Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233352e302f32342d3234203d3e20323633323435.roa
File: 3139302e3130372e3233352e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier: +0kEave3rLh7F/a4633egRR44vDFWKtfbgyMP+3JYNA=
Subject key identifier: 8B:92:29:91:4A:54:65:C9:6D:3F:EA:3D:F1:3F:EA:4B:DF:11:10:BC
Certificate issuer: /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial: 6A51207CD1F07DD76CD56575203B74167BB69C50
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233352e302f32342d3234203d3e20323633323435.roa
Signing time: Tue 04 Feb 2025 18:51:10 +0000
ROA not before: Tue 04 Feb 2025 18:46:10 +0000
ROA not after: Tue 03 Feb 2026 18:51:10 +0000
asID: 263245
IP address blocks: 190.107.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:51:20:7c:d1:f0:7d:d7:6c:d5:65:75:20:3b:74:16:7b:b6:9c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Validity
Not Before: Feb 4 18:46:10 2025 GMT
Not After : Feb 3 18:51:10 2026 GMT
Subject: CN=8B9229914A5465C96D3FEA3DF13FEA4BDF1110BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:37:5e:61:ff:0e:bf:7a:9c:80:19:59:ee:
2a:a6:2b:6e:a7:e0:25:34:59:6a:a0:45:6e:32:37:
8f:32:6f:2f:2b:54:a2:6b:18:00:4b:85:ff:a0:c5:
d0:04:6d:67:35:1b:6e:be:81:e2:9f:ce:76:41:1d:
85:55:1b:b7:eb:db:dc:55:0a:30:ed:95:9f:29:63:
ca:6e:ac:db:24:05:a2:a4:37:7c:e2:0f:a0:db:c1:
64:1b:27:3e:cd:4c:c2:ed:7b:08:75:f7:d6:a3:12:
78:86:b6:cd:28:7c:2b:8f:b3:0d:cd:96:86:fc:43:
0f:07:af:5a:04:61:9f:fe:0d:98:ad:25:68:6d:33:
56:b8:1d:34:ef:6b:f6:b7:af:1f:79:9e:53:06:f5:
c7:31:eb:c9:7d:67:89:d4:e9:1a:9e:03:ca:48:91:
40:8f:bb:9f:94:f5:9b:82:79:dd:da:1b:68:24:be:
53:1f:c4:00:4b:9b:3d:b8:be:86:38:36:19:05:df:
ef:08:bb:8c:8d:9e:f2:af:b8:ba:40:84:19:14:a5:
08:46:79:5a:3b:6e:b1:0a:1c:a0:77:d2:5b:82:ef:
8f:a8:dc:67:7e:b6:c4:12:f2:ad:86:4f:40:62:f7:
29:c6:b2:b2:55:f2:f6:6f:11:3c:96:44:cb:ad:24:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:92:29:91:4A:54:65:C9:6D:3F:EA:3D:F1:3F:EA:4B:DF:11:10:BC
X509v3 Authority Key Identifier:
keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233352e302f32342d3234203d3e20323633323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f7:b9:06:ae:62:d5:92:66:a3:b7:83:fc:c6:57:fb:82:fb:
91:6a:93:26:6f:66:ee:8f:74:22:ba:c4:36:dc:72:33:17:de:
96:90:59:1b:54:38:fc:f5:07:1c:6b:a2:47:0b:cd:1c:6a:21:
fc:ca:96:11:eb:ee:33:c5:4c:b4:18:57:03:e1:16:7e:2e:8b:
39:99:45:e7:71:7a:9d:06:4a:82:d1:82:ff:fc:6c:27:27:d2:
01:3c:81:99:6d:19:95:d3:f0:d6:d8:0f:61:c6:81:5a:87:63:
8c:c4:e7:c5:16:fd:b6:83:3e:12:21:4e:9b:cb:1b:82:79:75:
e4:71:45:29:09:65:c8:40:d0:22:0e:e3:70:5e:e3:d7:c9:e2:
3d:c5:c9:58:da:ef:74:ca:38:5a:6c:6f:f3:76:f2:82:20:5e:
a9:7f:23:5b:ee:39:cd:cd:b6:ff:96:7a:8e:30:1f:5b:24:d3:
29:33:43:12:7a:3c:5e:f7:71:6b:37:b0:0b:d7:72:70:d0:74:
dd:c6:61:5f:45:bb:cd:ca:b2:e3:94:97:35:e2:57:9c:18:36:
94:ba:e7:f5:07:87:73:3c:62:bb:42:73:80:5f:04:de:a3:9a:
a5:c7:fb:93:46:4f:7d:a1:1b:1a:46:14:2e:2f:5b:e1:63:76:
30:04:b8:77
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUalEgfNHwfdds1WV1IDt0Fnu2nFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBQjc3NzMwRDkxMjc4RDY1NkE5QjM1QjFFNTM0M0Yz
NTk4MDJBNDAeFw0yNTAyMDQxODQ2MTBaFw0yNjAyMDMxODUxMTBaMDMxMTAvBgNV
BAMTKDhCOTIyOTkxNEE1NDY1Qzk2RDNGRUEzREYxM0ZFQTRCREYxMTEwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DjdeYf8Ov3qcgBlZ7iqmK26n
4CU0WWqgRW4yN48yby8rVKJrGABLhf+gxdAEbWc1G26+geKfznZBHYVVG7fr29xV
CjDtlZ8pY8purNskBaKkN3ziD6DbwWQbJz7NTMLtewh199ajEniGts0ofCuPsw3N
lob8Qw8Hr1oEYZ/+DZitJWhtM1a4HTTva/a3rx95nlMG9ccx68l9Z4nU6RqeA8pI
kUCPu5+U9ZuCed3aG2gkvlMfxABLmz24voY4NhkF3+8Iu4yNnvKvuLpAhBkUpQhG
eVo7brEKHKB30luC74+o3Gd+tsQS8q2GT0Bi9ynGsrJV8vZvETyWRMutJMPTAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUi5IpkUpUZcltP+o98T/qS98RELwwHwYDVR0j
BBgwFoAUsqt3cw2RJ41laps1seU0PzWYAqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOTQ5RDBGRjY3RTlBMjUzNjMyMzgyRDRFMkNENDQzQThE
MzBBN0FEMTcyOTUzQjAxRDM1Q0YyM0FBRkM0MTI5LzAvQjJBQjc3NzMwRDkxMjc4
RDY1NkE5QjM1QjFFNTM0M0YzNTk4MDJBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMkFCNzc3MzBEOTEyNzhENjU2
QTlCMzVCMUU1MzQzRjM1OTgwMkE0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTk0OUQwRkY2N0U5QTI1MzYzMjM4MkQ0RTJDRDQ0M0E4RDMwQTdBRDE3
Mjk1M0IwMUQzNUNGMjNBQUZDNDEyOS8wLzMxMzkzMDJlMzEzMDM3MmUzMjMzMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzMjM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
a+swDQYJKoZIhvcNAQELBQADggEBALP3uQauYtWSZqO3g/zGV/uC+5FqkyZvZu6P
dCK6xDbccjMX3paQWRtUOPz1BxxrokcLzRxqIfzKlhHr7jPFTLQYVwPhFn4uizmZ
Redxep0GSoLRgv/8bCcn0gE8gZltGZXT8NbYD2HGgVqHY4zE58UW/baDPhIhTpvL
G4J5deRxRSkJZchA0CIO43Be49fJ4j3FyVja73TKOFpsb/N28oIgXql/I1vuOc3N
tv+Weo4wH1sk0ykzQxJ6PF73cWs3sAvXcnDQdN3GYV9Fu83KsuOUlzXiV5wYNpS6
5/UHh3M8YrtCc4BfBN6jmqXH+5NGT32hGxpGFC4vW+FjdjAEuHc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:06 2025 by rpki-client