Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3230302e302f32312d3231203d3e2033383136.roa
File: 3139302e39362e3230302e302f32312d3231203d3e2033383136.roa (raw, json)
Hash identifier: /8RkyhOVOolxFHv0rWm64TWbm7zcg6opQ5Bagk94RlA=
Subject key identifier: E7:3A:75:AC:06:FC:DB:75:79:1B:14:2A:A9:F1:80:9E:AA:09:AC:91
Certificate issuer: /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial: 60A49F04CABC0BF698CFC079AAAF102E4068CC27
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3230302e302f32312d3231203d3e2033383136.roa
Signing time: Tue 04 Feb 2025 18:22:17 +0000
ROA not before: Tue 04 Feb 2025 18:17:17 +0000
ROA not after: Tue 03 Feb 2026 18:22:17 +0000
asID: 3816
IP address blocks: 190.96.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a4:9f:04:ca:bc:0b:f6:98:cf:c0:79:aa:af:10:2e:40:68:cc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Validity
Not Before: Feb 4 18:17:17 2025 GMT
Not After : Feb 3 18:22:17 2026 GMT
Subject: CN=E73A75AC06FCDB75791B142AA9F1809EAA09AC91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:13:75:0f:c3:fc:b5:34:18:5a:7d:8c:28:
de:e1:a7:cf:7d:b6:dd:47:88:91:b0:fa:80:b6:3a:
cb:a4:3b:9a:2b:7d:b2:7f:7e:b9:3b:7f:a7:6c:81:
3c:ba:6d:4b:28:e7:49:a7:9e:74:80:7f:f0:fa:42:
0a:14:8b:ed:25:a1:8b:9a:b4:58:f6:1a:9d:d3:c0:
f2:20:5f:3d:5e:cd:76:4b:85:cb:95:e9:f6:d5:53:
9b:62:97:02:24:ad:21:3e:1e:82:10:50:13:a4:f9:
f7:38:61:80:fa:12:f6:34:dd:a4:c7:d2:5b:92:12:
ad:f8:91:6a:49:3b:51:5a:13:a2:c2:d6:17:14:80:
8f:e5:f9:c6:c1:08:43:3f:88:96:26:e1:c1:bc:04:
38:b0:75:7b:2b:03:b7:89:37:09:24:6f:1a:85:76:
c7:ed:50:1c:a1:ab:8d:ca:0f:13:8d:c8:30:17:ab:
76:8e:71:cb:ab:2a:cd:b0:35:24:8e:27:c8:3a:26:
49:29:46:47:c6:39:ad:28:95:ec:18:10:80:4f:38:
14:c3:c7:f8:ce:04:1e:a5:69:91:0b:b3:55:53:04:
ce:11:cf:d5:8b:7f:fa:f4:1e:60:8c:49:d9:3d:94:
f4:54:93:be:23:95:2b:45:43:3d:48:ab:e5:d5:f2:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3A:75:AC:06:FC:DB:75:79:1B:14:2A:A9:F1:80:9E:AA:09:AC:91
X509v3 Authority Key Identifier:
keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3230302e302f32312d3231203d3e2033383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.96.200.0/21
Signature Algorithm: sha256WithRSAEncryption
80:dd:14:63:f8:24:86:2d:c7:28:f2:a8:a0:d5:2a:47:a4:ed:
2d:50:19:1d:58:2f:96:cc:41:97:42:d3:1d:02:95:99:7d:cf:
da:47:95:55:8b:05:8b:f0:10:30:49:ea:80:92:f7:86:25:c7:
1f:cd:3d:04:2e:d7:6b:a5:e9:fd:61:8b:89:85:b7:be:d5:c6:
fc:72:4c:45:db:6a:99:a0:a4:52:c6:02:de:8d:55:fa:dc:d9:
08:16:60:d5:b4:f4:96:cb:85:36:d9:23:dd:c5:0e:b5:f2:0a:
fa:37:85:3d:7a:c2:7e:49:2c:e0:65:49:51:b2:e9:78:67:69:
2c:7c:52:d0:53:95:40:ea:f8:c1:c6:36:b3:5a:74:34:80:bb:
31:6b:c6:5a:99:d2:92:1b:7c:0f:30:03:34:6f:41:a7:f1:66:
54:a8:87:b9:1c:cd:56:8f:0b:85:b6:76:5f:d2:ae:1a:59:10:
6b:15:12:6e:0f:92:5a:01:66:f3:56:5b:59:e2:93:9a:59:3a:
be:e1:15:b1:f0:1d:f3:5b:39:27:aa:bc:b1:46:cd:49:09:09:
4e:fb:6b:9e:7f:0b:f9:5a:f4:c3:46:f2:80:26:42:09:7a:37:
9a:07:f7:09:36:da:22:89:6f:56:45:3f:a9:ae:af:87:13:84:
c7:a7:4e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:02 2025 by rpki-client