Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e33312e302f32342d3234203d3e203132313237.roa
File: 3139302e35372e33312e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier: M0e3uTYufGrVwjjhEmcwam4AdddGTp441tQd7iR2IZo=
Subject key identifier: E3:3A:15:F9:2B:74:E0:A9:DB:39:E2:C5:6B:A3:CA:4E:B7:86:93:78
Certificate issuer: /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial: 091DC15C4157EBE6A97469753C5C01E2CFD4FAD6
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e33312e302f32342d3234203d3e203132313237.roa
Signing time: Tue 04 Feb 2025 18:51:29 +0000
ROA not before: Tue 04 Feb 2025 18:46:29 +0000
ROA not after: Tue 03 Feb 2026 18:51:29 +0000
asID: 12127
IP address blocks: 190.57.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1d:c1:5c:41:57:eb:e6:a9:74:69:75:3c:5c:01:e2:cf:d4:fa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Validity
Not Before: Feb 4 18:46:29 2025 GMT
Not After : Feb 3 18:51:29 2026 GMT
Subject: CN=E33A15F92B74E0A9DB39E2C56BA3CA4EB7869378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:b2:3f:50:f1:e5:72:2c:98:22:8c:8b:c8:
ff:d4:a4:2d:93:a9:61:32:43:ba:f8:fe:8e:59:db:
d7:be:a4:de:c2:75:02:7e:8e:e9:fb:b5:cb:a9:3c:
0e:4a:71:3a:0f:b3:a7:44:8a:1a:72:ca:01:19:da:
75:00:52:55:d1:83:dc:9e:a0:96:c5:09:fb:47:77:
34:b5:a7:79:6f:58:e7:71:2b:c2:29:6c:24:d7:d7:
2c:79:1b:0d:22:1d:ea:5a:3e:7b:3e:84:82:74:19:
37:88:b1:5f:79:d5:9f:c9:c0:52:b6:56:1f:82:a9:
8c:0d:c9:2f:91:5b:c7:c3:9e:fe:e7:89:c4:ff:74:
52:bc:b2:1b:68:b4:f9:95:48:60:05:5c:b1:d7:a7:
49:34:d8:b3:c3:80:c5:21:cf:8b:c6:67:61:fb:c3:
57:5b:18:72:92:ea:da:b6:c1:9a:9c:4e:d0:01:b7:
25:32:fc:5f:1f:cf:a9:d6:f3:bb:28:0f:55:3a:9a:
24:ed:83:2b:01:9d:2d:ad:0f:9b:30:67:e5:05:09:
6d:9d:f4:0c:1b:a4:08:d2:64:0d:67:a5:f7:e1:39:
43:ae:24:14:67:59:c8:72:b4:98:f6:f7:60:fb:9d:
fe:d6:b1:b1:03:00:dd:8b:cc:f9:08:bd:e9:2a:4b:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:15:F9:2B:74:E0:A9:DB:39:E2:C5:6B:A3:CA:4E:B7:86:93:78
X509v3 Authority Key Identifier:
keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e33312e302f32342d3234203d3e203132313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.57.31.0/24
Signature Algorithm: sha256WithRSAEncryption
36:39:5d:be:fa:ae:07:e0:70:68:e6:3e:62:89:70:62:ff:2b:
69:77:96:de:c9:3f:55:57:25:45:a8:3f:da:cf:2a:84:41:18:
c8:99:a2:0a:33:4c:a7:f5:6b:00:7d:72:56:b8:fa:3b:03:24:
4d:24:23:e6:a8:06:e1:f3:4e:a6:5c:12:35:94:9a:b1:55:bf:
83:c1:d9:ad:93:a7:75:fc:57:1d:ed:65:f2:02:d4:c5:0a:03:
42:7c:93:e9:ac:fe:3f:a3:2f:a1:78:7d:2f:31:86:1b:db:00:
c2:ee:12:13:49:a8:d9:69:eb:a0:58:38:28:12:cc:1a:fa:d6:
01:10:89:6e:db:76:d0:e8:18:63:e8:00:b1:95:4d:b5:5c:ac:
85:b5:02:fd:6f:0c:2d:2e:a8:73:6b:90:79:f6:9c:5e:7e:7d:
ef:68:b9:e1:85:51:94:5f:48:bf:97:f8:3f:0f:21:f6:a8:d0:
a3:b5:02:c5:ea:b8:e3:46:06:7c:b6:d4:78:09:aa:bc:41:3e:
8d:4b:29:ba:6a:f6:e0:6b:0a:2a:7d:5d:c4:82:db:51:05:a7:
30:94:4a:fd:12:71:b1:8d:94:79:f9:5f:91:d8:9d:30:5a:5a:
f8:38:17:17:1b:eb:f1:bc:d8:30:9a:1b:52:a7:34:15:d3:b2:
fb:f9:9d:bd
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUCR3BXEFX6+apdGl1PFwB4s/U+tYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MjlaFw0yNjAyMDMxODUxMjlaMDMxMTAvBgNV
BAMTKEUzM0ExNUY5MkI3NEUwQTlEQjM5RTJDNTZCQTNDQTRFQjc4NjkzNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF17I/UPHlciyYIoyLyP/UpC2T
qWEyQ7r4/o5Z29e+pN7CdQJ+jun7tcupPA5KcToPs6dEihpyygEZ2nUAUlXRg9ye
oJbFCftHdzS1p3lvWOdxK8IpbCTX1yx5Gw0iHepaPns+hIJ0GTeIsV951Z/JwFK2
Vh+CqYwNyS+RW8fDnv7nicT/dFK8shtotPmVSGAFXLHXp0k02LPDgMUhz4vGZ2H7
w1dbGHKS6tq2wZqcTtABtyUy/F8fz6nW87soD1U6miTtgysBnS2tD5swZ+UFCW2d
9AwbpAjSZA1npffhOUOuJBRnWchytJj292D7nf7WsbEDAN2LzPkIvekqS7ClAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU4zoV+St04KnbOeLFa6PKTreGk3gwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzMzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzIzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+OR8wDQYJ
KoZIhvcNAQELBQADggEBADY5Xb76rgfgcGjmPmKJcGL/K2l3lt7JP1VXJUWoP9rP
KoRBGMiZogozTKf1awB9cla4+jsDJE0kI+aoBuHzTqZcEjWUmrFVv4PB2a2Tp3X8
Vx3tZfIC1MUKA0J8k+ms/j+jL6F4fS8xhhvbAMLuEhNJqNlp66BYOCgSzBr61gEQ
iW7bdtDoGGPoALGVTbVcrIW1Av1vDC0uqHNrkHn2nF5+fe9oueGFUZRfSL+X+D8P
Ifao0KO1AsXquONGBny21HgJqrxBPo1LKbpq9uBrCip9XcSC21EFpzCUSv0ScbGN
lHn5X5HYnTBaWvg4Fxcb6/G82DCaG1KnNBXTsvv5nb0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:34 2025 by rpki-client