Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa
File: 3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa (raw, json)
Hash identifier: 1eatcISrRWEjiJa/p7xBX6b+4bgRrTHTtU+86eOUpvs=
Subject key identifier: 3B:D8:21:CB:B9:94:00:23:4C:3D:42:73:10:D5:67:2F:0F:58:5E:2B
Certificate issuer: /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial: 7A7995FBE01FF06EAFB8937D4D62CE9725E05C9C
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa
Signing time: Tue 04 Feb 2025 18:23:24 +0000
ROA not before: Tue 04 Feb 2025 18:18:24 +0000
ROA not after: Tue 03 Feb 2026 18:23:24 +0000
asID: 265794
IP address blocks: 192.141.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:79:95:fb:e0:1f:f0:6e:af:b8:93:7d:4d:62:ce:97:25:e0:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Validity
Not Before: Feb 4 18:18:24 2025 GMT
Not After : Feb 3 18:23:24 2026 GMT
Subject: CN=3BD821CBB99400234C3D427310D5672F0F585E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:62:69:82:03:a7:16:33:e4:dc:b0:c7:b5:
23:74:5d:23:d0:b7:2c:d5:07:93:8d:c3:c2:e2:b6:
23:a9:14:a1:e9:83:03:e6:f1:cd:2f:d1:bb:43:ab:
84:3d:c3:79:d2:ae:d7:c3:eb:1c:56:bf:81:99:db:
6d:ce:bf:6a:ec:6f:92:f2:25:96:3a:88:17:72:d7:
83:9e:04:24:f3:6e:5f:57:28:07:e1:6b:d0:b3:c2:
6e:e6:79:bf:a0:7e:b6:7c:81:e7:77:6d:43:30:7c:
45:7c:1a:cc:e2:51:1d:f1:ee:70:c9:87:64:80:f8:
cc:5a:28:c6:89:9f:37:16:8e:24:5a:d3:90:89:5d:
d9:d2:b1:e6:7e:ae:ec:e6:99:48:4b:76:fc:09:e7:
03:9d:2e:e8:15:54:e9:9c:c5:e8:1e:fc:7d:ea:11:
16:62:27:2d:34:84:7a:55:ed:1f:01:9e:3e:4d:d2:
1a:7b:90:29:12:b1:2c:0e:09:13:db:00:55:c3:e8:
52:83:66:54:b1:01:98:cd:62:4e:5b:95:b3:de:6b:
5b:3d:b1:5e:7a:53:f3:60:cd:59:4d:f2:1b:b6:30:
4e:a1:72:14:3c:b8:e9:29:e0:a8:75:19:b2:1a:68:
d0:49:15:b2:2e:e9:84:28:7f:7a:e0:7b:66:cc:4b:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D8:21:CB:B9:94:00:23:4C:3D:42:73:10:D5:67:2F:0F:58:5E:2B
X509v3 Authority Key Identifier:
keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.40.0/24
Signature Algorithm: sha256WithRSAEncryption
52:45:12:15:9a:ea:5c:17:81:b9:fd:d2:2a:55:38:54:76:a4:
b8:ec:e4:85:3b:95:f8:45:1a:c9:4e:b9:a4:d7:58:6c:86:8e:
98:1d:53:0b:96:bc:2c:a1:da:35:5d:aa:aa:72:d4:bf:a3:64:
ab:7b:34:04:70:59:de:83:88:c5:93:0d:a4:6e:c5:61:f2:3a:
b0:23:78:3d:53:3e:5b:60:0d:99:b2:7e:a0:1b:8e:1f:a4:94:
41:44:e7:ed:ff:d4:f8:4a:2e:43:1a:88:9e:03:3f:41:af:e7:
af:5a:8c:47:45:20:96:61:8c:c6:07:44:13:bc:5c:35:b7:22:
26:94:fe:43:1d:1c:3f:8d:ee:b6:55:3f:1f:11:63:9f:b2:9b:
6b:0a:81:72:19:5d:3d:c4:c8:29:bb:35:f0:83:d9:05:3d:54:
ef:a5:ee:f8:46:7f:34:62:64:cc:27:10:2f:54:04:52:d7:53:
83:3f:a0:8e:60:4e:13:35:34:39:53:cc:51:bf:c6:9d:53:63:
d3:dc:85:95:18:21:3b:85:62:c2:5c:73:c1:e1:24:e7:18:ce:
3e:6d:65:45:a9:ef:ad:c7:4e:f7:20:f1:20:ed:bb:dc:f7:a1:
0c:6e:d6:a1:ca:83:21:c7:9e:a8:c0:6c:83:ad:3b:03:41:2d:
72:b7:e6:02
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUenmV++Af8G6vuJN9TWLOlyXgXJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU4QUU3NEM3NTU1QjNBMTE1REJGRkM4ODQwMzk1Q0Uy
MTlGNTlCNTAeFw0yNTAyMDQxODE4MjRaFw0yNjAyMDMxODIzMjRaMDMxMTAvBgNV
BAMTKDNCRDgyMUNCQjk5NDAwMjM0QzNENDI3MzEwRDU2NzJGMEY1ODVFMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOImJpggOnFjPk3LDHtSN0XSPQ
tyzVB5ONw8LitiOpFKHpgwPm8c0v0btDq4Q9w3nSrtfD6xxWv4GZ223Ov2rsb5Ly
JZY6iBdy14OeBCTzbl9XKAfha9Czwm7meb+gfrZ8ged3bUMwfEV8GsziUR3x7nDJ
h2SA+MxaKMaJnzcWjiRa05CJXdnSseZ+ruzmmUhLdvwJ5wOdLugVVOmcxege/H3q
ERZiJy00hHpV7R8Bnj5N0hp7kCkSsSwOCRPbAFXD6FKDZlSxAZjNYk5blbPea1s9
sV56U/NgzVlN8hu2ME6hchQ8uOkp4Kh1GbIaaNBJFbIu6YQof3rge2bMS9JrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUO9ghy7mUACNMPUJzENVnLw9YXiswHwYDVR0j
BBgwFoAUlYrnTHVVs6EV2//IhAOVziGfWbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRTEzNTA0MDlCRTAzMENBQkYyOENFREUwOEQzQTI3OTlD
MzYyOEYyNDNGMDA4Q0UzNzk0Nzc4RDMyMENBODMyLzAvOTU4QUU3NEM3NTU1QjNB
MTE1REJGRkM4ODQwMzk1Q0UyMTlGNTlCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NThBRTc0Qzc1NTVCM0ExMTVE
QkZGQzg4NDAzOTVDRTIxOUY1OUI1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUUxMzUwNDA5QkUwMzBDQUJGMjhDRURFMDhEM0EyNzk5QzM2MjhGMjQz
RjAwOENFMzc5NDc3OEQzMjBDQTgzMi8wLzMxMzkzMjJlMzEzNDMxMmUzNDMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzczOTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwI0o
MA0GCSqGSIb3DQEBCwUAA4IBAQBSRRIVmupcF4G5/dIqVThUdqS47OSFO5X4RRrJ
Trmk11hsho6YHVMLlrwsodo1XaqqctS/o2SrezQEcFneg4jFkw2kbsVh8jqwI3g9
Uz5bYA2Zsn6gG44fpJRBROft/9T4Si5DGoieAz9Br+evWoxHRSCWYYzGB0QTvFw1
tyImlP5DHRw/je62VT8fEWOfsptrCoFyGV09xMgpuzXwg9kFPVTvpe74Rn80YmTM
JxAvVARS11ODP6COYE4TNTQ5U8xRv8adU2PT3IWVGCE7hWLCXHPB4STnGM4+bWVF
qe+tx073IPEg7bvc96EMbtahyoMhx56owGyDrTsDQS1yt+YC
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:11 2025 by rpki-client