Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203238313138.roa
File: 3139302e39342e33322e302f31392d3234203d3e203238313138.roa (raw, json)
Hash identifier: A2/GHxxGijRGpVc0iBtSvU1Mm/WprtCf8PTIScb22gc=
Subject key identifier: BA:5F:31:67:E2:51:76:F4:E2:27:49:2A:86:3A:34:B0:E1:F7:5F:CC
Certificate issuer: /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial: 7820F42CE92E57B6F61FEFB428DFC04F4462597F
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203238313138.roa
Signing time: Tue 04 Feb 2025 18:47:01 +0000
ROA not before: Tue 04 Feb 2025 18:42:01 +0000
ROA not after: Tue 03 Feb 2026 18:47:01 +0000
asID: 28118
IP address blocks: 190.94.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:20:f4:2c:e9:2e:57:b6:f6:1f:ef:b4:28:df:c0:4f:44:62:59:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Validity
Not Before: Feb 4 18:42:01 2025 GMT
Not After : Feb 3 18:47:01 2026 GMT
Subject: CN=BA5F3167E25176F4E227492A863A34B0E1F75FCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:22:21:f6:bf:63:d9:f9:a8:31:62:f6:5c:
f0:01:83:8e:9c:04:83:66:d3:2a:1f:64:f4:78:51:
98:db:1d:f6:a5:04:28:2c:92:c0:bd:2b:91:fc:47:
50:07:ea:c5:19:39:ea:09:fc:60:58:c8:f3:20:cd:
10:7e:af:eb:af:f9:26:76:9f:df:d4:0b:54:03:17:
54:8b:5e:a2:1f:44:fb:52:7a:31:16:36:85:a9:63:
5f:74:b4:06:2b:2b:89:8e:ae:2e:70:b0:81:cf:15:
17:3b:50:f4:1c:ab:08:3a:12:a2:a9:e6:19:5d:20:
98:fc:59:a2:c7:4f:62:dd:5c:b7:86:1f:e4:44:68:
97:ab:72:c5:f9:0a:6f:ba:eb:f0:00:1d:3a:ab:2e:
04:41:80:eb:89:c5:e5:c4:ae:b9:f1:da:e3:d6:4d:
da:c2:8b:80:6f:ec:05:2e:a4:04:1c:3e:b0:89:24:
ea:21:50:f1:78:61:d1:73:9e:3d:a6:6b:3d:23:27:
65:8e:84:07:d4:cb:91:b8:86:48:a1:66:59:72:fc:
7d:9c:23:10:42:0a:ce:d6:cf:6c:40:89:18:20:8a:
c7:c7:39:57:d3:3e:ab:12:12:83:5e:b2:d2:9e:4a:
bc:03:32:13:7a:aa:b0:dd:0d:89:2d:b8:01:d4:98:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:31:67:E2:51:76:F4:E2:27:49:2A:86:3A:34:B0:E1:F7:5F:CC
X509v3 Authority Key Identifier:
keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203238313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.94.32.0/19
Signature Algorithm: sha256WithRSAEncryption
c5:51:c7:4e:96:77:12:25:ea:2d:61:fb:63:14:1b:42:6e:9b:
87:03:d9:5e:71:4e:6b:29:b5:49:13:ce:84:77:34:7b:0b:2c:
2c:c2:43:1a:a4:c9:56:dc:2b:15:f2:87:6f:d3:76:ea:e2:42:
d9:54:14:93:a7:d2:1e:09:6a:9c:b7:b0:11:b1:d8:f4:0c:a1:
45:a6:d6:2f:7f:26:63:15:56:46:a8:d7:09:b3:f6:26:2f:8c:
bb:42:3b:05:ef:a9:ce:98:3f:4e:09:77:6b:c0:6a:24:6c:76:
61:5c:0d:54:32:6f:70:01:84:c3:82:67:f6:99:54:04:fe:4a:
34:06:93:e6:05:a5:04:99:99:d1:b5:3c:ff:bf:e8:80:52:05:
e4:59:9d:8e:b2:f2:f3:c1:d4:78:5d:79:e1:a9:07:87:2a:24:
cc:52:25:f5:5f:f5:a5:47:76:6e:09:fa:20:2a:be:e0:50:7c:
00:ba:f5:68:9e:1b:6b:b5:d9:08:31:ec:29:fc:af:30:33:b9:
a7:7e:17:61:14:d4:8b:2a:28:d5:17:af:54:5e:57:82:9e:be:
62:16:d2:a5:46:33:67:a6:58:10:d9:3e:16:84:7f:e6:04:6e:
d2:fb:bd:91:24:88:cb:da:0e:ca:02:08:c7:ee:03:d7:4f:b9:
e5:13:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:20 2025 by rpki-client