Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/3139302e342e38382e302f32312d3234203d3e203136393733.roa
File: 3139302e342e38382e302f32312d3234203d3e203136393733.roa (raw, json)
Hash identifier: dwowL1CUMQjXXDOiX/n4cKySpxNoR46OdUV4JqUN2M4=
Subject key identifier: F2:60:9C:E7:0D:14:C5:AA:57:AB:F8:8A:A2:37:18:A0:79:A7:A2:D8
Certificate issuer: /CN=71B0CD08B5DCFED6F97BF866CB6497AE603655B3
Certificate serial: 56D5C68CCFC2FE5C3FE5D408B5AFD6B4DE1A8EE7
Authority key identifier: 71:B0:CD:08:B5:DC:FE:D6:F9:7B:F8:66:CB:64:97:AE:60:36:55:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/3139302e342e38382e302f32312d3234203d3e203136393733.roa
Signing time: Tue 04 Feb 2025 20:05:18 +0000
ROA not before: Tue 04 Feb 2025 20:00:18 +0000
ROA not after: Tue 03 Feb 2026 20:05:18 +0000
asID: 16973
IP address blocks: 190.4.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d5:c6:8c:cf:c2:fe:5c:3f:e5:d4:08:b5:af:d6:b4:de:1a:8e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71B0CD08B5DCFED6F97BF866CB6497AE603655B3
Validity
Not Before: Feb 4 20:00:18 2025 GMT
Not After : Feb 3 20:05:18 2026 GMT
Subject: CN=F2609CE70D14C5AA57ABF88AA23718A079A7A2D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:c9:2a:07:ae:db:a4:1b:cc:7f:85:b7:18:
12:11:a1:b6:b9:fc:7b:e5:b9:0b:da:30:1f:12:ee:
ee:10:c0:3d:47:39:61:43:25:e6:cb:d6:d1:91:bd:
e8:5c:b8:00:f9:64:15:17:53:5e:d2:53:1a:7c:d3:
92:dd:7c:cf:b7:27:8f:1c:7a:70:64:89:52:8a:a3:
41:d6:50:46:78:ee:56:3d:74:f4:96:ba:61:54:27:
d2:13:2d:17:58:de:fe:1f:7c:10:d0:0e:e0:07:d4:
41:e8:a7:96:94:22:e8:78:e1:9c:7c:c8:70:5c:47:
26:46:63:d2:50:18:77:40:1d:3a:db:62:be:61:3e:
6d:c6:2c:7c:18:7f:0e:8e:80:72:fe:14:bd:b8:a5:
50:10:84:20:7e:7f:57:77:23:77:b7:f3:6c:05:9e:
2a:f7:83:a7:13:95:a5:1b:28:42:51:77:78:c5:ea:
d5:33:3d:4f:55:97:20:b5:88:2e:95:69:d8:33:6c:
5b:b7:f0:08:ef:b1:4a:21:1b:7a:6c:bb:f2:4c:95:
ca:86:6c:8e:a2:7b:d9:05:ec:7e:d2:6f:19:68:67:
bb:e7:7c:f8:02:e9:4b:d0:8f:69:65:1e:67:a6:11:
ea:da:5b:67:96:af:3c:bf:d6:2e:14:a4:83:28:7b:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:60:9C:E7:0D:14:C5:AA:57:AB:F8:8A:A2:37:18:A0:79:A7:A2:D8
X509v3 Authority Key Identifier:
keyid:71:B0:CD:08:B5:DC:FE:D6:F9:7B:F8:66:CB:64:97:AE:60:36:55:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71B0CD08B5DCFED6F97BF866CB6497AE603655B3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2CD1FB588CF2A3078667525D1AD957561CA57DCC94AA784C24CA84F089B85C3/0/3139302e342e38382e302f32312d3234203d3e203136393733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.88.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:d1:d2:f3:a4:6e:68:f9:12:44:b1:c3:eb:52:cf:52:74:2c:
b9:a7:05:63:51:b9:75:3c:51:8a:05:b8:9b:e8:d1:90:a2:0b:
36:cf:31:f9:f5:79:9c:68:48:89:60:44:fe:c1:ce:8a:91:9d:
ac:51:f0:0b:53:9e:8d:f1:62:a9:20:eb:54:d8:1a:ac:90:7d:
1f:1f:13:54:00:73:dc:fe:1a:d8:a9:7d:59:6c:fa:d4:4c:04:
7c:e8:39:f8:d8:9a:87:11:56:2d:97:41:e4:5e:f3:3b:44:a7:
91:5b:2d:08:7e:59:f5:1e:6f:3d:a2:eb:46:11:be:e3:3a:98:
5e:19:82:97:01:96:46:19:42:fa:ef:9d:4b:dc:e3:7a:1e:73:
e7:c6:6d:b0:93:d0:67:29:9a:64:2b:67:c4:3f:29:8f:2f:93:
bf:d8:e4:46:0a:40:72:d4:ed:1b:17:cd:b2:5e:9d:97:51:71:
b6:9a:5c:a6:8a:19:59:ae:73:26:d5:f1:76:05:71:6e:f7:a6:
71:59:7b:f3:c4:7e:04:7b:fe:65:cd:08:f8:55:db:50:a6:d2:
c0:eb:db:54:cd:2e:e4:a3:d5:e5:f1:a3:0f:67:02:eb:52:17:
18:bc:e8:35:58:98:e5:20:95:7a:ed:fe:11:46:cc:4e:a5:c6:
42:65:68:85
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUVtXGjM/C/lw/5dQIta/WtN4ajucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFCMENEMDhCNURDRkVENkY5N0JGODY2Q0I2NDk3QUU2
MDM2NTVCMzAeFw0yNTAyMDQyMDAwMThaFw0yNjAyMDMyMDA1MThaMDMxMTAvBgNV
BAMTKEYyNjA5Q0U3MEQxNEM1QUE1N0FCRjg4QUEyMzcxOEEwNzlBN0EyRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DMkqB67bpBvMf4W3GBIRoba5
/HvluQvaMB8S7u4QwD1HOWFDJebL1tGRvehcuAD5ZBUXU17SUxp805LdfM+3J48c
enBkiVKKo0HWUEZ47lY9dPSWumFUJ9ITLRdY3v4ffBDQDuAH1EHop5aUIuh44Zx8
yHBcRyZGY9JQGHdAHTrbYr5hPm3GLHwYfw6OgHL+FL24pVAQhCB+f1d3I3e382wF
nir3g6cTlaUbKEJRd3jF6tUzPU9VlyC1iC6VadgzbFu38AjvsUohG3psu/JMlcqG
bI6ie9kF7H7SbxloZ7vnfPgC6UvQj2llHmemEeraW2eWrzy/1i4UpIMoe26fAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU8mCc5w0UxapXq/iKojcYoHmnotgwHwYDVR0j
BBgwFoAUcbDNCLXc/tb5e/hmy2SXrmA2VbMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMkNEMUZCNTg4Q0YyQTMwNzg2Njc1MjVEMUFEOTU3NTYx
Q0E1N0RDQzk0QUE3ODRDMjRDQTg0RjA4OUI4NUMzLzAvNzFCMENEMDhCNURDRkVE
NkY5N0JGODY2Q0I2NDk3QUU2MDM2NTVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MUIwQ0QwOEI1RENGRUQ2Rjk3
QkY4NjZDQjY0OTdBRTYwMzY1NUIzLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjJDRDFGQjU4OENGMkEzMDc4NjY3NTI1RDFBRDk1NzU2MUNBNTdEQ0M5
NEFBNzg0QzI0Q0E4NEYwODlCODVDMy8wLzMxMzkzMDJlMzQyZTM4MzgyZTMwMmYz
MjMxMmQzMjM0MjAzZDNlMjAzMTM2MzkzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvgRYMA0GCSqG
SIb3DQEBCwUAA4IBAQCP0dLzpG5o+RJEscPrUs9SdCy5pwVjUbl1PFGKBbib6NGQ
ogs2zzH59XmcaEiJYET+wc6KkZ2sUfALU56N8WKpIOtU2BqskH0fHxNUAHPc/hrY
qX1ZbPrUTAR86Dn42JqHEVYtl0HkXvM7RKeRWy0Ifln1Hm89outGEb7jOpheGYKX
AZZGGUL6751L3ON6HnPnxm2wk9BnKZpkK2fEPymPL5O/2ORGCkBy1O0bF82yXp2X
UXG2mlymihlZrnMm1fF2BXFu96ZxWXvzxH4Ee/5lzQj4VdtQptLA69tUzS7ko9Xl
8aMPZwLrUhcYvOg1WJjlIJV67f4RRsxOpcZCZWiF
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:56:19 2025 by rpki-client