Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e32302e302f32342d3234203d3e203138363738.roa
File: 3139302e3130372e32302e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: LZjHRT75Uzt0AioPtzlNx/Jz1dzUUfAmy1bU6UpMS1I=
Subject key identifier: 52:C3:E5:82:D7:9B:E2:A8:67:06:51:57:22:C4:17:F3:5A:E0:CA:9A
Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial: 7F11A1C3F3709F0F9981A02EFAE3EFEEE5F853A0
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e32302e302f32342d3234203d3e203138363738.roa
Signing time: Tue 04 Feb 2025 19:57:01 +0000
ROA not before: Tue 04 Feb 2025 19:52:01 +0000
ROA not after: Tue 03 Feb 2026 19:57:01 +0000
asID: 18678
IP address blocks: 190.107.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:11:a1:c3:f3:70:9f:0f:99:81:a0:2e:fa:e3:ef:ee:e5:f8:53:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Validity
Not Before: Feb 4 19:52:01 2025 GMT
Not After : Feb 3 19:57:01 2026 GMT
Subject: CN=52C3E582D79BE2A86706515722C417F35AE0CA9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:a1:15:ba:98:16:95:fa:5e:cd:12:0b:17:
57:c7:c0:2a:18:dd:f8:83:4b:a2:28:f0:c4:56:d2:
02:70:28:d1:9f:42:d6:01:06:71:3b:1a:92:8e:a5:
66:c9:50:50:72:5b:d6:e3:ac:09:29:f6:03:9d:ff:
d7:09:2c:4a:1e:bf:c6:18:12:60:ff:4b:02:3c:66:
6e:c0:9f:f0:58:16:2c:36:7a:80:f7:44:4a:06:f1:
7d:2e:fa:a4:93:9a:d9:26:27:54:1f:10:8b:99:22:
a2:5a:d5:16:2d:79:d8:1a:f3:3f:b9:d4:69:f1:f9:
c9:6f:0e:38:96:b7:38:99:ed:43:33:d2:7c:89:01:
4a:54:0c:91:a8:da:b9:c8:5a:a9:8b:6f:71:21:1b:
e4:68:a3:d1:8d:70:5e:be:b4:8f:b9:aa:3d:20:c9:
d0:96:f2:0c:55:18:47:5b:d7:17:8d:7a:f2:78:46:
16:5c:da:53:2a:60:c9:fb:a2:72:7e:c5:b7:4e:0f:
aa:f1:05:2b:08:46:47:e7:ec:53:70:77:8c:b3:c6:
0c:07:63:8c:d3:99:0f:5b:68:d3:dd:56:02:ad:af:
02:2b:b4:f5:11:2a:30:b9:e3:92:aa:94:0f:4d:20:
68:c2:f8:64:3f:98:ce:9e:94:5c:19:2a:26:42:01:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:E5:82:D7:9B:E2:A8:67:06:51:57:22:C4:17:F3:5A:E0:CA:9A
X509v3 Authority Key Identifier:
keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e32302e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7b:6f:ba:1a:98:48:e2:bc:90:d0:18:51:2d:4b:2b:ff:b1:
84:26:81:91:b0:82:7c:84:27:bd:80:58:1d:ac:5a:86:91:10:
fe:1c:ed:1e:e3:e7:e0:71:f0:8a:e9:15:0a:13:c4:e7:91:5d:
85:67:51:d7:81:a1:10:98:2c:18:ed:b2:3d:fb:58:ad:b7:85:
85:dc:3e:47:fa:8f:77:eb:5a:e6:dd:40:d6:99:76:b5:f3:9e:
9b:84:f8:71:c1:3c:87:d7:17:ff:5c:cb:b1:d0:5b:5e:dc:18:
ee:00:3d:ca:ea:da:f3:46:6a:e5:78:37:3b:f6:b0:98:17:ae:
01:f4:31:1f:55:52:5c:2e:6b:96:bc:09:7e:1b:20:fb:6e:46:
18:1e:c7:09:44:8f:65:11:e4:01:1b:42:44:aa:b4:a6:79:92:
d9:1c:db:3d:9c:62:71:7e:b3:0a:7f:13:81:97:67:69:7c:e6:
60:7b:ec:6f:65:b1:7c:b7:60:57:ad:00:73:c7:0a:8f:8b:b4:
4c:05:fe:6f:d6:30:29:54:41:1d:6d:82:43:94:c0:3c:be:96:
e1:3c:dc:c4:0f:65:0d:6f:bc:e4:30:8a:e6:11:a2:eb:75:9e:
d7:4d:fc:2e:84:e0:07:9d:8a:f3:78:d3:5d:64:40:3e:19:ba:
6c:40:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:06:51 2025 by rpki-client