Authority Key Identifier:
keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.196.229.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ba:fa:e0:d3:c8:51:dd:6d:fd:b8:1a:10:5c:e2:18:4b:e7:
aa:fd:96:bf:2b:6b:e7:cf:e8:1a:b9:cc:45:e7:82:81:08:51:
5b:fc:3b:e4:60:a7:2c:75:8f:8c:10:6e:18:51:d2:fc:f3:09:
b9:56:8e:2b:d7:1f:19:96:f8:74:9d:37:2f:68:58:24:a2:81:
18:6e:f4:d5:da:57:fe:9d:64:40:e6:7a:a2:0d:aa:38:48:8b:
86:71:a7:22:54:5d:bc:fe:9b:43:29:bd:fc:a3:45:45:87:17:
f6:65:d5:13:b2:22:4c:78:d3:76:1f:5c:26:2e:95:23:96:94:
1f:dd:dd:1f:b2:7f:ef:d2:75:d5:76:07:d0:cf:02:b3:fa:72:
a6:17:7e:42:65:c2:c2:b1:bd:93:70:bc:8a:1b:52:3e:7e:66:
6b:52:7d:d5:26:9b:7d:64:8d:27:52:93:31:a9:26:5f:80:2c:
71:e1:56:13:47:5f:cb:db:61:60:5b:e2:6a:da:0c:fa:9d:2b:
99:d4:fe:2c:3c:3e:ff:b8:59:75:08:3f:83:f9:9a:36:03:25:
10:a9:45:7a:0c:1e:2d:cb:bc:bb:e1:fc:37:6a:a2:fb:aa:12:
4b:08:06:54:a4:a3:ca:36:03:cc:84:18:fd:ff:ae:2d:62:d3:
ed:04:56:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:04 2025 by rpki-client