Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e203430363736.roa
File: 3139322e3134302e35362e302f32322d3234203d3e203430363736.roa (raw, json)
Hash identifier: ntqq57GtS1EMaeLb2Ub+eLHNDnljaQnSHKY5p/65dcM=
Subject key identifier: B2:07:4E:5A:46:57:15:59:63:EF:25:14:46:C7:98:AB:9F:6E:7B:C4
Certificate issuer: /CN=8C797120238F0722DF341ADB8DF5F4192C0C7988
Certificate serial: 2288D4DCC319624838B9F5580EED816ED3CC5A15
Authority key identifier: 8C:79:71:20:23:8F:07:22:DF:34:1A:DB:8D:F5:F4:19:2C:0C:79:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e203430363736.roa
Signing time: Tue 04 Feb 2025 19:59:06 +0000
ROA not before: Tue 04 Feb 2025 19:54:06 +0000
ROA not after: Tue 03 Feb 2026 19:59:06 +0000
asID: 40676
IP address blocks: 192.140.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:88:d4:dc:c3:19:62:48:38:b9:f5:58:0e:ed:81:6e:d3:cc:5a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C797120238F0722DF341ADB8DF5F4192C0C7988
Validity
Not Before: Feb 4 19:54:06 2025 GMT
Not After : Feb 3 19:59:06 2026 GMT
Subject: CN=B2074E5A4657155963EF251446C798AB9F6E7BC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:00:0f:87:0a:f6:96:51:42:72:ec:fc:91:
d8:35:c8:db:b9:7e:11:6f:a2:78:19:64:d0:c4:c9:
8e:0b:e9:55:1a:1c:e1:95:c1:5b:5d:be:06:37:33:
17:53:68:f8:a4:e7:7b:fb:9f:62:d8:08:06:bc:16:
ba:88:60:df:cf:48:dc:11:25:76:49:ef:8c:88:1d:
a0:74:4b:a4:d3:82:ad:23:67:2f:d2:74:86:4e:d7:
06:4a:20:61:b7:b3:a3:7d:b7:25:59:d4:ba:3a:90:
e7:46:6d:d6:b6:b7:a0:08:b6:51:27:a1:45:18:af:
d8:ec:c6:6a:22:ee:81:46:95:1e:d5:6d:1a:48:53:
78:7d:88:f5:de:e0:68:8f:48:11:17:51:2d:b5:ae:
72:6a:3c:92:08:92:0f:9c:f1:ff:a8:23:72:b4:81:
d7:68:58:b8:65:aa:77:93:36:45:8c:8b:42:b7:d2:
5d:e8:32:c6:5f:ca:92:a2:ea:18:3f:8f:54:b0:63:
99:65:87:86:4c:73:ca:69:2d:61:e2:cb:e8:bf:b1:
e9:e0:e7:4e:6e:1f:44:7e:38:d6:27:8f:2a:ef:27:
11:52:3b:d3:f8:65:64:67:f9:a6:60:e4:c3:dd:3e:
af:e2:e7:2b:da:4b:cf:43:70:de:ef:3b:ce:7b:30:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:07:4E:5A:46:57:15:59:63:EF:25:14:46:C7:98:AB:9F:6E:7B:C4
X509v3 Authority Key Identifier:
keyid:8C:79:71:20:23:8F:07:22:DF:34:1A:DB:8D:F5:F4:19:2C:0C:79:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.56.0/22
Signature Algorithm: sha256WithRSAEncryption
39:fd:8b:c6:14:59:24:2b:55:aa:a9:c8:b2:cf:19:5a:18:49:
b9:b8:d0:f0:92:ee:01:27:3d:6e:fe:f5:f7:42:3c:32:1d:3c:
45:02:a7:6b:91:c3:29:ea:4d:b3:ab:ee:65:06:31:d2:be:4d:
d4:dd:a1:6f:b4:79:6a:70:ae:77:d2:7a:e1:63:b9:ef:34:d6:
40:ca:74:a5:34:05:bc:8f:db:aa:c2:11:18:6b:54:95:89:fa:
bc:2c:8b:1f:bd:dc:50:81:a7:90:88:8d:83:a0:39:7c:3f:08:
07:50:1a:b6:9b:c3:9d:d9:50:68:0e:8e:f8:84:a3:1d:36:7c:
7a:4b:9c:ea:8e:d1:65:76:91:15:13:c0:a1:33:ca:d3:ca:ce:
cb:64:9b:7e:b9:5b:a3:64:c2:66:1d:12:15:72:4a:91:9e:a7:
03:f3:70:ca:c1:79:cf:79:26:86:8d:1f:6d:42:7a:3e:2a:46:
09:d2:68:38:ff:e6:45:85:37:e7:e0:bb:10:d7:92:74:33:de:
70:9f:1c:6d:40:35:05:cb:45:64:46:63:49:9d:01:12:4e:d3:
b2:4b:6f:8a:56:e0:9d:98:62:b3:c3:30:9c:36:4c:6b:e2:9a:
f2:08:84:11:fc:10:e0:28:b3:8b:eb:80:66:6a:86:aa:a1:f6:
24:0f:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:59 2025 by rpki-client