Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3230382e302f32302d3234203d3e203232333638.roa
File: 3139302e39362e3230382e302f32302d3234203d3e203232333638.roa (raw, json)
Hash identifier: u/ou1tAWS2+aUYIoylDre+bUbNKIahPHbgnohm9YJaM=
Subject key identifier: CF:99:84:8E:6D:05:40:91:75:C9:0C:EC:E9:72:B7:DD:DD:8D:FB:CF
Certificate issuer: /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial: 0BFC75546EEAAF17EE1BA9D2420B520DF3BF4703
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3230382e302f32302d3234203d3e203232333638.roa
Signing time: Tue 04 Feb 2025 18:22:15 +0000
ROA not before: Tue 04 Feb 2025 18:17:15 +0000
ROA not after: Tue 03 Feb 2026 18:22:15 +0000
asID: 22368
IP address blocks: 190.96.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:fc:75:54:6e:ea:af:17:ee:1b:a9:d2:42:0b:52:0d:f3:bf:47:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Validity
Not Before: Feb 4 18:17:15 2025 GMT
Not After : Feb 3 18:22:15 2026 GMT
Subject: CN=CF99848E6D05409175C90CECE972B7DDDD8DFBCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:5b:b6:b9:12:4a:9e:0e:8f:e0:49:5d:c0:
91:27:fa:de:97:9d:d4:ca:46:09:f0:52:e7:b5:fe:
9f:64:cd:0c:6d:69:2c:3d:4a:9c:9d:03:7f:e5:c4:
86:5f:e9:ff:88:7d:f9:7b:20:e6:4a:99:60:06:ce:
28:c6:a1:7f:15:35:c2:e8:f1:ea:1f:91:7a:42:7f:
69:fd:14:4e:19:dc:77:a7:7a:b6:3e:4f:fe:fd:2a:
0b:b3:14:60:26:2a:15:74:b8:29:8e:93:cb:fb:27:
52:15:bf:ea:19:37:9c:88:df:2c:99:21:22:bd:55:
04:c1:86:8d:22:51:3f:dd:f9:71:40:a8:6d:05:8b:
cf:2d:41:ae:05:68:8a:1c:74:f5:9f:14:32:22:0a:
d9:dd:6f:10:ab:ad:67:a0:4e:ef:b5:ea:34:79:b9:
4c:8b:57:ce:5e:7d:75:e3:03:14:5b:a4:80:c2:6a:
23:4c:a4:f0:20:e4:a8:a0:57:b6:5f:f6:4f:e4:85:
e4:3b:a7:e7:08:4c:16:a7:79:f0:a3:d8:a7:60:51:
18:10:df:4a:81:0e:07:39:75:c3:2c:84:87:96:24:
99:0a:19:9b:e3:9f:03:ce:90:bd:1e:2b:95:22:42:
61:fd:f2:b8:d9:63:0f:f4:c2:6d:aa:95:24:ae:c1:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:99:84:8E:6D:05:40:91:75:C9:0C:EC:E9:72:B7:DD:DD:8D:FB:CF
X509v3 Authority Key Identifier:
keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3230382e302f32302d3234203d3e203232333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.96.208.0/20
Signature Algorithm: sha256WithRSAEncryption
05:33:87:dd:0b:b8:09:fa:59:d7:5f:82:b4:86:57:29:89:a5:
a2:fc:81:50:54:69:20:70:0b:07:c9:39:02:d4:69:60:17:d5:
57:d2:ea:bc:e5:75:b8:c8:49:80:eb:63:7d:87:8b:4e:28:6e:
30:87:d4:39:31:6c:cf:75:dd:db:77:dc:89:c8:1d:bd:42:83:
c8:b8:0e:b2:5a:ca:1d:e2:cd:09:9e:0c:02:df:25:16:70:8a:
97:17:3d:69:32:bc:10:5d:cd:27:e0:73:8c:a7:7e:b0:a9:29:
7e:24:cf:7b:93:9f:51:50:b2:25:3b:4a:f4:64:7c:d0:33:36:
cc:d8:41:72:1a:ae:d3:fc:ac:54:21:31:15:ec:e9:1e:2c:73:
e5:81:8e:31:85:19:14:e6:99:ba:94:04:cd:70:de:b3:e2:48:
92:29:d6:b3:80:b2:42:5b:1c:dd:dd:7a:e3:a7:34:e1:bd:a1:
16:c5:c0:bf:fc:f0:6e:db:e9:0d:bc:b2:20:23:84:3c:29:93:
10:d9:b1:87:3e:84:0f:1e:ec:0e:ee:8c:f8:f1:45:5e:ad:cb:
c8:ac:8a:99:22:ec:4c:83:20:46:c5:42:8e:2e:58:5f:91:0a:
44:77:75:cb:bd:d7:da:e7:37:d0:1a:37:fb:60:8b:d5:26:33:
0d:b4:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:14 2025 by rpki-client