Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230312e3139302e302e302f31382d3234203d3e203134373534.roa
File: 3230312e3139302e302e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier: AMSwn/ztxJRkhZnfdYpxz0wF7WBXksXWNI7k2p1l7AM=
Subject key identifier: AE:C7:EE:35:78:1A:AC:BA:F8:75:72:FC:AA:F7:BF:94:5E:75:1F:52
Certificate issuer: /CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Certificate serial: 6196794A55B90C7CD7F9C10EA340BAD590950ECC
Authority key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230312e3139302e302e302f31382d3234203d3e203134373534.roa
Signing time: Tue 04 Feb 2025 18:56:00 +0000
ROA not before: Tue 04 Feb 2025 18:51:00 +0000
ROA not after: Tue 03 Feb 2026 18:56:00 +0000
asID: 14754
IP address blocks: 201.190.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:96:79:4a:55:b9:0c:7c:d7:f9:c1:0e:a3:40:ba:d5:90:95:0e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Validity
Not Before: Feb 4 18:51:00 2025 GMT
Not After : Feb 3 18:56:00 2026 GMT
Subject: CN=AEC7EE35781AACBAF87572FCAAF7BF945E751F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:21:5e:d6:f2:f1:8f:93:b6:40:42:88:ca:
b9:df:64:45:d8:3d:b3:39:7c:fe:6d:74:36:ce:6c:
03:24:a0:31:e7:2a:a3:e2:cd:77:14:87:30:d1:3f:
8e:b1:65:8d:50:5c:16:22:dc:19:2a:22:7e:19:70:
9b:66:73:ef:6f:11:be:cd:93:7b:02:0b:9c:40:46:
3f:5b:62:32:14:b5:fe:cf:24:bc:51:89:27:72:df:
4b:b8:d9:4a:62:18:ec:e6:cb:1e:bc:56:d1:b6:59:
de:d3:b7:ae:f8:8e:3a:0a:a4:69:9d:e1:e8:b1:40:
44:bc:bf:31:c1:9f:60:25:50:cd:85:9e:76:91:4a:
2b:be:ae:b1:9b:41:40:4a:29:e4:3e:8c:3a:2b:da:
32:ca:ba:4c:d0:5f:d6:c0:81:fc:9e:f7:9d:0b:59:
80:63:60:87:15:18:72:fa:ee:ad:05:f3:70:7c:b5:
39:be:b9:99:66:68:9c:b0:dd:a8:19:98:43:7a:56:
4f:d4:43:aa:e7:63:eb:53:b2:15:34:56:dc:49:ee:
f7:31:2b:a9:9f:40:15:06:4b:bf:93:e7:51:d2:c3:
17:e2:7c:2e:48:6d:d8:3f:c1:61:83:f0:3b:42:f2:
34:95:42:ec:63:2a:d7:73:ca:a1:86:33:24:07:b7:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C7:EE:35:78:1A:AC:BA:F8:75:72:FC:AA:F7:BF:94:5E:75:1F:52
X509v3 Authority Key Identifier:
keyid:78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230312e3139302e302e302f31382d3234203d3e203134373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.190.0.0/18
Signature Algorithm: sha256WithRSAEncryption
62:c0:ae:a1:35:d7:bc:b1:a1:6e:e1:49:e0:ae:f4:30:c4:6b:
02:ea:f2:9b:c9:8a:1c:29:18:9a:90:6d:9b:ff:c1:58:96:bb:
64:94:34:ef:01:9c:71:7d:32:36:8d:81:e5:1d:5c:fa:6b:a0:
3f:b3:2b:8b:64:f4:cd:be:0f:fb:24:d3:05:0b:46:7b:49:54:
53:57:18:94:c2:d2:d8:37:28:0c:24:ff:22:e2:f5:8e:64:1d:
0b:82:96:26:92:45:61:32:b3:f9:c8:19:99:88:98:10:1e:03:
db:0f:ac:c9:c9:8f:4c:dc:13:31:f6:44:15:c5:bc:09:85:ab:
ca:70:3d:d1:af:3f:83:ed:01:66:24:00:47:9e:53:1b:58:55:
db:27:ae:79:b2:b5:aa:d6:5a:59:45:3c:66:5c:75:bd:ed:b2:
47:6c:0f:ad:9b:6c:e1:5f:17:a5:10:48:c1:db:3a:2c:a7:31:
34:1d:1e:e4:ac:57:34:8c:b5:09:17:18:aa:0a:0c:37:13:d0:
07:f3:e5:60:e8:48:7e:0d:bf:b2:6c:42:0f:89:b8:80:5c:4b:
a8:01:ac:9c:11:a9:78:d9:11:df:f9:18:9f:c4:8b:d0:bb:cc:
c1:ab:90:d1:cb:47:cd:51:12:9b:b6:6f:13:9e:f5:f4:f9:99:
31:53:d2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:39 2025 by rpki-client