Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3232342e302f31392d3231203d3e2033383136.roa
File: 3139302e39362e3232342e302f31392d3231203d3e2033383136.roa (raw, json)
Hash identifier: FKGAkUtm4uq5qX6nhaFqGDaemDk1aa9YWTVYlSA+aLY=
Subject key identifier: E4:D4:2A:A7:16:E9:5C:8C:5E:A4:40:EE:93:3F:55:36:42:60:0F:23
Certificate issuer: /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial: 40388D483191534DDF3F992DE6BD9D74956C0466
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3232342e302f31392d3231203d3e2033383136.roa
Signing time: Tue 04 Feb 2025 18:22:16 +0000
ROA not before: Tue 04 Feb 2025 18:17:16 +0000
ROA not after: Tue 03 Feb 2026 18:22:16 +0000
asID: 3816
IP address blocks: 190.96.224.0/19 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:38:8d:48:31:91:53:4d:df:3f:99:2d:e6:bd:9d:74:95:6c:04:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Validity
Not Before: Feb 4 18:17:16 2025 GMT
Not After : Feb 3 18:22:16 2026 GMT
Subject: CN=E4D42AA716E95C8C5EA440EE933F553642600F23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:c2:0e:30:30:7f:25:d2:79:f9:12:c6:aa:
78:8c:64:fc:97:46:7c:62:0b:83:fa:8b:7e:af:98:
e3:7a:d6:fb:96:ab:8b:ec:35:d5:c2:d2:03:21:5a:
4b:5e:ed:6b:ec:44:67:f2:45:c1:35:d1:48:05:b0:
3a:cc:1e:b2:e8:98:ec:8b:00:d9:49:76:81:de:a5:
38:51:d2:93:e1:f6:18:8c:63:4b:f8:27:61:46:45:
73:6d:55:c7:da:88:df:30:18:93:d7:db:eb:5c:27:
dc:cc:3c:c2:8f:f5:19:e8:52:b0:3d:90:9d:5a:9d:
aa:6a:06:ff:de:ea:2b:91:70:99:f9:54:de:4b:18:
41:6d:90:a9:fa:50:ae:6c:6e:70:37:4d:ed:96:19:
00:b9:0c:7f:a8:c8:43:0d:29:c2:bb:30:ad:5e:08:
69:d4:d3:27:c0:27:d6:bf:ac:3d:9b:a7:2b:ef:51:
93:d1:de:7b:10:04:76:6d:25:0d:91:8b:fd:57:a5:
1e:67:5b:61:7d:68:3c:cd:b1:3b:ad:8c:44:b0:b0:
af:e3:0e:91:31:47:d1:9e:2c:cd:8f:59:b1:ab:77:
78:10:68:3b:bd:75:fe:8a:48:32:a8:2b:8a:eb:3b:
48:e9:9d:89:dd:95:34:0d:fd:96:d2:cb:f4:0c:37:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D4:2A:A7:16:E9:5C:8C:5E:A4:40:EE:93:3F:55:36:42:60:0F:23
X509v3 Authority Key Identifier:
keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3232342e302f31392d3231203d3e2033383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.96.224.0/19
Signature Algorithm: sha256WithRSAEncryption
84:db:09:ee:d1:8c:ed:cf:a3:a9:42:03:c4:56:36:9b:9c:4b:
ec:04:ca:fc:0b:3d:12:c5:b4:7b:fd:6f:bc:ad:91:3d:45:5c:
83:29:8d:fa:79:95:a8:c2:72:b3:09:01:87:64:7e:cb:38:dc:
75:dc:77:1b:bc:bc:f8:6e:ae:ff:69:73:c7:9a:1d:4b:a8:ed:
c8:86:05:01:ad:7b:67:57:d9:6a:99:fc:68:ff:09:1b:2f:09:
3f:1b:c3:af:52:79:49:0b:c1:c9:0f:11:39:a8:6a:ed:23:5e:
71:c7:9b:66:19:83:92:2c:49:ac:80:70:04:81:b8:f3:a7:52:
8a:b4:62:cb:78:75:29:8d:f0:81:8c:05:b5:89:8c:f7:69:e1:
a3:95:20:39:30:d3:f8:6e:96:be:50:05:aa:11:e4:18:95:b0:
fc:b9:44:42:d4:c8:60:65:b8:b5:0a:0e:7d:9e:16:7c:44:c7:
40:d4:eb:93:6c:64:7a:39:e1:80:76:1b:8e:ca:9f:e6:e2:cb:
0b:3e:51:2d:57:fa:94:4a:59:3f:ee:87:3a:cc:87:84:b6:de:
f4:1c:98:85:c7:51:fb:22:52:73:29:f4:2e:27:18:06:86:a2:
e3:bb:31:f9:bd:e4:c4:9c:a7:ce:fb:17:0f:3d:16:66:ea:5b:
ce:d8:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:58 2025 by rpki-client