Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32322d3232203d3e20323633323039.roa
File: 3139312e39372e37362e302f32322d3232203d3e20323633323039.roa (raw, json)
Hash identifier: x8OuoKaq5uQ7nMsD6DahwLTOaI7S1+Ww/wFPbvJbd5M=
Subject key identifier: BE:9E:42:DB:28:4E:21:53:D9:2E:C7:25:9F:FC:71:4A:34:A9:A6:C5
Certificate issuer: /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial: 7CFA234635F65AFA55F6762108EE98FFCF0E8A76
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32322d3232203d3e20323633323039.roa
Signing time: Tue 04 Feb 2025 18:28:32 +0000
ROA not before: Tue 04 Feb 2025 18:23:32 +0000
ROA not after: Tue 03 Feb 2026 18:28:32 +0000
asID: 263209
IP address blocks: 191.97.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fa:23:46:35:f6:5a:fa:55:f6:76:21:08:ee:98:ff:cf:0e:8a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Validity
Not Before: Feb 4 18:23:32 2025 GMT
Not After : Feb 3 18:28:32 2026 GMT
Subject: CN=BE9E42DB284E2153D92EC7259FFC714A34A9A6C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d0:c9:4c:cf:b2:ee:c2:b7:66:11:67:93:a4:
52:bd:40:87:eb:1f:23:66:02:f8:3c:1e:0e:ea:03:
c5:df:79:d5:29:d7:d9:d4:b5:e8:c6:da:39:01:95:
5a:98:13:71:fb:e6:74:6f:e9:1a:a3:59:68:67:70:
86:3a:b9:d9:b6:c2:f6:6b:17:d0:e6:25:f8:dd:68:
f9:e8:73:31:5c:d5:4f:10:aa:95:cc:4a:fc:11:54:
30:ec:f0:e4:96:8e:cd:5e:0a:a5:e6:88:2c:9d:1a:
13:46:3a:35:5e:25:2a:57:83:19:14:5f:b4:66:72:
1a:6b:86:5c:f6:8b:64:78:e2:6b:c2:1b:7d:c6:e3:
79:84:ed:d1:e1:59:db:5a:e3:9c:67:88:9b:f4:6b:
3d:7f:8d:85:84:dd:47:c2:62:3e:42:33:8f:27:40:
cb:f9:33:c4:49:22:e0:3c:33:54:25:27:eb:56:48:
2b:f1:cb:47:cb:95:f9:d8:c8:92:e6:00:e8:38:22:
30:c7:f4:b0:af:03:ab:ef:4e:62:d7:0b:fa:ee:05:
aa:c5:1f:94:72:a8:7e:59:0a:40:06:4c:fd:c3:b8:
d8:ea:32:9c:e1:cd:17:dc:12:f9:df:e1:f1:7e:80:
e4:84:c9:6c:f0:7e:54:3e:09:78:32:4a:e4:c2:81:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9E:42:DB:28:4E:21:53:D9:2E:C7:25:9F:FC:71:4A:34:A9:A6:C5
X509v3 Authority Key Identifier:
keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32322d3232203d3e20323633323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:eb:dd:f8:e9:87:ee:25:6d:3e:64:9c:80:7e:91:02:c5:0d:
c9:be:46:13:96:e4:0b:c1:cd:d2:2d:f7:b3:15:e7:b0:e0:9c:
cf:43:60:28:fb:a5:9b:ee:89:05:7c:66:11:b8:bd:1e:ac:bf:
98:5b:76:d9:d2:c1:9f:f0:0f:4e:4c:07:ff:2f:c0:d1:79:1f:
9d:96:40:8b:62:73:3f:cf:03:ee:43:ac:33:2e:5f:4e:2c:19:
9a:39:cc:5e:89:ec:1e:cf:6d:97:eb:7f:aa:0e:cc:19:4b:8c:
be:ca:f3:05:45:c3:a9:1e:25:78:f8:76:c9:aa:cc:16:45:65:
92:67:85:39:fb:aa:3f:7e:74:a9:c4:a5:3c:63:89:0a:3c:6f:
ee:23:38:a8:e5:99:d5:d8:1d:fa:db:13:ae:a8:eb:6f:6b:dc:
3a:44:f4:48:a0:2f:21:01:42:0d:22:e5:3e:26:64:d5:c8:de:
4f:46:72:5c:66:9a:9e:7a:4c:98:e4:e9:b7:55:a0:ed:01:57:
07:d6:23:64:ce:b4:30:ef:38:96:1a:2f:e0:a2:90:4e:17:bb:
54:75:56:af:9d:f2:fa:df:31:1f:2f:5c:e6:21:87:c4:e1:a2:
04:6e:4d:84:db:c3:93:14:5d:b4:8d:c8:0f:cb:4d:e7:f2:dd:
9c:4e:f5:9b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfPojRjX2WvpV9nYhCO6Y/88OinYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5NkUyQkEzRkU4OTkzM0YxQ0YzNkJCMDM3NzY0Rjgy
NEZFRDdGMDAeFw0yNTAyMDQxODIzMzJaFw0yNjAyMDMxODI4MzJaMDMxMTAvBgNV
BAMTKEJFOUU0MkRCMjg0RTIxNTNEOTJFQzcyNTlGRkM3MTRBMzRBOUE2QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH0MlMz7LuwrdmEWeTpFK9QIfr
HyNmAvg8Hg7qA8XfedUp19nUtejG2jkBlVqYE3H75nRv6RqjWWhncIY6udm2wvZr
F9DmJfjdaPnoczFc1U8QqpXMSvwRVDDs8OSWjs1eCqXmiCydGhNGOjVeJSpXgxkU
X7Rmchprhlz2i2R44mvCG33G43mE7dHhWdta45xniJv0az1/jYWE3UfCYj5CM48n
QMv5M8RJIuA8M1QlJ+tWSCvxy0fLlfnYyJLmAOg4IjDH9LCvA6vvTmLXC/ruBarF
H5RyqH5ZCkAGTP3DuNjqMpzhzRfcEvnf4fF+gOSEyWzwflQ+CXgySuTCgRUdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvp5C2yhOIVPZLscln/xxSjSppsUwHwYDVR0j
BBgwFoAULZbiuj/omTPxzza7A3dk+CT+1/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDlDN0U4NjVDQjFEQjkzOUJBRDQzQTJERTRBMzJENUZD
MEZCRTcxQ0NFQjI0MkRDQjQ4OTY0QzkzN0FCNUM3LzAvMkQ5NkUyQkEzRkU4OTkz
M0YxQ0YzNkJCMDM3NzY0RjgyNEZFRDdGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDk2RTJCQTNGRTg5OTMzRjFD
RjM2QkIwMzc3NjRGODI0RkVEN0YwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ5QzdFODY1Q0IxREI5MzlCQUQ0M0EyREU0QTMyRDVGQzBGQkU3MUND
RUIyNDJEQ0I0ODk2NEM5MzdBQjVDNy8wLzMxMzkzMTJlMzkzNzJlMzczNjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMzMyMzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr9hTDAN
BgkqhkiG9w0BAQsFAAOCAQEAHuvd+OmH7iVtPmScgH6RAsUNyb5GE5bkC8HN0i33
sxXnsOCcz0NgKPulm+6JBXxmEbi9Hqy/mFt22dLBn/APTkwH/y/A0XkfnZZAi2Jz
P88D7kOsMy5fTiwZmjnMXonsHs9tl+t/qg7MGUuMvsrzBUXDqR4lePh2yarMFkVl
kmeFOfuqP350qcSlPGOJCjxv7iM4qOWZ1dgd+tsTrqjrb2vcOkT0SKAvIQFCDSLl
PiZk1cjeT0ZyXGaannpMmOTpt1Wg7QFXB9YjZM60MO84lhov4KKQThe7VHVWr53y
+t8xHy9c5iGHxOGiBG5NhNvDkxRdtI3ID8tN5/LdnE71mw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:35:29 2025 by rpki-client