Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3131342e3232342e302f32312d3231203d3e203233323031.roa
File: 3139302e3131342e3232342e302f32312d3231203d3e203233323031.roa (raw, json)
Hash identifier: 6FH80A+3zBsREto9hT0bbddXv6BwDtAHcVrm6HFbkkY=
Subject key identifier: 52:F7:4E:A1:66:1D:76:B4:B9:0D:EC:D5:07:DB:C5:45:07:81:2E:87
Certificate issuer: /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial: 3F3F897BD9890944FF256B62DFA0AFF2F148071B
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3131342e3232342e302f32312d3231203d3e203233323031.roa
Signing time: Tue 04 Feb 2025 18:40:28 +0000
ROA not before: Tue 04 Feb 2025 18:35:28 +0000
ROA not after: Tue 03 Feb 2026 18:40:28 +0000
asID: 23201
IP address blocks: 190.114.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3f:89:7b:d9:89:09:44:ff:25:6b:62:df:a0:af:f2:f1:48:07:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Validity
Not Before: Feb 4 18:35:28 2025 GMT
Not After : Feb 3 18:40:28 2026 GMT
Subject: CN=52F74EA1661D76B4B90DECD507DBC54507812E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:f8:75:0d:8d:6e:7c:1e:64:2b:82:01:84:
9c:a1:c8:71:55:b3:2f:13:dc:c6:65:c4:59:9a:9c:
7f:e0:47:91:b9:2a:2a:db:d7:90:bd:b5:40:9d:5a:
22:f4:09:82:67:1c:3b:bc:1c:73:90:ab:5b:dc:b0:
ae:9f:16:db:ce:72:91:17:d7:e2:56:2b:82:fe:5d:
07:3c:31:77:d9:d2:72:63:c9:ca:35:57:5f:71:c3:
5d:62:a5:d7:24:f2:ef:36:4f:30:db:39:ac:ba:e8:
c8:b4:0b:f2:78:44:44:d6:cb:71:c4:e2:21:e9:b5:
b0:18:07:4b:de:88:6b:02:d4:14:37:f1:41:e6:d3:
b8:7b:c3:50:ac:d5:17:10:bf:c2:3f:f1:5d:dc:00:
74:1d:43:62:cd:ea:29:46:a9:d5:d4:8b:4a:d5:2e:
00:5a:39:70:ae:3f:9f:d0:28:95:a8:4b:92:f1:6c:
26:53:1c:06:0f:3a:3e:ef:fd:7a:5b:04:cf:6a:e5:
75:5a:d9:54:cb:d3:1a:8b:86:26:d2:1c:f4:a3:29:
52:b5:b5:5c:94:cf:0a:57:ce:dc:94:84:9b:46:fc:
b4:b4:57:48:2c:09:20:57:97:47:8f:af:72:f1:25:
27:44:87:b3:15:8b:f6:6c:c7:dd:86:e1:bc:f7:05:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:4E:A1:66:1D:76:B4:B9:0D:EC:D5:07:DB:C5:45:07:81:2E:87
X509v3 Authority Key Identifier:
keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3131342e3232342e302f32312d3231203d3e203233323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.114.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:b2:08:f5:af:b9:2f:28:57:27:76:63:f2:6c:5e:39:ce:f3:
65:fd:c9:7e:35:9c:44:56:2f:79:6d:6b:e3:b0:d4:69:70:8b:
e7:52:ad:55:fc:05:08:66:2e:72:8c:db:c9:86:0d:98:3f:17:
02:92:16:c3:35:de:20:20:be:fc:6c:e2:92:ae:01:4c:70:6b:
d0:75:72:b5:c9:0e:e5:7c:2b:d1:46:a5:30:0f:1c:b4:06:05:
3c:f3:44:5e:44:12:12:44:2f:95:83:d0:c2:f6:73:b8:69:75:
bc:cd:a6:97:f3:53:30:70:22:61:5e:72:cc:28:f7:9d:cf:23:
3c:d2:9f:86:67:a5:9b:9c:1f:34:25:e4:57:56:00:2d:2f:fb:
4a:ad:52:96:37:53:ed:d7:f2:8c:3a:d2:bf:60:20:ca:52:8b:
0b:2e:3d:a1:2d:a7:ba:7d:5f:8a:d1:e4:91:ee:c2:0b:81:95:
13:da:fd:4a:f3:f2:36:d9:4b:c4:93:0b:3a:d9:ca:76:18:d0:
4d:90:a3:41:5e:3f:b3:45:c8:be:b2:20:95:89:7d:92:8a:39:
c8:a0:a8:bd:eb:5b:c3:44:29:a4:55:32:ba:ba:28:10:13:1c:
b3:9d:1c:4a:a5:9d:2a:9e:88:e3:58:bf:cd:5b:d1:96:10:47:
92:48:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:46 2025 by rpki-client