Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3139302e332e3132382e302f31392d3234203d3e203139383839.roa
File: 3139302e332e3132382e302f31392d3234203d3e203139383839.roa (raw, json)
Hash identifier: OfH7ezrff0SRA0YJTPU/XxM0ZpLcPlYmTx+vbjKVuMs=
Subject key identifier: AF:B1:78:B5:A5:47:78:92:3B:F7:DF:7B:36:92:BC:28:4A:F2:AD:54
Certificate issuer: /CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB
Certificate serial: 38A71FA1F08F5C6DA57E8AEC07A0F97C4051A10B
Authority key identifier: AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3139302e332e3132382e302f31392d3234203d3e203139383839.roa
Signing time: Tue 04 Feb 2025 20:06:29 +0000
ROA not before: Tue 04 Feb 2025 20:01:29 +0000
ROA not after: Tue 03 Feb 2026 20:06:29 +0000
asID: 19889
IP address blocks: 190.3.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a7:1f:a1:f0:8f:5c:6d:a5:7e:8a:ec:07:a0:f9:7c:40:51:a1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB
Validity
Not Before: Feb 4 20:01:29 2025 GMT
Not After : Feb 3 20:06:29 2026 GMT
Subject: CN=AFB178B5A54778923BF7DF7B3692BC284AF2AD54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:98:6b:7b:b3:84:88:c8:fc:0b:e5:79:7d:
ac:fd:10:b2:9e:60:b9:49:a0:2c:bf:43:fb:12:03:
12:f5:94:8b:09:64:54:63:e4:75:56:80:db:6d:5d:
5f:d3:c8:2e:19:b6:eb:af:fd:96:82:a4:a8:c5:20:
8c:02:8c:40:f2:99:42:e7:f8:92:24:b1:17:59:dd:
70:27:60:04:19:35:21:fd:85:bd:14:67:a2:48:cd:
d3:cb:df:a1:bc:e1:09:c7:6b:e3:de:43:95:8f:e8:
df:75:4e:50:c5:75:a0:7d:9e:b8:3b:04:78:49:ca:
e8:9d:95:78:22:bb:95:93:69:03:0d:3d:b2:17:fc:
7c:ff:bd:43:96:10:13:f3:84:84:45:f9:05:d8:16:
c7:6e:89:ef:d1:20:49:f9:59:71:99:ba:75:8b:a2:
4d:c6:1b:86:76:8c:7c:55:3e:44:ef:e4:71:8e:79:
a0:0f:13:25:7f:30:d7:e6:55:97:ad:c9:6f:ef:03:
ba:7f:24:51:08:ee:8a:f7:89:33:e3:3a:fa:b3:bd:
a7:aa:b1:c2:17:15:6c:6f:a1:51:9c:ed:b2:78:3c:
ac:d7:49:11:c1:8b:b2:5d:69:c2:c7:68:4d:90:f7:
35:46:44:28:fa:94:e7:d8:d8:d4:ad:13:b6:ce:bd:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B1:78:B5:A5:47:78:92:3B:F7:DF:7B:36:92:BC:28:4A:F2:AD:54
X509v3 Authority Key Identifier:
keyid:AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3139302e332e3132382e302f31392d3234203d3e203139383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.3.128.0/19
Signature Algorithm: sha256WithRSAEncryption
21:e1:d3:de:8f:2d:cf:ef:65:82:43:f5:b4:38:7b:fc:8d:3a:
98:4c:47:ed:03:e7:c3:42:5e:b6:4b:ca:3e:df:8a:2c:06:8c:
a0:9f:76:22:54:71:be:7a:9b:59:11:d5:a6:5a:ff:f8:0a:b9:
c2:32:0b:7e:4d:09:d8:7a:37:4c:bc:c8:94:4b:3b:5c:8e:d6:
31:84:dd:94:de:97:49:05:4d:61:22:de:38:9f:90:70:25:77:
29:b3:6f:e1:13:c1:1a:c9:c6:30:5b:94:22:83:88:ce:32:ec:
18:81:c4:bd:cc:a2:a7:6a:ee:d2:57:62:32:7a:a5:05:2c:a9:
68:43:2f:20:13:42:72:3e:5c:b6:ec:cb:11:ac:51:79:09:c8:
9a:19:7e:c4:3a:a1:c0:1f:a1:95:15:23:d3:62:0a:34:98:d6:
d9:5c:be:ef:c3:26:55:5b:57:37:e5:4b:14:bb:56:8b:41:9c:
14:c8:f7:3c:d1:04:24:95:59:12:22:bb:51:ad:ae:bc:e8:98:
ae:07:04:a5:0f:3d:75:3e:58:a8:f2:27:14:ab:8d:20:67:50:
1d:00:4e:b2:b7:f6:16:de:7d:8b:c6:3a:c7:3a:db:bb:2d:e3:
63:47:0a:4c:5d:a6:d7:6f:8f:4f:58:64:17:0f:ef:85:d6:4d:
81:8c:b0:69
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUOKcfofCPXG2lforsB6D5fEBRoQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI2RkMyQjNCRUQxREFGMDVFN0Y1REY0NDVEMDg4QkIz
OTY0NThFQjAeFw0yNTAyMDQyMDAxMjlaFw0yNjAyMDMyMDA2MjlaMDMxMTAvBgNV
BAMTKEFGQjE3OEI1QTU0Nzc4OTIzQkY3REY3QjM2OTJCQzI4NEFGMkFENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwI5hre7OEiMj8C+V5faz9ELKe
YLlJoCy/Q/sSAxL1lIsJZFRj5HVWgNttXV/TyC4Ztuuv/ZaCpKjFIIwCjEDymULn
+JIksRdZ3XAnYAQZNSH9hb0UZ6JIzdPL36G84QnHa+PeQ5WP6N91TlDFdaB9nrg7
BHhJyuidlXgiu5WTaQMNPbIX/Hz/vUOWEBPzhIRF+QXYFsduie/RIEn5WXGZunWL
ok3GG4Z2jHxVPkTv5HGOeaAPEyV/MNfmVZetyW/vA7p/JFEI7or3iTPjOvqzvaeq
scIXFWxvoVGc7bJ4PKzXSRHBi7JdacLHaE2Q9zVGRCj6lOfY2NStE7bOvRdTAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUr7F4taVHeJI79997NpK8KEryrVQwHwYDVR0j
BBgwFoAUq2/Cs77R2vBef130RdCIuzlkWOswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDA3MzMxMjhCMkQ4NkU4NEQyQzFGQUQyMkM3NjFBMzcz
QUY4QTI0RjBGOTcwOEZCREI1NURDMTc2MDNEN0JBLzAvQUI2RkMyQjNCRUQxREFG
MDVFN0Y1REY0NDVEMDg4QkIzOTY0NThFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQjZGQzJCM0JFRDFEQUYwNUU3
RjVERjQ0NUQwODhCQjM5NjQ1OEVCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQwNzMzMTI4QjJEODZFODREMkMxRkFEMjJDNzYxQTM3M0FGOEEyNEYw
Rjk3MDhGQkRCNTVEQzE3NjAzRDdCQS8wLzMxMzkzMDJlMzMyZTMxMzIzODJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzkzODM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+A4AwDQYJ
KoZIhvcNAQELBQADggEBACHh096PLc/vZYJD9bQ4e/yNOphMR+0D58NCXrZLyj7f
iiwGjKCfdiJUcb56m1kR1aZa//gKucIyC35NCdh6N0y8yJRLO1yO1jGE3ZTel0kF
TWEi3jifkHAldymzb+ETwRrJxjBblCKDiM4y7BiBxL3Moqdq7tJXYjJ6pQUsqWhD
LyATQnI+XLbsyxGsUXkJyJoZfsQ6ocAfoZUVI9NiCjSY1tlcvu/DJlVbVzflSxS7
VotBnBTI9zzRBCSVWRIiu1GtrrzomK4HBKUPPXU+WKjyJxSrjSBnUB0ATrK39hbe
fYvGOsc627st42NHCkxdptdvj09YZBcP74XWTYGMsGk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:02 2025 by rpki-client