Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e31322e302f32332d3234203d3e20323635353430.roa
File: 3139302e3132332e31322e302f32332d3234203d3e20323635353430.roa (raw, json)
Hash identifier: zN7TClD8t83DpMisZjtogh+SJC0VQHNOTQgJ6TdgboM=
Subject key identifier: 04:3E:3F:74:F8:24:B0:C1:D4:5A:D2:C6:DC:A1:9C:95:C0:34:6E:42
Certificate issuer: /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial: 415EB84CEC4F5F176A1497F120F67AE3ADA38697
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e31322e302f32332d3234203d3e20323635353430.roa
Signing time: Tue 04 Feb 2025 18:50:15 +0000
ROA not before: Tue 04 Feb 2025 18:45:15 +0000
ROA not after: Tue 03 Feb 2026 18:50:15 +0000
asID: 265540
IP address blocks: 190.123.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5e:b8:4c:ec:4f:5f:17:6a:14:97:f1:20:f6:7a:e3:ad:a3:86:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Validity
Not Before: Feb 4 18:45:15 2025 GMT
Not After : Feb 3 18:50:15 2026 GMT
Subject: CN=043E3F74F824B0C1D45AD2C6DCA19C95C0346E42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bf:b5:6c:d8:3c:b4:e8:4b:05:29:09:e8:ec:
53:b1:4d:c2:e2:0a:c1:2d:ca:ce:de:93:64:e6:9a:
a9:be:81:da:5b:45:2e:6b:a2:c2:29:ca:b4:e2:39:
4e:0e:e8:c1:ee:bb:7f:89:91:d5:11:e1:c4:bb:4b:
48:a8:88:6f:9a:0a:ef:b0:83:a8:15:5b:01:8c:54:
20:42:16:d9:de:e3:ae:a7:75:4b:0d:ba:9d:2f:07:
fa:ad:e8:86:09:3f:1e:a0:dc:05:66:b2:1f:27:1c:
b3:a9:26:c4:2e:47:a7:16:3d:79:7a:e5:05:71:a4:
49:33:27:d2:00:d2:66:9f:37:a0:2c:8f:c9:15:df:
15:97:b6:56:59:5f:93:e0:43:06:9d:37:d6:dc:e2:
ca:ea:9c:47:bc:da:8d:82:df:2a:2d:f0:22:3a:e7:
1f:1b:41:23:b9:4a:db:b4:6b:84:cb:6d:e3:b7:6d:
3c:50:df:17:5d:28:1e:f6:fd:34:91:9c:f8:83:d3:
f6:fd:d9:a7:e3:cb:4f:ef:9a:0f:e9:7e:83:0d:8d:
49:81:b2:66:fc:4c:4e:44:c5:b5:b1:4a:ca:c2:6b:
af:f4:f8:d5:53:fc:ff:af:be:f2:f9:f5:98:84:d8:
da:d3:d7:36:34:e7:a3:aa:1c:c1:04:63:da:28:7f:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3E:3F:74:F8:24:B0:C1:D4:5A:D2:C6:DC:A1:9C:95:C0:34:6E:42
X509v3 Authority Key Identifier:
keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e31322e302f32332d3234203d3e20323635353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.12.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:50:7d:b6:5e:c1:06:19:26:44:4a:6c:dd:19:9c:2d:15:b2:
79:51:42:22:55:be:70:ce:ab:b0:d5:62:14:58:eb:da:fd:7b:
8d:b5:4b:09:e0:bb:62:48:6f:04:7a:05:fa:8e:12:d3:8e:f8:
1e:e9:07:2d:53:bc:c1:f2:0d:7f:a6:96:59:81:13:75:cf:12:
bb:7f:c1:8e:7e:50:bf:97:14:ba:01:fc:f8:c1:82:d0:56:d7:
56:9b:b8:30:84:39:a8:c2:47:2c:a8:86:59:ae:03:55:d1:db:
69:90:fc:a9:9d:62:d2:3a:7e:3d:8e:b9:32:80:0d:67:74:dc:
56:f4:33:f9:00:7f:3b:39:6b:8d:0c:3d:06:a0:c0:e3:6d:2b:
63:a6:3f:5f:da:b3:de:db:5c:e8:c8:fa:59:1b:4a:f7:e9:b7:
fc:43:e8:af:eb:8d:ae:2e:32:bf:d8:d6:73:09:70:c8:91:01:
e5:da:bc:8e:a6:ae:6c:c9:d1:24:fb:d5:99:bd:93:06:9b:af:
e1:82:15:ae:ce:04:65:5c:50:93:76:c6:0a:7f:7a:fa:84:07:
b1:e5:18:6a:6b:56:e9:51:cc:9c:fe:0d:20:bf:f2:0b:ea:7c:
c3:b5:8e:ac:09:db:7d:e3:83:db:54:74:c3:4f:02:09:df:14:
24:97:d0:6b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQV64TOxPXxdqFJfxIPZ6462jhpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFEOTBBMDNCMEJCNDlBMzRDN0JGOUE1Qzg4Q0NDNEM2
MUE3QjNFQzAeFw0yNTAyMDQxODQ1MTVaFw0yNjAyMDMxODUwMTVaMDMxMTAvBgNV
BAMTKDA0M0UzRjc0RjgyNEIwQzFENDVBRDJDNkRDQTE5Qzk1QzAzNDZFNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2v7Vs2Dy06EsFKQno7FOxTcLi
CsEtys7ek2Tmmqm+gdpbRS5rosIpyrTiOU4O6MHuu3+JkdUR4cS7S0ioiG+aCu+w
g6gVWwGMVCBCFtne466ndUsNup0vB/qt6IYJPx6g3AVmsh8nHLOpJsQuR6cWPXl6
5QVxpEkzJ9IA0mafN6Asj8kV3xWXtlZZX5PgQwadN9bc4srqnEe82o2C3yot8CI6
5x8bQSO5Stu0a4TLbeO3bTxQ3xddKB72/TSRnPiD0/b92afjy0/vmg/pfoMNjUmB
smb8TE5ExbWxSsrCa6/0+NVT/P+vvvL59ZiE2NrT1zY056OqHMEEY9oof6mLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBD4/dPgksMHUWtLG3KGclcA0bkIwHwYDVR0j
BBgwFoAU+tkKA7C7SaNMe/mlyIzMTGGns+wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDM1RjY4RTkyMjdDQ0VBQUVBODAwQ0U4MEU3MEM5MkY0
Q0VDNTIyRTRDRDZCQTQzNjIzRTREMjI5MDc0MjNFLzAvRkFEOTBBMDNCMEJCNDlB
MzRDN0JGOUE1Qzg4Q0NDNEM2MUE3QjNFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQUQ5MEEwM0IwQkI0OUEzNEM3
QkY5QTVDODhDQ0M0QzYxQTdCM0VDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzNUY2OEU5MjI3Q0NFQUFFQTgwMENFODBFNzBDOTJGNENFQzUyMkU0
Q0Q2QkE0MzYyM0U0RDIyOTA3NDIzRS8wLzMxMzkzMDJlMzEzMjMzMmUzMTMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM1MzUzNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvnsM
MA0GCSqGSIb3DQEBCwUAA4IBAQC/UH22XsEGGSZESmzdGZwtFbJ5UUIiVb5wzquw
1WIUWOva/XuNtUsJ4LtiSG8EegX6jhLTjvge6QctU7zB8g1/ppZZgRN1zxK7f8GO
flC/lxS6Afz4wYLQVtdWm7gwhDmowkcsqIZZrgNV0dtpkPypnWLSOn49jrkygA1n
dNxW9DP5AH87OWuNDD0GoMDjbStjpj9f2rPe21zoyPpZG0r36bf8Q+iv642uLjK/
2NZzCXDIkQHl2ryOpq5sydEk+9WZvZMGm6/hghWuzgRlXFCTdsYKf3r6hAex5Rhq
a1bpUcyc/g0gv/IL6nzDtY6sCdt944PbVHTDTwIJ3xQkl9Br
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:33 2025 by rpki-client