Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa
File: 3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa (raw, json)
Hash identifier: lY/0FEZJ4GwSkTssn/tWnNtUxQbskYN1l5/hpktxnpE=
Subject key identifier: 7E:DE:AB:47:D1:8D:A9:76:45:83:8A:61:B8:7C:9E:FC:88:5B:EE:02
Certificate issuer: /CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
Certificate serial: 70DB560605B032859456D36A3C6772A85956B8AD
Authority key identifier: BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa
Signing time: Tue 05 Mar 2024 18:21:53 +0000
ROA not before: Tue 05 Mar 2024 18:16:53 +0000
ROA not after: Tue 04 Mar 2025 18:21:53 +0000
asID: 269905
IP address blocks: 190.112.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:db:56:06:05:b0:32:85:94:56:d3:6a:3c:67:72:a8:59:56:b8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
Validity
Not Before: Mar 5 18:16:53 2024 GMT
Not After : Mar 4 18:21:53 2025 GMT
Subject: CN=7EDEAB47D18DA97645838A61B87C9EFC885BEE02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:95:5a:df:74:ee:e8:c3:c1:ff:84:5b:7e:
6b:89:56:13:da:59:88:6b:a7:7d:c9:44:0d:15:2d:
1c:43:ec:a8:dc:24:7f:7d:1b:a4:4b:13:64:39:08:
9f:ce:d0:2f:e8:83:9e:26:6b:a5:83:2b:0e:34:3e:
96:db:5d:e6:17:be:63:85:74:e4:29:a4:04:f2:2a:
66:82:c3:71:31:61:52:5f:c2:50:8c:b1:78:87:f3:
d2:0d:e5:a8:7b:3d:03:9c:06:25:a4:5e:29:aa:07:
e6:ad:5d:cf:0e:60:29:4d:21:16:1c:73:bc:ec:9c:
1d:b3:d0:0c:a6:a6:6e:97:cf:b7:f3:75:25:73:ec:
a4:34:23:99:8d:d6:26:57:64:6e:42:29:91:3c:55:
bf:43:73:54:c3:b6:e6:4a:26:71:93:23:ee:c7:85:
ca:83:df:84:18:d9:fa:58:ef:41:e9:b1:04:8e:12:
f5:c3:16:49:f7:97:a0:c5:69:00:e6:e1:03:01:b5:
ca:ac:d8:df:8e:62:04:90:1e:f5:24:20:b0:df:a8:
0c:b6:92:99:db:14:bc:81:c0:9f:75:07:cd:a7:96:
91:71:bd:41:65:0c:ca:d2:1a:e8:97:df:99:dd:c0:
1e:e1:6d:c4:0f:bd:d1:6f:af:d5:61:60:ef:09:53:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DE:AB:47:D1:8D:A9:76:45:83:8A:61:B8:7C:9E:FC:88:5B:EE:02
X509v3 Authority Key Identifier:
keyid:BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:28:e4:5f:77:92:5f:6f:78:6d:b5:d4:27:8a:77:65:dc:3b:
2f:50:7e:02:41:ae:f4:09:9d:e3:eb:ce:3b:48:22:75:03:5a:
18:58:52:00:39:5f:57:af:b2:cf:1d:13:6a:d2:5c:83:57:e8:
18:99:97:6a:10:32:d0:53:c5:8b:08:da:e4:48:89:41:fc:9b:
75:b2:16:8f:06:18:a4:70:3c:df:32:b8:79:a1:fe:81:5e:09:
7d:dd:b6:8a:16:87:01:4c:8a:83:90:50:e8:a2:fc:55:64:de:
c5:06:61:46:5d:7f:b9:b9:30:5c:53:d9:9c:19:82:de:ec:0b:
a3:a8:bb:e3:e6:d6:90:8d:7d:c5:94:3b:35:79:54:4d:2b:24:
74:9b:ea:4a:78:56:77:73:5e:9b:d8:25:a7:52:51:26:7e:14:
22:5f:2c:92:10:6e:e5:52:db:cc:78:b7:18:c1:41:2f:c6:39:
f5:6f:b4:ed:5c:8b:bc:ab:87:84:a3:39:42:8d:e0:7a:ee:63:
24:32:9b:7d:64:ec:91:7c:02:76:c8:db:b0:d2:d1:1c:1b:56:
75:eb:fb:10:f6:dc:b9:92:50:40:7e:c2:d4:79:f3:00:c0:31:
d7:83:54:e9:93:ec:ed:47:8d:ee:d6:45:e2:8e:e3:e0:59:c1:
f3:b0:06:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:35:11 2025 by rpki-client