Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7FB140526F0C2D9FCAB4A733DBBE30EAD579F4B1AD1ADCBD1771DE3B16241F0/0/3139312e3130322e34382e302f32312d3231203d3e20323633313737.roa
File: 3139312e3130322e34382e302f32312d3231203d3e20323633313737.roa (raw, json)
Hash identifier: 8z+RhA3QAzIaal8jjuLCizu6GHCEbh9a3o5Nsirlsxs=
Subject key identifier: 4A:47:99:C5:14:FE:2A:1E:56:D3:DB:E6:8C:DE:99:86:D6:85:CE:6C
Certificate issuer: /CN=FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C
Certificate serial: 67E492C559144A74B3EE400AA58B0B6CA66DE24E
Authority key identifier: FC:0A:CB:F4:A6:A8:3F:60:F4:77:CA:4B:10:1F:BE:9B:8E:F1:7C:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E7FB140526F0C2D9FCAB4A733DBBE30EAD579F4B1AD1ADCBD1771DE3B16241F0/0/3139312e3130322e34382e302f32312d3231203d3e20323633313737.roa
Signing time: Tue 04 Feb 2025 18:14:02 +0000
ROA not before: Tue 04 Feb 2025 18:09:02 +0000
ROA not after: Tue 03 Feb 2026 18:14:02 +0000
asID: 263177
IP address blocks: 191.102.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e4:92:c5:59:14:4a:74:b3:ee:40:0a:a5:8b:0b:6c:a6:6d:e2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C
Validity
Not Before: Feb 4 18:09:02 2025 GMT
Not After : Feb 3 18:14:02 2026 GMT
Subject: CN=4A4799C514FE2A1E56D3DBE68CDE9986D685CE6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:fb:60:b0:16:3c:33:82:a3:43:d7:54:d9:
bb:9f:77:5a:04:1d:27:13:7b:f6:d4:b4:f9:ca:e8:
e9:04:2c:07:88:67:47:27:ad:e3:36:4e:bd:5a:da:
97:9c:90:11:0f:c4:98:4a:79:3d:07:89:c1:15:94:
75:f0:6a:b2:0d:c1:3b:b4:85:c7:79:d8:22:4d:89:
b4:53:2e:60:8e:cd:2f:2b:36:57:16:c4:a1:24:10:
d7:cd:20:9e:6d:14:9c:8c:6a:4e:6e:52:a1:f2:78:
09:62:76:46:dc:e7:4a:ba:db:b7:dc:cc:cd:fc:f1:
b5:50:2f:e1:2c:5e:cc:6a:6c:b9:4f:6e:d7:89:e7:
55:3f:c2:07:32:64:0a:fb:bf:07:2a:7b:a7:30:a5:
fe:59:09:40:58:57:d8:a0:d1:fa:2a:4a:04:88:8b:
66:02:99:87:df:18:71:04:32:6a:b5:a4:fd:1e:8d:
76:4d:f6:af:39:6b:bd:57:09:c1:e9:ce:d7:3a:5f:
09:ed:4b:ee:45:50:b7:57:89:e9:06:d4:f1:3b:75:
3f:34:6d:d3:0b:a6:e4:e7:26:e4:71:5a:54:98:f7:
c3:14:13:28:ff:bd:71:60:78:77:f3:37:f1:bd:81:
9c:62:1a:93:be:06:a5:d4:e3:a8:c2:e2:f6:7f:7d:
ea:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:47:99:C5:14:FE:2A:1E:56:D3:DB:E6:8C:DE:99:86:D6:85:CE:6C
X509v3 Authority Key Identifier:
keyid:FC:0A:CB:F4:A6:A8:3F:60:F4:77:CA:4B:10:1F:BE:9B:8E:F1:7C:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E7FB140526F0C2D9FCAB4A733DBBE30EAD579F4B1AD1ADCBD1771DE3B16241F0/0/FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7FB140526F0C2D9FCAB4A733DBBE30EAD579F4B1AD1ADCBD1771DE3B16241F0/0/3139312e3130322e34382e302f32312d3231203d3e20323633313737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.102.48.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:5b:3c:5d:ea:3d:7f:20:12:9e:2d:51:97:2b:71:7f:8c:c2:
34:54:b2:1a:b9:b6:e9:5b:77:2c:38:de:d3:ec:4a:ac:fe:ce:
8a:af:5c:bb:84:62:dd:03:75:a6:20:37:bf:85:2d:1e:46:ff:
89:4a:36:e5:09:4c:b1:8e:3e:90:2f:4e:00:cb:c6:bc:d6:7f:
9f:ec:8b:b9:be:2d:04:f3:78:31:28:10:fa:b9:7d:16:0f:7a:
e1:2c:85:c1:ec:3c:d6:ff:d2:fb:5e:04:fb:24:a0:10:5d:bc:
4b:09:d3:9d:8b:49:26:03:b8:c0:1b:6e:86:9a:40:3b:41:bb:
61:ba:9f:a3:eb:f1:97:6b:78:77:1d:b2:ec:a1:f4:e8:ea:74:
9e:e9:83:f0:94:fe:08:7d:87:d1:70:9b:d7:79:4f:97:55:ef:
c0:e9:bf:bb:64:c1:0c:68:5d:3a:b8:7b:c8:34:10:64:1a:a6:
9e:2c:bf:bb:b0:35:b6:ea:46:a2:a1:02:2f:28:db:12:ce:bb:
19:94:d0:8f:ca:77:f7:db:99:9d:db:ad:f4:a0:dd:33:7c:82:
29:63:9f:93:5a:4a:28:c1:7b:4c:77:0c:ec:85:c7:6d:fe:c4:
65:af:c9:c9:d2:83:fa:e8:49:49:c0:21:34:f9:8e:76:a7:87:
42:ae:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:56:08 2025 by rpki-client