Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3130332e302f32342d3234203d3e20323034363535.roa
File: 3139302e31342e3130332e302f32342d3234203d3e20323034363535.roa (raw, json)
Hash identifier: vCLZMTdBwZ4BqLdA0kwHtJucripq8pyZpC3SYK+IcGc=
Subject key identifier: DB:ED:FF:80:50:F2:2E:FB:39:9F:F1:FF:79:79:68:F8:A6:EC:57:EC
Certificate issuer: /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial: 3944F870DA16E7C638E3B42E3AC3B22E585BEF63
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3130332e302f32342d3234203d3e20323034363535.roa
Signing time: Wed 18 Dec 2024 20:35:00 +0000
ROA not before: Wed 18 Dec 2024 20:30:00 +0000
ROA not after: Wed 17 Dec 2025 20:35:00 +0000
asID: 204655
IP address blocks: 190.14.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:44:f8:70:da:16:e7:c6:38:e3:b4:2e:3a:c3:b2:2e:58:5b:ef:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Validity
Not Before: Dec 18 20:30:00 2024 GMT
Not After : Dec 17 20:35:00 2025 GMT
Subject: CN=DBEDFF8050F22EFB399FF1FF797968F8A6EC57EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:4f:d8:bc:30:d8:79:7f:a0:24:86:2e:58:
f9:90:6c:89:ff:31:d7:3d:1b:ac:55:b4:2a:f9:44:
d9:22:c3:5b:68:9d:99:b2:85:f4:ef:10:e6:5f:de:
22:0e:49:8f:24:90:dd:0e:38:ae:8c:67:f8:54:2c:
8e:d9:9a:c5:1c:af:4c:b7:7a:4a:64:98:fb:74:70:
d0:df:87:a4:4d:1c:28:4a:34:c9:82:1a:af:d5:3e:
d4:1c:ad:47:cc:8d:c3:92:5c:45:8c:fa:cc:16:90:
08:e6:39:b9:d9:76:da:df:60:44:0e:cc:88:57:7a:
75:fb:f2:d1:38:4d:da:09:63:9c:0e:ea:70:bf:6a:
7c:70:7f:fe:d6:56:30:89:04:02:2a:a4:9a:28:10:
cb:d5:45:0c:7d:f5:a4:44:cb:11:f4:1e:c0:a3:68:
09:4d:84:96:85:d4:55:ca:60:31:a6:26:5d:3f:5e:
20:5c:cf:17:b4:ad:8b:b4:a2:60:87:eb:a5:d0:e3:
c5:1f:16:59:b6:50:e2:21:0c:60:8c:df:b4:2b:4b:
51:61:96:98:3e:96:1f:62:c9:29:da:fe:cc:6b:63:
5e:99:cf:f9:08:e3:d9:db:f1:6b:c5:05:44:f0:ee:
0d:2a:c1:51:81:5a:75:59:62:34:b9:c2:3a:52:d4:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:ED:FF:80:50:F2:2E:FB:39:9F:F1:FF:79:79:68:F8:A6:EC:57:EC
X509v3 Authority Key Identifier:
keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3130332e302f32342d3234203d3e20323034363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d0:2a:c2:7d:5e:ef:6c:12:42:20:18:e2:c1:0f:6c:fe:bb:
21:a1:14:77:b1:f0:49:bc:04:d5:c8:0d:ed:c1:8f:16:0f:4b:
1f:61:77:c9:96:3a:4b:97:51:74:3c:35:c6:63:51:21:1e:23:
2a:42:95:b9:6b:2a:2c:04:3e:af:cc:cb:74:cd:0e:9d:54:2e:
2e:4c:40:b3:4c:59:67:f0:40:93:5b:c2:be:4a:08:67:70:3a:
14:05:bc:a0:c9:9c:29:95:78:cd:63:f8:9a:ba:df:63:51:97:
6c:77:a9:4e:47:88:64:bf:12:20:2f:e0:f0:e7:e8:5b:62:df:
40:74:8e:2e:2a:ef:09:ba:21:fc:55:19:d0:ff:33:3a:c0:14:
8d:0d:a6:1b:24:97:db:3e:67:c8:f1:9e:2c:0e:f3:e1:42:67:
f8:ad:a6:26:6d:b5:67:ec:76:ab:94:70:6b:6c:e1:96:b4:57:
86:e8:43:01:64:af:09:da:79:60:bf:a4:ad:a6:9d:e4:22:3b:
4c:b2:1b:f4:da:83:44:19:ad:13:45:8a:b6:f2:3d:e5:2e:a4:
83:8f:42:ff:64:a8:4a:6c:63:c7:69:a2:d2:8c:67:d2:2b:d6:
e8:42:6c:a5:d8:fe:2a:55:ae:f9:0f:1d:27:c0:87:99:91:3b:
1f:cc:c0:29
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOUT4cNoW58Y447QuOsOyLlhb72MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjIwRDFGREJCRDQ1N0NBMEY5Q0NGQzYzQThCODVDOTlB
ODE5QUYzRDAeFw0yNDEyMTgyMDMwMDBaFw0yNTEyMTcyMDM1MDBaMDMxMTAvBgNV
BAMTKERCRURGRjgwNTBGMjJFRkIzOTlGRjFGRjc5Nzk2OEY4QTZFQzU3RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWk/YvDDYeX+gJIYuWPmQbIn/
Mdc9G6xVtCr5RNkiw1tonZmyhfTvEOZf3iIOSY8kkN0OOK6MZ/hULI7ZmsUcr0y3
ekpkmPt0cNDfh6RNHChKNMmCGq/VPtQcrUfMjcOSXEWM+swWkAjmObnZdtrfYEQO
zIhXenX78tE4TdoJY5wO6nC/anxwf/7WVjCJBAIqpJooEMvVRQx99aREyxH0HsCj
aAlNhJaF1FXKYDGmJl0/XiBczxe0rYu0omCH66XQ48UfFlm2UOIhDGCM37QrS1Fh
lpg+lh9iySna/sxrY16Zz/kI49nb8WvFBUTw7g0qwVGBWnVZYjS5wjpS1M1nAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2+3/gFDyLvs5n/H/eXlo+KbsV+wwHwYDVR0j
BBgwFoAUYg0f271FfKD5zPxjqLhcmagZrz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZBMDM5QjlFQUYxM0FERTgxNzg4MkRENEJCRkZBMkJF
MUQ0OTE3NjRCRjkzODNFQ0VFOTA4QkQyM0Y0Q0YwLzAvNjIwRDFGREJCRDQ1N0NB
MEY5Q0NGQzYzQThCODVDOTlBODE5QUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjBEMUZEQkJENDU3Q0EwRjlD
Q0ZDNjNBOEI4NUM5OUE4MTlBRjNELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQTAzOUI5RUFGMTNBREU4MTc4ODJERDRCQkZGQTJCRTFENDkxNzY0
QkY5MzgzRUNFRTkwOEJEMjNGNENGMC8wLzMxMzkzMDJlMzEzNDJlMzEzMDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzYzNTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvg5n
MA0GCSqGSIb3DQEBCwUAA4IBAQAK0CrCfV7vbBJCIBjiwQ9s/rshoRR3sfBJvATV
yA3twY8WD0sfYXfJljpLl1F0PDXGY1EhHiMqQpW5ayosBD6vzMt0zQ6dVC4uTECz
TFln8ECTW8K+SghncDoUBbygyZwplXjNY/iaut9jUZdsd6lOR4hkvxIgL+Dw5+hb
Yt9AdI4uKu8JuiH8VRnQ/zM6wBSNDaYbJJfbPmfI8Z4sDvPhQmf4raYmbbVn7Har
lHBrbOGWtFeG6EMBZK8J2nlgv6Stpp3kIjtMshv02oNEGa0TRYq28j3lLqSDj0L/
ZKhKbGPHaaLSjGfSK9boQmyl2P4qVa75Dx0nwIeZkTsfzMAp
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:49 2025 by rpki-client