Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e203136363239.roa
File: 3139302e32312e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier: cwOqslajw0ccRfAL0gLJuWjkOkDHVvULJbQTXcFk83c=
Subject key identifier: A9:0A:3B:80:A5:09:FE:FF:2E:9A:3F:ED:2B:74:E4:A6:8A:16:B6:C7
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 62DF73CBF54A3C14AD21220D5D7F27E1F6C95DF4
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e203136363239.roa
Signing time: Tue 04 Feb 2025 18:29:48 +0000
ROA not before: Tue 04 Feb 2025 18:24:48 +0000
ROA not after: Tue 03 Feb 2026 18:29:48 +0000
asID: 16629
IP address blocks: 190.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:df:73:cb:f5:4a:3c:14:ad:21:22:0d:5d:7f:27:e1:f6:c9:5d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Feb 4 18:24:48 2025 GMT
Not After : Feb 3 18:29:48 2026 GMT
Subject: CN=A90A3B80A509FEFF2E9A3FED2B74E4A68A16B6C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:84:74:1b:cd:e6:66:62:d0:0f:01:43:b2:2f:
c6:98:ae:68:27:5d:07:74:33:ac:e4:54:61:e3:f6:
35:93:33:33:53:bf:da:5e:5e:03:cb:6e:58:4f:46:
33:9a:bf:86:fb:cc:a2:b8:bc:9b:10:e0:9f:47:6b:
9d:4d:f5:32:94:29:c9:95:2e:b8:86:9b:8d:6a:3a:
71:05:9f:3d:32:19:93:71:b4:db:24:bd:7b:d0:0b:
0f:28:65:2b:34:3d:ff:b3:ee:f4:d3:e2:ee:b9:7e:
bf:41:a7:b3:3c:ab:9d:c2:e1:e8:fd:b7:83:ac:bb:
77:68:4d:b9:7e:b1:78:51:67:c7:d4:61:4a:51:50:
37:45:42:89:8e:cf:75:18:22:47:33:0c:0b:6b:82:
7f:4c:5a:b0:5c:f0:5c:9f:61:31:c6:f9:80:bc:ec:
e5:99:2d:2f:4b:60:c9:f6:1d:23:85:61:02:c9:02:
4e:8f:0a:ce:9d:5f:cd:bd:e0:2e:e1:17:fc:ee:28:
d2:12:65:ba:63:c7:cd:45:a9:75:13:4a:4b:16:f6:
20:b3:c2:6f:ae:f9:d0:2c:a2:df:27:fa:4c:a5:cb:
c6:59:4d:17:9e:4c:3e:6c:77:3f:ae:65:45:bf:9b:
28:62:b1:c0:76:d4:6c:e6:e3:c0:cd:9c:4d:32:64:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:3B:80:A5:09:FE:FF:2E:9A:3F:ED:2B:74:E4:A6:8A:16:B6:C7
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e203136363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.21.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:a7:ac:14:5e:2f:46:60:da:62:ea:f0:18:9d:df:ad:b8:3c:
ae:37:5a:f8:f1:ac:4c:a1:f0:42:bd:4b:77:c2:c1:0e:ad:40:
fc:97:61:48:8f:6c:65:2d:0e:28:ca:22:15:07:98:43:c6:f0:
b9:28:4e:6d:8d:c8:e7:9f:78:3a:4e:6d:78:3e:37:26:46:7f:
fb:6e:ed:09:00:32:62:64:0d:1d:77:3b:7d:06:25:2a:45:3b:
2b:2d:31:2a:07:2e:cd:2a:af:c9:46:8e:9f:13:f7:c0:b1:dc:
d6:9a:82:91:c3:8f:1d:bf:7b:c7:ba:77:66:1e:4d:87:d5:80:
a0:11:3f:df:d1:b2:ed:af:0a:3e:79:3a:5b:b0:76:7b:b3:cc:
c1:c5:2c:71:9c:af:5c:60:bb:24:93:9c:59:9c:a0:ca:d1:de:
ec:9f:02:b1:41:e4:67:a5:08:f9:92:5e:cf:c1:da:46:b4:8c:
41:ae:4c:82:71:aa:48:ea:cb:82:91:28:3b:fe:23:b7:5a:86:
cf:c3:00:6f:23:3b:a7:a4:05:80:72:40:95:0c:01:8c:58:84:
ec:31:13:83:a7:8a:13:a7:50:a9:95:9b:6f:a5:6d:a2:2e:65:
02:dd:3e:10:7a:4c:24:4d:5b:74:3d:36:d5:57:e0:07:aa:1c:
3c:42:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:04 2025 by rpki-client