Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35392e302f32342d3234203d3e20323636373537.roa
File: 3139312e39372e35392e302f32342d3234203d3e20323636373537.roa (raw, json)
Hash identifier: 2PAxAv6N3SKbPQv0g8qRLPDfuPUDctm/zclZK9Vhs4Q=
Subject key identifier: C5:DD:46:59:62:99:64:20:0B:EA:BC:C9:EE:F2:AC:D6:63:4D:0C:14
Certificate issuer: /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial: 144ABC152F3EDF7F429F440AE739F54A07C9A879
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35392e302f32342d3234203d3e20323636373537.roa
Signing time: Tue 04 Feb 2025 18:31:33 +0000
ROA not before: Tue 04 Feb 2025 18:26:33 +0000
ROA not after: Tue 03 Feb 2026 18:31:33 +0000
asID: 266757
IP address blocks: 191.97.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4a:bc:15:2f:3e:df:7f:42:9f:44:0a:e7:39:f5:4a:07:c9:a8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
Validity
Not Before: Feb 4 18:26:33 2025 GMT
Not After : Feb 3 18:31:33 2026 GMT
Subject: CN=C5DD4659629964200BEABCC9EEF2ACD6634D0C14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:77:aa:71:2d:a6:9c:e2:b9:c1:c6:6c:2f:
b8:88:e0:6c:bb:a6:ad:ce:92:52:83:a8:e6:8e:de:
8b:56:98:25:42:18:51:60:fc:31:0e:33:56:d9:c4:
a3:56:2a:da:cc:10:c0:25:39:38:e2:c3:12:9e:62:
14:d8:ee:bb:6e:58:da:ed:cf:39:28:aa:4e:c1:16:
43:90:d2:ab:a0:62:83:8e:7d:2a:97:ac:7b:3d:8b:
ff:c4:d9:61:8b:55:9d:75:c5:e7:ce:b5:03:23:d0:
c6:88:1a:fb:e8:94:fc:17:b7:16:c8:4b:eb:08:f8:
43:2b:6f:5e:de:09:d0:eb:e3:9e:15:b6:3e:e3:7d:
21:45:e2:74:86:0b:92:22:97:4f:b4:61:2c:eb:44:
d0:b9:fd:8b:fc:52:79:ce:52:97:c4:2f:15:79:23:
bb:c8:78:d0:5a:8c:b2:9f:ba:24:f8:3a:7c:18:1a:
17:44:0a:d9:09:e5:9d:3f:91:a2:ce:cc:ef:c9:91:
37:08:6f:4c:6e:04:f9:bf:07:02:f2:4c:34:05:75:
4b:8d:63:43:c7:83:2e:ca:79:d1:6d:8e:85:53:62:
68:e7:d7:d5:7d:92:71:6d:de:da:e5:ad:90:c2:6a:
7c:f6:b0:76:ba:73:88:99:9f:c1:3a:68:38:30:06:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DD:46:59:62:99:64:20:0B:EA:BC:C9:EE:F2:AC:D6:63:4D:0C:14
X509v3 Authority Key Identifier:
keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139312e39372e35392e302f32342d3234203d3e20323636373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.59.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fc:1d:53:e5:3b:f6:fa:ff:e0:6c:09:31:f7:f7:11:30:11:
c2:80:e2:04:3d:10:22:c9:f2:c9:ae:12:ff:9d:16:a2:ef:eb:
4b:84:03:4d:b0:0c:70:90:b6:be:d8:ab:f0:b9:2f:ff:03:2f:
ff:86:fe:8f:2c:bd:d2:1e:f6:11:dd:d2:ba:91:42:36:61:5b:
8d:42:5e:53:2e:bd:83:0b:0e:b7:01:9b:50:b9:2c:2c:97:7f:
b3:cf:18:c5:c8:18:b6:a3:e1:c4:9a:89:c1:ab:03:0c:be:e4:
6a:30:58:b0:39:32:37:46:42:76:fb:e9:e6:c4:63:a3:9e:dc:
ab:a3:ca:cf:6d:b5:34:cb:cb:09:2c:2a:df:60:eb:37:cb:6f:
ea:8a:70:a7:6f:17:d8:65:da:d2:73:01:22:a8:1d:b0:b8:80:
62:d5:eb:5b:7a:6a:f2:70:bb:c2:4c:a4:ab:9d:99:0d:38:60:
f5:6e:96:07:41:9a:96:d1:64:06:1c:a1:3b:25:e8:ce:c5:b0:
b8:c7:07:f6:fd:66:aa:17:13:da:1a:d2:d0:f2:c6:b9:dc:58:
d0:75:6a:5a:38:c5:90:24:6f:53:85:3d:cc:ad:4d:1d:d2:f2:
41:d0:43:a5:b9:f5:30:ea:dc:86:46:98:2e:b1:4a:62:e8:9c:
24:85:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:11:12 2025 by rpki-client