Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3139302e382e34382e302f32302d3234203d3e203532343035.roa
File: 3139302e382e34382e302f32302d3234203d3e203532343035.roa (raw, json)
Hash identifier: PHe6DTIG+EMR2jfJ/0ghFqRsWG+JSIcJBLAf/a+F7E8=
Subject key identifier: 00:10:D7:34:CF:33:90:9E:AE:25:11:5C:CE:22:13:05:93:D0:21:7F
Certificate issuer: /CN=C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F
Certificate serial: 6433A2862ADDEF2298A125332352CA40AFB32539
Authority key identifier: C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3139302e382e34382e302f32302d3234203d3e203532343035.roa
Signing time: Tue 04 Feb 2025 18:05:56 +0000
ROA not before: Tue 04 Feb 2025 18:00:56 +0000
ROA not after: Tue 03 Feb 2026 18:05:56 +0000
asID: 52405
IP address blocks: 190.8.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:33:a2:86:2a:dd:ef:22:98:a1:25:33:23:52:ca:40:af:b3:25:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F
Validity
Not Before: Feb 4 18:00:56 2025 GMT
Not After : Feb 3 18:05:56 2026 GMT
Subject: CN=0010D734CF33909EAE25115CCE22130593D0217F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:4b:ac:e9:7e:e8:67:26:99:82:b8:41:6f:
3b:25:78:8c:3e:4a:42:79:ca:20:e5:d2:71:80:5c:
56:3b:0c:9e:71:70:09:53:38:cb:d5:a4:ce:14:5f:
42:98:6a:54:74:78:32:e2:63:a4:a9:60:b4:79:92:
7a:2c:0d:0c:68:26:42:0f:50:6a:a0:4d:c1:a7:56:
17:d8:39:5f:7e:8f:10:af:20:bf:12:b3:44:59:ad:
2b:cf:c6:fe:09:b9:09:f8:83:a9:8f:2c:b7:38:5b:
97:6b:91:e6:9f:97:0b:28:65:85:02:6e:92:67:86:
f4:1a:70:74:9f:40:d8:89:43:20:ce:1b:0b:59:e6:
c2:74:ff:8e:07:7d:d7:4d:51:dd:8d:cd:a5:a9:45:
9c:83:01:18:b0:0d:51:fd:d6:db:80:99:14:04:ba:
ed:fd:53:70:b3:66:6f:82:24:01:ae:c7:1e:a4:9f:
fd:a3:1e:a2:39:d8:31:35:db:c9:a4:2c:d3:4b:ac:
04:ef:39:63:25:2a:3c:cb:a8:78:07:68:b0:cd:c9:
89:db:06:b8:ce:1e:e1:b9:c1:7e:4a:31:cc:9f:1b:
07:0d:91:13:b0:32:5d:c1:9f:dd:4e:85:75:80:1a:
e3:c7:7d:b2:2b:58:c7:c8:ed:55:00:a7:43:fe:cd:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:D7:34:CF:33:90:9E:AE:25:11:5C:CE:22:13:05:93:D0:21:7F
X509v3 Authority Key Identifier:
keyid:C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3139302e382e34382e302f32302d3234203d3e203532343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.8.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:a7:60:ec:e2:ce:8c:da:90:7c:66:7d:d6:8f:4d:55:e5:fb:
ee:34:17:78:49:5b:54:04:21:63:b7:73:3e:ab:69:8e:66:2d:
f3:47:d0:7e:8f:3e:b8:e2:e3:e1:9f:ac:42:2e:03:ff:5d:e0:
58:d3:08:b5:51:a9:b2:91:b6:60:8b:d8:de:4f:f2:63:25:9b:
5d:36:81:eb:dd:9c:19:e8:99:9f:7f:f4:b3:6f:73:dd:0c:f0:
82:2e:31:84:ce:0c:c9:60:b3:13:69:32:89:e6:a1:6e:73:9f:
65:62:8c:9c:3a:3d:99:e6:53:76:6b:15:39:94:6e:dc:78:c4:
d6:7f:96:59:ba:e2:40:75:4b:bb:33:80:30:e2:b7:63:bf:15:
bf:83:fc:a5:11:8d:24:8c:f7:44:40:a3:dd:e2:d7:98:04:42:
e5:d4:c0:44:ca:d6:e1:51:54:6b:4b:4d:f4:51:7b:c2:cb:bf:
6e:4d:8d:62:85:28:0a:aa:37:02:6a:f5:6b:91:12:6f:d3:a3:
bf:d2:05:80:ca:93:f9:03:f8:1d:6c:03:92:e2:13:d5:f9:f0:
a1:dc:1d:51:59:8e:73:c8:c9:12:2c:9c:78:ed:59:e5:c0:20:
e5:a5:15:1e:34:28:41:21:71:fd:bd:dc:6e:ff:dc:45:26:b9:
df:76:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:09 2025 by rpki-client