Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32302e302f32342d3234203d3e203132313237.roa
File: 3139302e35372e32302e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier: wP+ZXP95D73wwUPqvrs0VGBWrXrkyBmysuJcbKVeC7o=
Subject key identifier: 6F:D1:FE:9F:E1:31:4D:CF:29:00:BB:5F:CD:70:AD:57:03:9B:BA:36
Certificate issuer: /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial: 5F93EEA5C85F1A65CC10BEE170DF47E426A63669
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32302e302f32342d3234203d3e203132313237.roa
Signing time: Tue 04 Feb 2025 18:51:37 +0000
ROA not before: Tue 04 Feb 2025 18:46:37 +0000
ROA not after: Tue 03 Feb 2026 18:51:37 +0000
asID: 12127
IP address blocks: 190.57.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:93:ee:a5:c8:5f:1a:65:cc:10:be:e1:70:df:47:e4:26:a6:36:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Validity
Not Before: Feb 4 18:46:37 2025 GMT
Not After : Feb 3 18:51:37 2026 GMT
Subject: CN=6FD1FE9FE1314DCF2900BB5FCD70AD57039BBA36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:95:b3:6c:28:f3:98:0d:12:01:17:0e:67:
de:12:60:9e:84:c5:12:0f:1a:51:1c:06:eb:5a:4d:
d1:72:f8:95:24:e9:5a:e7:11:c3:0d:d2:d2:3c:c8:
0e:10:59:43:51:ad:bf:84:82:ee:64:7b:8b:7c:1c:
4e:ea:6f:17:5b:41:10:3e:70:6e:90:ec:5f:9e:0c:
2c:0e:b9:95:7f:6b:3b:4b:90:c5:bc:d5:e5:52:21:
1c:5e:f0:ef:5d:ea:aa:cf:51:34:c7:6c:1b:dd:3d:
a2:dd:6a:5d:f5:88:9f:85:4e:db:63:20:5c:20:25:
86:ab:34:43:3d:b0:dc:a7:8d:49:e9:d4:e2:62:5f:
6d:b5:d3:fc:ce:a2:4f:b8:de:57:f6:1c:06:0e:f1:
7c:38:21:54:54:49:b6:bc:53:de:b1:0e:a9:84:b9:
84:f7:da:17:43:e6:97:62:dc:ae:3b:5b:38:27:fc:
40:8b:e1:97:6f:3b:21:d8:05:9a:28:95:8b:cc:10:
33:bd:55:1f:4d:16:20:93:60:1e:c7:57:bf:f2:fd:
da:96:87:31:62:b1:78:b1:64:d0:a3:79:5d:d3:8e:
ae:bd:95:60:42:6a:67:62:21:a9:f0:2b:c0:c2:ee:
1b:81:a9:32:2f:1c:e3:45:51:98:8c:ca:bc:96:28:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D1:FE:9F:E1:31:4D:CF:29:00:BB:5F:CD:70:AD:57:03:9B:BA:36
X509v3 Authority Key Identifier:
keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32302e302f32342d3234203d3e203132313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.57.20.0/24
Signature Algorithm: sha256WithRSAEncryption
11:31:5e:05:7c:66:c6:e1:2a:21:e5:be:2c:37:52:cc:f6:a9:
73:69:d5:3d:66:58:5c:3c:5a:e8:06:9a:bb:ee:31:63:a1:48:
c8:ed:30:94:8b:28:41:a5:ed:d4:aa:26:a6:4f:7a:22:c3:2d:
46:93:a0:36:38:ad:54:3f:93:16:24:f5:27:d2:9c:53:13:8a:
f2:80:84:44:ee:6f:bb:78:c0:5b:67:3e:5a:4f:6d:19:7c:fb:
73:69:75:41:be:a8:a7:a6:fe:ab:a2:fe:54:b8:0f:a1:d9:41:
ce:41:b8:45:23:38:83:18:bf:3c:c3:46:40:21:60:bc:3d:25:
4a:80:29:47:34:ac:9e:ce:80:54:1a:5d:60:1d:fb:43:c3:27:
b4:0b:17:f3:d4:ee:7a:63:8a:8b:81:77:22:82:22:72:3e:a7:
15:55:61:fa:d5:73:8e:54:78:a9:90:4b:25:e1:9a:83:f8:c0:
24:53:f0:dc:d0:68:92:26:3a:1c:c9:0c:b0:8d:9f:c1:ac:01:
29:47:63:e2:65:53:1a:48:dc:8b:bb:66:59:fc:f7:5d:f9:53:
11:9f:73:df:81:7f:77:b1:7c:7b:a9:f1:9a:0a:9b:82:d9:24:
f7:ad:b0:4a:64:3f:2a:5f:24:f5:8d:d8:72:6f:61:0d:58:f5:
ef:83:ec:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:50 2025 by rpki-client