Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e31302e302f32332d3234203d3e20323635353430.roa
File: 3139302e3132332e31302e302f32332d3234203d3e20323635353430.roa (raw, json)
Hash identifier: WUbV1QwegGYCh0CD8QKiXFT2wU35cDZqx68oQXcvkLc=
Subject key identifier: E0:5C:AC:45:DD:54:2F:32:3B:06:FD:CC:C5:1E:E5:49:9D:E0:54:69
Certificate issuer: /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial: 081CE29B9943A7D7F123ED4D6175A5366D96821B
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e31302e302f32332d3234203d3e20323635353430.roa
Signing time: Tue 04 Feb 2025 18:50:15 +0000
ROA not before: Tue 04 Feb 2025 18:45:15 +0000
ROA not after: Tue 03 Feb 2026 18:50:15 +0000
asID: 265540
IP address blocks: 190.123.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1c:e2:9b:99:43:a7:d7:f1:23:ed:4d:61:75:a5:36:6d:96:82:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Validity
Not Before: Feb 4 18:45:15 2025 GMT
Not After : Feb 3 18:50:15 2026 GMT
Subject: CN=E05CAC45DD542F323B06FDCCC51EE5499DE05469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:8f:58:00:fc:60:6e:fe:b7:ab:92:ce:69:
53:be:1d:80:ef:05:e0:a6:7d:f5:0e:91:58:19:c9:
08:cb:03:63:0e:5d:29:ea:3e:d3:b2:fd:ce:34:58:
0f:32:03:d1:1f:cc:8f:a2:f5:77:f2:02:7e:4e:07:
c1:7f:9e:00:6f:8b:8f:8f:f3:8d:8f:34:61:59:37:
8a:08:f6:5e:6d:88:47:9d:01:7c:1e:bd:34:b8:5e:
75:f4:46:89:93:cb:ba:e7:4b:79:a6:9a:b0:3c:58:
13:e3:e9:92:cf:64:dd:c6:74:03:dd:2d:7a:ba:5c:
81:84:25:05:11:24:ce:f1:be:1b:09:13:54:cb:7a:
8e:99:2b:61:51:1d:1b:7b:67:38:79:c5:2b:5d:19:
ae:91:75:a7:32:f3:aa:46:95:d8:28:8d:77:f5:4f:
77:7e:66:5f:4b:db:0b:f5:17:0c:36:44:f4:4e:cc:
d3:4f:94:65:bb:6e:ab:95:a8:aa:93:4d:d9:51:78:
c0:a1:8c:cf:6c:8f:0f:59:f4:62:db:12:d7:1d:c9:
57:36:eb:de:7f:29:56:64:df:c3:1d:c8:5c:c0:c5:
fb:fb:ae:0a:41:78:48:01:d5:39:bd:be:50:f5:0e:
4e:e2:fb:90:ee:62:e2:45:05:2a:32:25:c9:af:ec:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:AC:45:DD:54:2F:32:3B:06:FD:CC:C5:1E:E5:49:9D:E0:54:69
X509v3 Authority Key Identifier:
keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e31302e302f32332d3234203d3e20323635353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.10.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:c2:11:43:40:60:21:e5:cc:27:80:0d:d2:e2:c7:9b:22:d5:
47:d4:3e:d6:a4:3a:69:91:9b:53:39:64:06:ab:18:6b:fc:4d:
0f:0c:64:43:3f:c2:2f:05:5f:22:82:84:a0:53:52:69:66:73:
c9:2f:53:bb:65:19:39:fe:09:32:fc:fd:58:42:6b:1d:29:64:
35:92:83:38:3d:dd:c1:a5:9a:a7:a5:15:cc:a4:5c:9d:aa:39:
59:ff:a9:54:b9:28:a3:6b:3c:b4:15:22:d8:fa:e0:fa:a5:9b:
04:64:18:0c:4a:27:30:72:27:fd:1c:3d:8c:fd:8e:ac:c6:43:
c0:27:68:c6:dd:4f:7e:de:9a:6e:c7:af:30:3a:3b:c8:a5:7b:
bc:8c:ed:e4:d6:cf:52:cc:25:2c:1c:29:86:cb:66:41:f0:4b:
5e:90:d9:03:d0:c6:00:3a:9a:ff:aa:24:4a:20:a4:f6:72:7d:
8c:7e:80:8f:ee:e7:59:55:35:bb:fb:0c:d7:c6:d8:3c:d8:ac:
4b:d2:b9:e3:92:32:26:bb:10:31:e8:c6:11:52:6e:62:2a:26:
ff:1f:65:e5:05:fd:e0:5b:c8:6c:49:91:31:c7:fe:c5:87:62:
6c:2c:1b:9c:67:c3:0d:b0:03:a7:cd:c1:9d:79:4a:96:e4:1a:
9d:39:83:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:00 2025 by rpki-client