Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39342e302f32332d3233203d3e2036353638.roa
File: 3139302e39392e39342e302f32332d3233203d3e2036353638.roa (raw, json)
Hash identifier: 8pk3YMKfRwlUnsnG6LcyxR9k0510sNgFXMCyt4oRsfI=
Subject key identifier: 0E:A5:56:CD:87:9E:31:12:A6:EE:19:C7:FC:0F:B4:A1:91:51:55:3D
Certificate issuer: /CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
Certificate serial: 335E8338C201A7ECB90B001ECD7D349A50D9EE7C
Authority key identifier: 5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39342e302f32332d3233203d3e2036353638.roa
Signing time: Tue 04 Feb 2025 18:15:44 +0000
ROA not before: Tue 04 Feb 2025 18:10:44 +0000
ROA not after: Tue 03 Feb 2026 18:15:44 +0000
asID: 6568
IP address blocks: 190.99.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:5e:83:38:c2:01:a7:ec:b9:0b:00:1e:cd:7d:34:9a:50:d9:ee:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EDCD4E71F91168B554144B2CD5427585AB16A8A
Validity
Not Before: Feb 4 18:10:44 2025 GMT
Not After : Feb 3 18:15:44 2026 GMT
Subject: CN=0EA556CD879E3112A6EE19C7FC0FB4A19151553D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:17:16:16:ba:a4:3a:e6:db:6b:7e:49:f3:
9d:9e:f1:e1:95:2f:98:ab:60:c2:98:d2:24:7f:cb:
79:5a:28:c9:45:f9:8e:c0:fd:8b:08:8a:01:0b:c3:
b5:7f:92:2e:af:4a:18:18:11:90:0e:ac:bb:4e:2f:
76:ea:bb:13:15:de:b4:34:98:63:26:0a:65:d5:0d:
97:1d:10:f7:02:d9:0c:e4:f3:3c:de:3c:24:4d:c4:
9e:93:45:ab:7d:14:fa:51:ca:a4:02:14:89:68:8b:
40:ab:18:ae:72:fc:59:59:b5:3b:b8:02:c3:c8:e2:
6a:43:3f:78:94:c1:e9:4a:07:a0:f9:20:f6:97:d9:
3b:5c:f9:a1:fa:4f:d7:8b:02:02:f1:75:44:fd:67:
aa:58:fa:6c:0b:32:ff:ca:5e:e5:42:f6:c7:3c:bf:
3a:83:b7:4d:13:4e:dd:b2:bd:12:4e:92:9b:4d:16:
bf:7c:d0:d7:08:08:1c:86:33:9f:9a:36:b1:aa:32:
98:5a:73:ca:d5:2a:0a:fc:6c:fe:3f:2d:a9:f6:f1:
08:a7:b1:30:da:76:07:71:1f:6f:c1:44:b6:e8:2a:
bf:f5:de:a6:64:1c:46:9b:7b:ff:04:af:d6:1b:22:
ef:42:74:a2:09:28:ee:c1:69:70:f0:eb:25:44:03:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:56:CD:87:9E:31:12:A6:EE:19:C7:FC:0F:B4:A1:91:51:55:3D
X509v3 Authority Key Identifier:
keyid:5E:DC:D4:E7:1F:91:16:8B:55:41:44:B2:CD:54:27:58:5A:B1:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EDCD4E71F91168B554144B2CD5427585AB16A8A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D222A7BE955B4CE14ECF39F6F8E1D0DD29B7FEB4710A69A9C3DE6837CA9D0DF0/0/3139302e39392e39342e302f32332d3233203d3e2036353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.94.0/23
Signature Algorithm: sha256WithRSAEncryption
79:ba:fb:cb:c3:01:3f:6c:02:07:5e:7c:b3:f7:3e:88:c6:22:
99:b1:09:4b:63:21:07:b5:d0:09:4c:85:9a:53:90:48:6c:42:
cc:0f:0d:47:d0:0e:45:ac:27:79:65:e0:27:20:90:28:26:60:
52:cd:33:64:fa:c1:2f:c9:59:3a:46:f0:75:03:32:60:51:33:
98:a5:c5:72:d8:f2:14:53:b7:19:77:1f:63:05:89:17:12:20:
3e:ad:09:82:21:d9:c7:20:38:c9:e7:b1:48:85:91:f7:9c:ea:
51:0f:ea:d8:33:6c:23:ad:db:00:07:28:9c:03:72:d5:50:03:
dc:12:1c:a5:bc:4d:51:2b:7d:32:90:f7:ca:27:09:6d:ca:25:
06:33:d9:52:b7:27:04:4d:9f:05:f9:b1:74:44:16:da:16:d4:
5d:c2:64:07:3d:58:ea:35:29:84:ff:9a:03:a3:b8:08:a1:b3:
17:e0:2d:6e:0a:41:6b:da:03:07:e7:79:57:f1:dd:96:87:af:
e6:5e:ad:51:87:49:09:03:1e:41:d3:c8:29:e8:6c:7c:d1:25:
7d:55:61:81:00:8b:cf:cd:5d:a8:8b:d8:4b:d2:8f:48:ec:4f:
51:61:38:97:9c:66:66:fe:6f:e8:a9:73:ef:24:57:8b:3c:12:
e9:fd:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:55 2025 by rpki-client