Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20323633383132.roa
File: 3139302e3132302e3232382e302f32322d3234203d3e20323633383132.roa (raw, json)
Hash identifier: 00si3wT6Fmhv3uunV6C3jcfvWh0y/dDbGCmqiHg9Vt0=
Subject key identifier: 20:97:BF:9C:25:BE:BE:3C:78:4D:24:2B:0D:92:B5:EE:7A:39:6D:23
Certificate issuer: /CN=534C99354C22A0048A232EFCDC85F70E7478E04F
Certificate serial: 5CAB5F8470A22E2DB30FD39B78027E198513B491
Authority key identifier: 53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20323633383132.roa
Signing time: Tue 04 Feb 2025 18:48:22 +0000
ROA not before: Tue 04 Feb 2025 18:43:22 +0000
ROA not after: Tue 03 Feb 2026 18:48:22 +0000
asID: 263812
IP address blocks: 190.120.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ab:5f:84:70:a2:2e:2d:b3:0f:d3:9b:78:02:7e:19:85:13:b4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534C99354C22A0048A232EFCDC85F70E7478E04F
Validity
Not Before: Feb 4 18:43:22 2025 GMT
Not After : Feb 3 18:48:22 2026 GMT
Subject: CN=2097BF9C25BEBE3C784D242B0D92B5EE7A396D23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:ef:c1:e6:23:a0:94:1e:ba:e3:1f:a4:b9:
23:d6:c8:c0:49:6b:0a:d0:61:de:6c:64:6c:41:21:
50:41:80:c2:ec:ac:cc:b5:a6:0d:da:b9:a5:d0:ed:
8f:67:61:0d:21:6d:c7:65:9d:48:a6:0e:0f:37:82:
3c:58:1e:bf:72:36:c6:4d:85:d3:bd:f0:ce:b1:20:
87:ee:e9:ff:fb:aa:85:f8:a6:7e:39:8b:d1:3c:95:
48:e0:3b:5e:db:17:f6:db:70:d8:b8:9d:15:09:2e:
b2:de:2f:24:eb:2c:a7:3d:f2:e0:8a:2c:24:35:51:
f9:dd:13:b4:f3:92:13:04:a2:38:6d:b0:b9:15:32:
05:b1:bc:51:90:fa:40:c6:8a:87:c6:27:38:36:b2:
4e:0b:7e:94:84:a6:80:bf:63:4b:0e:8d:24:65:e4:
49:1c:1c:09:69:44:50:7a:f1:32:0b:a2:2d:02:4a:
a8:f0:f7:59:23:27:37:da:11:b0:f9:ef:bc:b8:18:
0f:b2:fd:1a:ab:26:da:58:96:a7:bc:09:0f:7d:a5:
05:e6:23:06:c4:94:48:f4:67:6e:b7:2f:c1:96:01:
ab:12:43:3b:dd:31:68:69:94:ee:a3:31:8a:f6:b4:
ab:0b:7d:1f:af:95:bd:80:e3:f1:12:75:1a:77:8d:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:97:BF:9C:25:BE:BE:3C:78:4D:24:2B:0D:92:B5:EE:7A:39:6D:23
X509v3 Authority Key Identifier:
keyid:53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/3139302e3132302e3232382e302f32322d3234203d3e20323633383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.120.228.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:d6:ae:50:60:3f:84:3a:c0:ac:68:31:52:2d:b9:5c:f4:c9:
10:5d:49:fe:14:b2:d5:43:5e:da:8c:cb:37:db:e7:5a:f0:fd:
06:1a:68:f0:0a:f9:94:bb:fb:12:cb:01:7c:fa:c9:24:03:bd:
28:4f:51:77:59:86:81:6a:f1:b0:ac:03:4d:0c:cc:3f:5a:ae:
a9:68:f6:90:36:01:35:f5:b1:83:c9:fa:36:be:02:db:39:03:
bf:7e:70:9e:fa:a9:7b:ad:9b:c4:ee:22:eb:25:74:21:67:7f:
6d:42:7f:e7:46:92:e9:28:27:af:a3:d3:9c:85:d6:d9:04:bb:
dc:90:4b:5c:42:7e:bd:21:40:61:fc:b0:62:db:c7:57:5c:ec:
dc:52:18:e5:2d:00:f3:6f:33:22:40:3b:6b:13:f4:62:04:0a:
f7:21:75:81:e8:45:21:bb:c2:95:ac:0e:75:09:65:ae:2d:b6:
90:bb:56:7b:42:a2:91:a7:8c:13:e8:40:13:42:f2:73:8d:2e:
52:a1:26:3c:9f:e4:cb:92:d6:84:b1:d0:4c:10:9e:17:e2:36:
6c:de:61:1f:2e:1b:a0:8e:7e:e9:2d:87:f8:30:c7:de:d0:6f:
53:1d:e4:22:bc:73:f2:80:fd:40:af:95:7c:5f:b0:e8:8c:d4:
dc:6a:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:31 2025 by rpki-client