Route Origin Authorization
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/3139312e3130322e33322e302f32342d3234203d3e20313734.roa
File: 3139312e3130322e33322e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: idGmaEQZT5xH2Jvpmn33yor0FFXkYFGGEGTTqRx9M/o=
Subject key identifier: 93:05:CA:F2:E6:F7:02:6B:1B:6F:73:D6:5C:D5:DA:5C:15:1B:F7:5A
Certificate issuer: /CN=D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC
Certificate serial: 14A45E58DA29195391338C3258B8EE1429774BE4
Authority key identifier: D5:CD:D1:00:D1:AC:8C:A9:01:EC:CD:34:EB:AF:27:70:47:42:F6:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/3139312e3130322e33322e302f32342d3234203d3e20313734.roa
Signing time: Fri 02 Oct 2026 16:30:00 +0000
ROA not before: Fri 02 Oct 2026 16:25:00 +0000
ROA not after: Fri 01 Oct 2027 16:30:00 +0000
asID: 174
IP address blocks: 191.102.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Oct 2026 10:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a4:5e:58:da:29:19:53:91:33:8c:32:58:b8:ee:14:29:77:4b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC
Validity
Not Before: Oct 2 16:25:00 2026 GMT
Not After : Oct 1 16:30:00 2027 GMT
Subject: CN=9305CAF2E6F7026B1B6F73D65CD5DA5C151BF75A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:f7:5b:f3:aa:8c:03:74:c0:02:18:83:0c:
3b:c4:fa:af:50:28:fc:1e:74:df:aa:67:5b:91:23:
73:cf:84:35:a3:11:89:35:85:45:24:68:74:a3:09:
b6:b3:8c:ec:15:38:8f:5a:f6:ac:38:9a:99:1b:9f:
7d:9e:56:47:1c:96:1e:10:e1:72:22:f3:a7:74:12:
dd:f8:34:0f:7a:3a:d9:62:2c:47:e3:f3:5f:45:bc:
52:55:db:9c:fc:57:29:df:ed:45:8d:d7:75:19:50:
97:05:6c:6b:ec:19:ca:64:0d:95:da:76:da:78:24:
8c:ed:34:ad:94:71:1a:12:53:1e:6f:52:9b:5d:d6:
31:70:7c:88:d1:4f:08:f4:cb:64:ed:91:4e:de:4c:
f2:4f:f3:79:f9:d3:82:ae:b5:b5:06:23:56:87:d9:
23:a0:1e:71:85:d4:b7:14:3a:bb:c0:e8:9a:fe:c9:
e2:c8:91:c1:af:00:cc:bc:70:30:0a:b4:97:57:60:
ae:4c:d9:46:34:e0:79:eb:1f:d3:7c:d6:e7:40:ca:
82:e6:f3:b2:e8:35:68:70:da:3b:c2:73:5d:0a:9b:
9a:7d:47:97:a7:87:0f:f9:13:c5:43:8b:9f:19:23:
0a:07:3e:76:b8:52:fe:6f:a6:fb:63:d0:6d:f6:6d:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:05:CA:F2:E6:F7:02:6B:1B:6F:73:D6:5C:D5:DA:5C:15:1B:F7:5A
X509v3 Authority Key Identifier:
keyid:D5:CD:D1:00:D1:AC:8C:A9:01:EC:CD:34:EB:AF:27:70:47:42:F6:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/3139312e3130322e33322e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.102.32.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ea:de:53:b1:f1:8a:03:6e:2d:e1:b7:f3:a2:81:1a:cf:43:
24:7a:12:cb:07:0b:e6:d9:b0:2c:d5:a1:3e:ea:94:2f:a1:ed:
7e:70:c8:66:57:2c:67:1a:95:e2:68:e0:66:f2:43:7f:3d:92:
a5:a5:76:bc:2d:74:c0:5f:1c:e6:65:64:2f:bf:df:ca:a9:04:
ac:ed:04:59:ef:31:6c:86:10:00:06:76:0d:f7:b8:53:ec:ae:
c9:cb:69:f2:dd:b1:eb:dd:b6:26:4c:bc:1e:ee:75:b5:75:91:
55:d6:42:18:45:62:59:85:75:58:e7:46:de:ce:84:e5:42:27:
1c:71:41:0a:88:d5:c1:ce:e9:ce:34:e7:e4:5f:89:e6:04:50:
73:a5:33:7e:43:c2:8d:f8:b9:2e:1c:47:0a:ef:65:6a:10:f0:
b2:d5:b4:5c:de:bb:7b:ef:09:eb:78:7d:e1:30:8b:e5:9a:f0:
a6:83:f4:47:7d:fa:c6:37:a9:ce:eb:c2:a0:78:85:9b:92:fa:
00:25:bb:be:8b:28:92:df:e0:bb:69:f1:00:35:0d:9c:d0:85:
a4:54:b9:c4:73:0d:c5:62:b5:00:05:bf:fd:fd:00:6e:2f:db:
e2:bf:df:06:42:ef:a2:fa:55:0d:14:b6:16:cf:21:f9:b4:31:
50:8c:50:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:42:51 2026 by rpki-client