Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5C9AFE00D45C86B8B3572AB37D5555A49458DA538562AB73BD8F7CF33524A91/0/3139302e382e3138302e302f32322d3234203d3e20323632313639.roa
File: 3139302e382e3138302e302f32322d3234203d3e20323632313639.roa (raw, json)
Hash identifier: 8oyfwEkCTZ1qji2pgAgo2T/p2JVyIRjmYdnvzAeBu2k=
Subject key identifier: 2A:14:77:EE:AF:C0:66:93:13:63:26:D5:BE:8A:BC:A1:EE:45:FB:D1
Certificate issuer: /CN=5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC
Certificate serial: 6D785C64336CACD5F28CB6148E6D3685492D7B02
Authority key identifier: 5D:1B:02:48:FA:AE:22:5A:FB:B0:78:5C:F4:3E:CD:54:2F:6E:23:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C5C9AFE00D45C86B8B3572AB37D5555A49458DA538562AB73BD8F7CF33524A91/0/3139302e382e3138302e302f32322d3234203d3e20323632313639.roa
Signing time: Tue 04 Feb 2025 18:13:10 +0000
ROA not before: Tue 04 Feb 2025 18:08:10 +0000
ROA not after: Tue 03 Feb 2026 18:13:10 +0000
asID: 262169
IP address blocks: 190.8.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:78:5c:64:33:6c:ac:d5:f2:8c:b6:14:8e:6d:36:85:49:2d:7b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC
Validity
Not Before: Feb 4 18:08:10 2025 GMT
Not After : Feb 3 18:13:10 2026 GMT
Subject: CN=2A1477EEAFC06693136326D5BE8ABCA1EE45FBD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:fd:f3:cb:84:df:08:ce:c5:0b:4f:88:d1:
69:95:1b:50:e6:f3:93:34:69:22:59:2e:d3:c7:d2:
a2:94:6f:7c:98:71:59:bd:85:38:3e:50:8a:e6:12:
a2:76:6f:63:fe:de:02:24:4c:f8:7e:4f:d6:ac:9c:
cd:93:43:fa:41:97:7c:9b:46:e6:d0:8d:6a:35:43:
3d:65:0a:60:b4:a7:2d:7e:ed:39:da:1c:61:e8:52:
00:fc:96:84:68:cc:17:3f:39:7e:fb:d5:79:62:81:
e6:94:e9:12:d9:7e:6a:77:cf:f8:42:fd:25:bc:89:
64:74:9c:67:f7:f2:e3:34:43:51:04:48:c5:14:ed:
d5:f3:12:ca:8b:b1:f7:3f:dd:9f:ac:e3:79:ce:69:
73:a0:aa:8f:8f:bc:65:e1:6d:c5:9c:b2:25:70:33:
39:aa:59:43:e6:5b:fb:e3:d1:71:ed:97:32:e3:4d:
f2:b4:cf:16:4b:ff:d8:96:b3:30:9a:2c:63:0e:f2:
79:56:90:cb:86:60:6b:fb:1b:7e:e2:92:93:9a:38:
a7:09:be:15:bd:e0:11:6a:0a:33:87:55:af:61:da:
83:80:e4:fc:1c:b1:30:20:eb:08:7d:cf:b8:eb:10:
76:6b:00:a6:e8:c7:78:9d:e5:d1:bf:6c:6d:6c:38:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:14:77:EE:AF:C0:66:93:13:63:26:D5:BE:8A:BC:A1:EE:45:FB:D1
X509v3 Authority Key Identifier:
keyid:5D:1B:02:48:FA:AE:22:5A:FB:B0:78:5C:F4:3E:CD:54:2F:6E:23:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C5C9AFE00D45C86B8B3572AB37D5555A49458DA538562AB73BD8F7CF33524A91/0/5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D1B0248FAAE225AFBB0785CF43ECD542F6E23BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5C9AFE00D45C86B8B3572AB37D5555A49458DA538562AB73BD8F7CF33524A91/0/3139302e382e3138302e302f32322d3234203d3e20323632313639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.8.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:d0:9a:84:00:ff:dd:cf:bd:35:f0:96:65:a0:f8:d2:3e:50:
19:16:99:e8:b9:3a:c4:83:66:a3:45:86:25:c4:f5:d1:81:1a:
a8:9c:b5:5d:4b:e2:de:60:ad:70:75:35:50:2e:b4:14:fe:c2:
7a:de:d6:99:5b:d1:0c:20:8f:5e:eb:be:47:99:42:42:81:0d:
c2:7f:e5:35:a5:a7:08:b7:5b:6e:35:a1:b2:b4:5f:64:9d:fd:
7a:fc:c8:0e:ba:c8:fc:0f:fd:3b:b3:04:99:4e:8f:72:6a:88:
42:b0:a0:01:5f:05:57:ad:80:fb:be:2c:02:20:43:69:66:c4:
7a:ce:38:e6:aa:13:0b:57:9d:6c:d4:37:d7:b2:2c:0a:6a:2e:
0a:de:f8:ea:d8:a6:c8:a7:74:66:24:61:ad:86:2b:90:75:fd:
3f:34:fe:86:b5:66:fb:22:bb:57:9d:57:f6:28:f4:30:dc:6b:
64:ca:9c:a1:36:e5:70:e8:f0:29:37:bd:c3:ef:c9:5a:a8:f7:
29:9c:60:43:db:3a:ea:61:73:e4:16:c3:4d:35:81:59:58:7c:
74:32:bd:47:e8:79:ef:26:b9:54:1c:15:d1:b1:64:ac:80:49:
aa:79:24:59:55:b4:9f:34:13:43:0e:41:4c:cc:d6:39:6f:e0:
e3:c3:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:28 2025 by rpki-client