Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37342e302f32342d3234203d3e20323633323039.roa
File: 3139312e39372e37342e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier: uxGbGIQ6MF16Xl3SaV0E8T5Xszc+nT2pTzSbAtGdmDs=
Subject key identifier: 92:F8:08:70:C7:BE:61:80:36:66:44:10:63:48:6D:13:71:F5:D1:AB
Certificate issuer: /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial: 64DA08A72A8210B95CF92B74C7BB5761281AB452
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37342e302f32342d3234203d3e20323633323039.roa
Signing time: Tue 04 Feb 2025 18:28:29 +0000
ROA not before: Tue 04 Feb 2025 18:23:29 +0000
ROA not after: Tue 03 Feb 2026 18:28:29 +0000
asID: 263209
IP address blocks: 191.97.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:da:08:a7:2a:82:10:b9:5c:f9:2b:74:c7:bb:57:61:28:1a:b4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Validity
Not Before: Feb 4 18:23:29 2025 GMT
Not After : Feb 3 18:28:29 2026 GMT
Subject: CN=92F80870C7BE61803666441063486D1371F5D1AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:80:7b:06:6c:03:6d:c1:83:d5:90:f5:8a:
7f:0c:a7:f6:18:c8:be:75:8a:4b:ca:de:e8:83:cc:
a3:5f:81:d7:f4:52:bc:3a:9f:3a:1f:9a:9c:03:79:
02:18:05:a1:d8:97:7b:c4:fb:93:8c:d3:15:23:0f:
8e:18:da:6f:8c:c6:33:c0:e2:e0:39:ca:87:db:00:
8d:88:cd:bd:a5:5c:d0:e9:b4:8a:40:d0:11:03:04:
16:ee:31:49:3c:9b:29:e2:b3:4c:78:3c:ec:38:cc:
a6:b7:d6:10:8d:9b:a9:a3:3a:76:8e:ef:3a:8a:dd:
e9:4f:26:45:32:19:3a:cd:5d:e7:8a:31:ab:ca:88:
28:38:32:1c:c5:fc:d3:2d:ac:67:6e:f8:08:08:5d:
c4:e9:e5:01:35:21:53:20:3d:05:4b:5c:80:fa:ea:
ca:60:c4:3e:69:92:3d:a7:2f:61:93:fd:5a:e7:ce:
c5:5d:74:1a:db:04:85:f0:ac:10:1a:2d:fe:49:17:
45:57:12:8b:55:92:f3:2a:88:6e:6c:e6:87:d2:c1:
ee:07:bb:d0:d4:34:79:57:36:4a:66:57:7f:d2:05:
d8:6d:d4:17:6b:db:09:67:64:85:eb:db:c9:ad:97:
44:ce:1e:97:1a:e0:09:a7:24:e9:14:ac:cd:ce:a3:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F8:08:70:C7:BE:61:80:36:66:44:10:63:48:6D:13:71:F5:D1:AB
X509v3 Authority Key Identifier:
keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37342e302f32342d3234203d3e20323633323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.74.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ae:09:89:37:70:0a:88:01:26:ba:3d:a6:3b:06:ea:1c:44:
c6:6a:56:14:c7:36:19:45:56:8f:0a:a7:60:7d:dc:47:c8:82:
1e:19:72:a1:b8:1a:c0:fe:08:d0:2c:77:ad:a0:28:2a:3d:7d:
1c:6d:e1:d7:93:9d:49:ca:57:78:f6:99:ee:08:a3:20:a0:ba:
4e:66:a8:1f:89:db:20:63:97:d4:9b:b1:22:72:e7:db:0b:4e:
19:9b:8c:40:bd:af:a6:76:d7:9b:c5:d5:3c:02:30:a9:82:a8:
e5:c9:dc:cb:8c:cf:70:c0:e2:aa:47:f4:b1:c8:22:59:d8:2c:
c5:20:19:7c:ef:56:be:b3:f6:e9:7f:cb:a2:c3:83:b5:02:1d:
e4:73:4c:34:bd:a3:ab:e7:86:9f:bf:f4:ea:a4:c6:1b:3a:aa:
8f:cb:a9:bd:6d:66:3f:e5:df:79:7a:79:37:77:87:d1:79:ca:
d7:37:98:f2:e4:6d:da:f2:99:ce:54:9f:c8:d4:e9:f8:34:3d:
e8:0a:35:72:40:43:06:e0:84:c4:5c:c7:23:25:1e:e2:6d:15:
d3:3d:dd:74:eb:89:68:76:6f:7d:b1:c0:0b:2f:cf:95:7c:ea:
55:5f:64:52:df:77:a5:4d:9e:b5:af:98:74:58:0d:b3:0a:79:
a4:d3:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:53:06 2025 by rpki-client