Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265809.roa
File: AS265809.roa (raw, json)
Hash identifier: USf1xneVQxAuVmUDUW8skIs2ua/tDRnJLCxJXa9+OgE=
Subject key identifier: A3:99:F3:F0:99:05:5F:B5:47:CB:32:69:A0:4C:1A:D6:CC:04:2B:16
Certificate issuer: /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial: 275AAA7BACC0A502A79938508A52C5118DCE48F0
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265809.roa
Signing time: Tue 04 Feb 2025 20:06:53 +0000
ROA not before: Tue 04 Feb 2025 20:01:53 +0000
ROA not after: Tue 03 Feb 2026 20:06:53 +0000
asID: 265809
IP address blocks: 190.228.32.0/24 maxlen: 24
190.228.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5a:aa:7b:ac:c0:a5:02:a7:99:38:50:8a:52:c5:11:8d:ce:48:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Validity
Not Before: Feb 4 20:01:53 2025 GMT
Not After : Feb 3 20:06:53 2026 GMT
Subject: CN=A399F3F099055FB547CB3269A04C1AD6CC042B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:75:90:cb:31:37:f4:4e:80:2a:ed:fa:6c:
59:32:9e:ae:03:6f:d5:24:fe:d8:dc:88:17:44:ba:
6c:d7:69:35:78:a8:06:52:9f:09:26:bd:cf:81:2c:
4b:a9:b9:e1:d0:95:93:9e:3d:ab:53:d2:54:49:e7:
22:48:f5:71:fc:b0:92:f3:28:64:ef:c3:02:f5:f4:
b0:34:00:77:79:e4:61:00:04:7f:7f:28:1b:5b:e4:
29:ab:f0:b9:8b:fa:b8:12:1e:16:67:2e:0e:3f:4d:
4e:16:84:cb:a8:f3:88:08:1b:32:fa:55:86:ef:f1:
a8:f5:ea:1a:dc:60:15:f4:5d:ef:bc:11:80:80:4a:
49:94:84:87:b2:c8:65:39:8d:6c:a1:d4:c5:b3:95:
93:d9:8f:bd:21:a0:56:e1:d7:b9:88:f7:1f:6a:3c:
75:32:f2:00:09:12:7e:0f:83:f6:9a:95:f5:3f:93:
c2:ec:e8:aa:66:d3:05:83:5c:e2:d8:0e:43:0c:eb:
26:2a:54:8a:85:86:85:52:fd:7b:11:0e:a3:62:be:
40:ce:b4:75:6d:56:29:25:55:d1:2a:22:bf:71:09:
8e:ff:e3:3a:5a:68:bf:8f:f6:c5:44:99:0d:49:03:
6a:e8:09:f2:67:4f:22:ec:30:1c:91:ec:d8:9e:55:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:99:F3:F0:99:05:5F:B5:47:CB:32:69:A0:4C:1A:D6:CC:04:2B:16
X509v3 Authority Key Identifier:
keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.228.32.0/24
190.228.200.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a6:b7:b8:f9:30:f2:c1:fa:14:c7:e8:44:51:d7:40:d1:4b:
4c:80:69:f7:b9:14:44:50:26:cf:07:b3:71:8f:c7:65:0f:9f:
31:21:6e:7a:81:46:43:c0:4a:e2:1d:ad:58:1f:b9:3b:2f:c8:
ce:b3:ee:56:b2:31:94:26:44:6e:93:30:99:80:29:4f:00:77:
e8:91:70:2c:4c:4e:2c:c5:c5:c8:90:26:b4:6f:7c:72:9a:14:
85:d4:66:8a:a5:7d:26:18:65:20:fd:2f:14:51:e6:1a:21:12:
20:70:ea:be:6c:e1:66:ac:6e:d4:f5:95:81:54:55:91:f9:94:
7b:e5:ca:97:b5:6a:1a:57:a9:8e:0b:30:0f:23:21:39:f3:3d:
c3:72:22:94:2b:72:e1:1a:05:0e:a8:ce:93:3f:0c:5f:aa:21:
f4:9b:ef:29:04:e5:85:43:49:23:99:66:4d:03:3d:e6:15:e6:
c1:68:46:27:3b:47:cf:2f:1b:2f:8e:87:e4:2f:14:6d:d5:e0:
e5:49:ad:61:94:48:be:c0:59:0d:eb:3e:73:78:21:48:d4:f8:
f0:08:15:8a:7d:8f:63:d6:cc:50:c7:5f:2a:84:a6:44:ac:aa:
ad:ab:40:2a:49:d7:7c:af:fc:d6:69:36:bd:97:8c:9a:89:a0:
d8:72:b3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:05:51 2025 by rpki-client