Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e302e3233322e302f32312d3234203d3e203238303733.roa
File: 3139302e302e3233322e302f32312d3234203d3e203238303733.roa (raw, json)
Hash identifier: 4YpGjH5JeWXUj7xEw+61qPi+lL41rjMgb6VXw5JVw3Q=
Subject key identifier: 67:CD:47:32:C8:3D:B0:4F:BA:32:4F:6B:E7:26:0F:C2:1A:4F:6D:2F
Certificate issuer: /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial: 290E066FC57445745552EE2B8CB7F93D906D8065
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e302e3233322e302f32312d3234203d3e203238303733.roa
Signing time: Tue 04 Feb 2025 18:51:17 +0000
ROA not before: Tue 04 Feb 2025 18:46:17 +0000
ROA not after: Tue 03 Feb 2026 18:51:17 +0000
asID: 28073
IP address blocks: 190.0.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:0e:06:6f:c5:74:45:74:55:52:ee:2b:8c:b7:f9:3d:90:6d:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Validity
Not Before: Feb 4 18:46:17 2025 GMT
Not After : Feb 3 18:51:17 2026 GMT
Subject: CN=67CD4732C83DB04FBA324F6BE7260FC21A4F6D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:e6:9e:5f:a2:a0:e7:52:ef:d4:3c:11:04:
66:95:08:01:5a:2c:a6:1e:61:64:fb:39:67:45:5b:
14:28:7a:84:1b:d1:05:27:92:5c:0f:e0:80:30:7f:
cd:05:92:09:50:e0:97:47:3e:41:0a:bf:93:c7:3e:
8f:1f:a6:b9:92:ba:4c:14:83:22:99:d0:6d:90:e9:
e3:6a:24:2f:02:f7:67:cc:49:f7:ac:74:d9:bc:8a:
a5:52:1e:c5:12:5a:05:5b:3e:3a:a0:72:ba:d8:73:
da:65:88:f1:d2:00:76:d9:b9:37:c9:66:df:e6:2b:
48:6a:dd:8a:df:d1:88:46:55:ed:d5:47:80:62:bc:
e1:39:ad:3c:86:fa:43:f3:34:87:65:0a:cb:99:b3:
01:00:e0:46:b6:27:e5:d8:7d:cd:db:2c:2f:5d:85:
b5:5f:33:df:7a:5a:d5:d1:0b:d2:a4:5f:fa:b3:ab:
02:7b:0e:72:53:97:ae:d8:a3:49:29:6c:97:42:5a:
ec:ab:7e:10:cc:24:7e:e9:9b:75:1c:a1:78:64:58:
f4:e7:20:12:fa:f3:f3:06:92:b1:55:b0:34:40:be:
97:3c:aa:bb:0a:3a:3d:e3:37:3d:a1:74:39:ed:47:
e4:11:7f:08:53:84:db:78:64:3d:b9:34:e8:ae:7d:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:47:32:C8:3D:B0:4F:BA:32:4F:6B:E7:26:0F:C2:1A:4F:6D:2F
X509v3 Authority Key Identifier:
keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e302e3233322e302f32312d3234203d3e203238303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.0.232.0/21
Signature Algorithm: sha256WithRSAEncryption
69:d1:28:ba:4f:77:e3:23:9e:8c:28:62:43:ca:2c:bc:84:ba:
dd:3c:3e:5b:87:07:ac:dd:11:2c:53:c2:69:22:10:86:4d:54:
7d:ba:a5:69:c9:86:40:a5:af:11:59:a3:2e:f1:2c:6f:9d:1b:
19:fd:4b:d6:d0:42:21:12:92:08:ff:ba:c9:02:9f:3e:19:5d:
1e:df:b8:42:bc:38:49:06:3e:2c:69:31:c2:b5:73:80:97:b2:
00:1a:80:98:13:ca:0b:74:1c:36:13:ed:49:11:23:c8:76:82:
f4:bd:04:7f:f5:fb:6d:2f:ac:1e:63:a7:c8:07:cc:4d:e1:df:
63:a6:ad:e0:ff:e8:c8:1b:80:9f:9e:93:cb:50:ee:76:88:3c:
ff:45:7c:15:28:26:de:40:3e:0c:fe:e1:e2:a8:3e:0e:0d:dc:
44:1e:fc:fb:79:12:6c:be:42:46:dc:af:da:20:84:56:03:64:
72:ee:f2:6f:9e:43:ba:cb:8e:7a:00:03:c7:b9:fe:0d:57:15:
cb:41:f3:c9:99:05:9e:5a:60:a3:02:d9:9a:50:38:86:7d:ff:
5a:4d:7a:1d:8b:ed:a8:cd:5d:32:be:71:c7:d8:b0:55:6b:c7:
4a:8e:43:14:63:00:f3:de:b4:76:25:36:45:23:d8:41:8f:6c:
c7:b9:b9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:26 2025 by rpki-client