Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234382e302f32312d3234203d3e203630303232.roa
File: 3139302e3132312e3234382e302f32312d3234203d3e203630303232.roa (raw, json)
Hash identifier: 91PHGomwzAoOVg4hhOMLYLz3T7mHZry3CcHFV7oN0U4=
Subject key identifier: A1:A6:84:7E:D7:04:4D:2A:36:7F:C0:B9:4F:73:F0:1E:1E:97:7F:08
Certificate issuer: /CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
Certificate serial: 0CCFE3D95A1634F3609DB0C059EB66993BCD776B
Authority key identifier: 32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234382e302f32312d3234203d3e203630303232.roa
Signing time: Tue 05 Mar 2024 18:13:33 +0000
ROA not before: Tue 05 Mar 2024 18:08:33 +0000
ROA not after: Tue 04 Mar 2025 18:13:33 +0000
asID: 60022
IP address blocks: 190.121.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cf:e3:d9:5a:16:34:f3:60:9d:b0:c0:59:eb:66:99:3b:cd:77:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32DACDC930712AC6C14A51E11EE334A3F6C82286
Validity
Not Before: Mar 5 18:08:33 2024 GMT
Not After : Mar 4 18:13:33 2025 GMT
Subject: CN=A1A6847ED7044D2A367FC0B94F73F01E1E977F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:3a:5c:e8:5d:f4:69:fb:3e:a2:6b:16:47:
e9:c6:d8:2f:f9:06:28:71:f8:88:bd:7f:5b:f7:42:
e6:37:64:8a:ac:29:5d:52:34:d6:a3:90:fa:ef:ea:
aa:29:f1:52:91:38:d2:39:e3:5f:15:eb:ff:80:c6:
24:ee:59:51:5a:8a:7b:58:12:18:f1:79:b6:c1:74:
32:74:89:af:6d:01:0e:8b:d3:12:20:5a:1d:3d:ec:
6a:c7:bd:be:72:52:83:64:c6:11:a1:ed:93:9c:62:
5a:ce:2a:b5:56:f4:cc:7d:38:68:98:87:7c:94:81:
0e:cd:ad:c7:24:12:e8:1a:45:db:ca:87:11:60:c6:
a3:71:72:2f:bc:8d:5c:af:16:24:48:c4:b7:a5:2b:
f4:bf:cd:a8:db:c0:2e:cd:66:c0:f6:8f:fb:00:6f:
11:d4:84:8d:cb:76:9b:f5:23:4a:1b:45:79:d1:3f:
c2:b6:80:3e:34:aa:b1:23:aa:30:f9:76:5d:13:61:
9f:fd:5a:6a:b6:58:7f:47:19:66:80:06:b0:5c:ca:
3e:ac:4b:12:f7:2d:b1:ad:92:5c:31:75:90:37:b2:
d0:e9:5e:86:9a:2e:4d:dd:65:6b:4b:13:b2:2e:26:
37:9c:3a:38:86:4d:e6:e5:3a:e3:47:ec:6c:a0:ca:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A6:84:7E:D7:04:4D:2A:36:7F:C0:B9:4F:73:F0:1E:1E:97:7F:08
X509v3 Authority Key Identifier:
keyid:32:DA:CD:C9:30:71:2A:C6:C1:4A:51:E1:1E:E3:34:A3:F6:C8:22:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32DACDC930712AC6C14A51E11EE334A3F6C82286.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085BDDDF5F7A9600FE9C41871A2EB67C1F6DA1BE7DFA6E71EE3A62128E734133/0/3139302e3132312e3234382e302f32312d3234203d3e203630303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.121.248.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:cb:be:6f:80:ee:4e:e5:77:81:9b:34:fd:3a:b3:e7:11:74:
2e:ac:c1:5a:35:10:dd:98:44:85:cc:b0:f1:b5:c2:b9:4c:ee:
f4:94:91:ea:43:88:7f:54:bd:9b:8c:b4:d8:46:2f:f7:25:df:
13:5d:a1:de:9e:7a:aa:7a:5b:b2:38:e8:2a:fc:98:9e:7b:d5:
77:c1:0c:9c:a9:19:9f:39:0d:e6:1f:4a:37:00:60:09:c3:0b:
0a:fb:19:07:cc:11:cb:62:c1:80:63:b8:16:32:b1:da:06:1c:
44:58:3a:a2:79:fe:d9:a8:cb:62:f6:eb:04:7b:a5:d9:25:76:
a4:28:f9:a3:0f:a3:8b:5b:9c:71:bf:5d:ca:a7:01:a7:24:df:
57:4e:40:48:c6:37:38:69:c3:1e:85:27:03:0d:4b:70:09:45:
e7:96:35:de:b4:c7:a1:40:c7:80:6d:a2:94:55:8e:6c:c5:3a:
a5:f3:5f:35:dc:c8:52:cd:94:cb:da:5e:f2:0d:9e:0f:c6:a4:
88:12:89:93:3f:95:bb:f1:65:d1:d6:20:63:51:28:d2:ea:6a:
ea:a4:82:39:08:e1:17:0a:e7:59:60:5f:11:73:fa:30:89:18:
2a:ca:4e:87:d5:69:a1:a2:d7:f2:15:60:17:91:ad:db:39:09:
7b:ac:04:af
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDM/j2VoWNPNgnbDAWetmmTvNd2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJEQUNEQzkzMDcxMkFDNkMxNEE1MUUxMUVFMzM0QTNG
NkM4MjI4NjAeFw0yNDAzMDUxODA4MzNaFw0yNTAzMDQxODEzMzNaMDMxMTAvBgNV
BAMTKEExQTY4NDdFRDcwNDREMkEzNjdGQzBCOTRGNzNGMDFFMUU5NzdGMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Jzpc6F30afs+omsWR+nG2C/5
Bihx+Ii9f1v3QuY3ZIqsKV1SNNajkPrv6qop8VKRONI5418V6/+AxiTuWVFaintY
EhjxebbBdDJ0ia9tAQ6L0xIgWh097GrHvb5yUoNkxhGh7ZOcYlrOKrVW9Mx9OGiY
h3yUgQ7NrcckEugaRdvKhxFgxqNxci+8jVyvFiRIxLelK/S/zajbwC7NZsD2j/sA
bxHUhI3Ldpv1I0obRXnRP8K2gD40qrEjqjD5dl0TYZ/9Wmq2WH9HGWaABrBcyj6s
SxL3LbGtklwxdZA3stDpXoaaLk3dZWtLE7IuJjecOjiGTeblOuNH7GygykdJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUoaaEftcETSo2f8C5T3PwHh6XfwgwHwYDVR0j
BBgwFoAUMtrNyTBxKsbBSlHhHuM0o/bIIoYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODVCRERERjVGN0E5NjAwRkU5QzQxODcxQTJFQjY3QzFG
NkRBMUJFN0RGQTZFNzFFRTNBNjIxMjhFNzM0MTMzLzAvMzJEQUNEQzkzMDcxMkFD
NkMxNEE1MUUxMUVFMzM0QTNGNkM4MjI4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMkRBQ0RDOTMwNzEyQUM2QzE0
QTUxRTExRUUzMzRBM0Y2QzgyMjg2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg1QkREREY1RjdBOTYwMEZFOUM0MTg3MUEyRUI2N0MxRjZEQTFCRTdE
RkE2RTcxRUUzQTYyMTI4RTczNDEzMy8wLzMxMzkzMDJlMzEzMjMxMmUzMjM0Mzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNjMwMzAzMjMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvnn4
MA0GCSqGSIb3DQEBCwUAA4IBAQCsy75vgO5O5XeBmzT9OrPnEXQurMFaNRDdmESF
zLDxtcK5TO70lJHqQ4h/VL2bjLTYRi/3Jd8TXaHennqqeluyOOgq/Jiee9V3wQyc
qRmfOQ3mH0o3AGAJwwsK+xkHzBHLYsGAY7gWMrHaBhxEWDqief7ZqMti9usEe6XZ
JXakKPmjD6OLW5xxv13KpwGnJN9XTkBIxjc4acMehScDDUtwCUXnljXetMehQMeA
baKUVY5sxTql81813MhSzZTL2l7yDZ4PxqSIEomTP5W78WXR1iBjUSjS6mrqpII5
COEXCudZYF8Rc/owiRgqyk6H1WmhotfyFWAXka3bOQl7rASv
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:04:57 2025 by rpki-client