Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3132312e3136302e302f32302d3230203d3e203233323031.roa
File: 3139302e3132312e3136302e302f32302d3230203d3e203233323031.roa (raw, json)
Hash identifier: D4L7NKXPx/yWAzQBfWkkT/vQwwN+sM2BmLM8kRwS+GU=
Subject key identifier: 9E:D1:3F:94:9F:FF:B5:18:A7:88:B2:FD:3D:3C:2C:C0:FF:C5:B2:1C
Certificate issuer: /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial: 4CC6329227322903BF7BE1722BBDE231176DBCAC
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3132312e3136302e302f32302d3230203d3e203233323031.roa
Signing time: Tue 04 Feb 2025 18:40:25 +0000
ROA not before: Tue 04 Feb 2025 18:35:25 +0000
ROA not after: Tue 03 Feb 2026 18:40:25 +0000
asID: 23201
IP address blocks: 190.121.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c6:32:92:27:32:29:03:bf:7b:e1:72:2b:bd:e2:31:17:6d:bc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Validity
Not Before: Feb 4 18:35:25 2025 GMT
Not After : Feb 3 18:40:25 2026 GMT
Subject: CN=9ED13F949FFFB518A788B2FD3D3C2CC0FFC5B21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:e8:cd:3a:e5:85:85:7f:6d:21:6a:1a:c6:
11:f4:9a:88:9f:e4:a0:37:a7:8d:03:8b:96:3c:fc:
3e:fa:e7:08:d4:4d:81:ac:5b:ad:20:01:28:25:3b:
19:d4:60:3c:9e:a7:f1:85:97:e3:0f:3d:a3:a6:e5:
e0:73:29:29:94:59:26:f6:1a:83:34:70:69:e2:34:
28:89:01:41:5f:a2:ed:97:a3:05:2f:3a:5b:65:5d:
9f:ee:26:04:3d:d8:18:7a:6d:ce:93:4c:71:13:7b:
d4:ce:fa:d5:48:fc:a5:05:24:d7:b0:a3:f4:a8:93:
cb:6e:fa:4d:05:d0:29:00:d7:a0:f8:82:35:d0:ab:
42:86:72:0f:11:fd:ca:e1:1f:48:a0:21:6a:a6:5d:
b5:4a:68:af:b7:56:f2:a3:2b:8e:8c:06:44:f0:a8:
79:05:78:90:9f:60:5e:6e:9a:e7:e8:a2:cb:34:48:
00:e2:a4:93:a2:40:25:6e:41:c2:fd:bd:7f:56:47:
1b:30:fa:7b:00:b8:e1:95:47:1e:dc:32:40:d1:88:
a6:23:7c:df:6a:18:fe:f2:1e:08:aa:09:10:08:fb:
f6:a9:35:43:06:96:22:88:fd:90:8c:17:84:cd:de:
ab:56:c2:70:38:e5:2e:56:14:fa:ab:99:f1:f2:78:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:3F:94:9F:FF:B5:18:A7:88:B2:FD:3D:3C:2C:C0:FF:C5:B2:1C
X509v3 Authority Key Identifier:
keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3139302e3132312e3136302e302f32302d3230203d3e203233323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.121.160.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:67:e6:6a:e3:d1:0b:73:c2:25:4d:e9:fc:bc:ce:36:5b:1e:
23:04:91:2d:88:dc:39:c4:f0:6e:a5:61:a4:71:c2:eb:10:c8:
d2:3d:7a:8c:16:30:fe:ca:24:92:dc:97:8e:90:c4:10:ce:73:
69:bc:36:30:b7:b1:45:07:ff:9b:91:43:87:ca:47:84:15:cd:
86:c5:f3:a7:68:3d:d2:3d:20:67:00:64:90:a6:57:c5:83:c5:
68:e8:3f:98:df:13:16:6f:21:00:5a:60:56:57:12:d2:cf:b2:
be:1d:a9:60:f4:6a:0a:f4:3d:bc:03:29:4c:53:d3:8e:c4:29:
92:f5:81:5a:e9:43:0c:5e:84:b6:36:55:05:7b:ca:e9:4f:e6:
88:79:7e:72:54:43:e5:08:52:a2:82:29:c7:7b:9a:2c:cd:b9:
26:59:7c:48:11:fd:23:43:db:24:29:21:0f:d2:85:42:d6:46:
e2:78:f5:0a:0e:ee:78:da:4d:3b:8d:9b:ef:34:f2:13:8b:8b:
6f:6b:25:3f:ba:15:c6:1b:37:bc:9e:eb:c6:95:32:ff:8e:be:
0c:23:d4:71:3e:aa:a6:b3:2d:c5:48:32:06:96:79:bb:9b:20:
ee:d7:7a:ef:5f:90:e8:d5:05:14:e3:e5:c6:31:07:9d:5b:58:
a2:1d:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:24 2025 by rpki-client