Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e2037343138.roa
File: 3139312e3132342e302e302f31342d3234203d3e2037343138.roa (raw, json)
Hash identifier: 0TB7Oz00r0nqfayilzkg4yCdasbXkfbl2MykXsXKUQQ=
Subject key identifier: BD:05:D9:86:A6:25:93:55:9E:57:5A:58:D7:A3:BA:73:12:5A:4B:32
Certificate issuer: /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial: 4FDE266B84E78C840138F638899CB6CC1AE35AD6
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e2037343138.roa
Signing time: Tue 04 Feb 2025 18:13:00 +0000
ROA not before: Tue 04 Feb 2025 18:08:00 +0000
ROA not after: Tue 03 Feb 2026 18:13:00 +0000
asID: 7418
IP address blocks: 191.124.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:de:26:6b:84:e7:8c:84:01:38:f6:38:89:9c:b6:cc:1a:e3:5a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
Validity
Not Before: Feb 4 18:08:00 2025 GMT
Not After : Feb 3 18:13:00 2026 GMT
Subject: CN=BD05D986A62593559E575A58D7A3BA73125A4B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:76:d2:fd:1d:5b:50:a6:ed:e4:b9:a9:9f:
a3:7d:d6:97:04:1b:a3:9d:6e:a9:5b:33:e7:03:26:
14:3c:2c:16:74:d3:ad:bc:38:90:1b:6f:fe:55:f4:
49:8c:f1:22:a6:28:c2:b1:7e:cc:7d:b9:69:df:30:
ca:6b:58:b3:6b:df:d7:69:f3:4c:ed:4a:67:fa:3d:
cd:28:b3:cf:a5:a0:94:3e:38:29:51:c9:6a:a5:18:
e5:59:86:82:2e:72:e7:d9:53:8d:bd:ac:61:f7:dc:
65:ed:3b:3d:22:d6:c6:ad:6b:84:7c:6f:0b:b4:e6:
1c:7b:f2:68:bb:d1:1c:8b:7d:3b:14:da:9c:69:d7:
c5:8c:64:26:84:6c:9a:6d:0b:01:8e:d0:de:dc:92:
3a:31:23:19:34:19:de:a7:ad:3a:0d:9b:4c:a8:5e:
5c:f3:7f:a6:1e:87:57:9d:05:87:ab:e5:08:90:94:
2f:57:9a:c0:35:81:21:30:15:5d:27:4b:60:64:69:
73:39:f1:b5:44:f3:56:30:a0:ff:5a:d4:40:8e:e7:
01:9d:66:ed:42:95:07:3e:83:fb:20:4e:88:32:43:
b1:33:6d:1d:1f:49:21:32:b2:ac:21:33:92:48:6c:
55:7d:dd:1e:14:09:8b:2b:96:8c:bf:1c:53:36:c8:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:D9:86:A6:25:93:55:9E:57:5A:58:D7:A3:BA:73:12:5A:4B:32
X509v3 Authority Key Identifier:
keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e2037343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
03:a2:9c:53:cc:0d:59:71:c5:ff:2e:d5:13:32:b8:bf:67:2e:
af:ed:c1:3d:85:3e:c3:5d:41:8e:2c:e1:f7:6f:03:4e:37:91:
12:82:aa:62:7b:36:53:6a:9c:c2:19:28:27:2d:78:9b:58:d3:
49:d6:2d:71:91:31:1c:3f:30:a3:2a:d0:e1:73:11:fa:2f:1e:
c2:75:f7:37:e9:1e:23:a0:16:86:86:14:a1:94:0e:d8:69:de:
84:7e:af:66:cf:ff:7a:b0:cf:b8:45:e6:f1:ba:3e:e1:12:19:
f6:15:7a:af:b1:54:3a:0a:2d:39:80:6f:c5:24:36:5d:d2:d7:
96:b7:dd:f4:7b:26:f4:29:a1:fb:47:d3:b9:9f:28:66:ce:92:
d0:a8:f7:2f:7d:d3:81:ee:4e:31:25:8e:1c:3b:a8:9e:ba:72:
ab:99:be:dd:7e:21:88:ae:96:9e:5e:31:a0:6d:69:60:46:d0:
27:54:fc:43:81:9a:e2:c8:b5:0f:c9:54:1a:6f:63:a6:23:c0:
ad:d6:d4:da:75:fe:f0:1f:fc:2a:9d:b8:ff:97:09:87:c1:ed:
11:5c:73:cc:ba:9c:ec:e1:9a:41:81:79:10:ba:4a:2c:fe:fa:
56:ee:47:c1:d8:70:af:5f:4d:d5:45:73:92:9b:8e:20:f6:74:
44:48:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:54:54 2025 by rpki-client