Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa
File: 3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa (raw, json)
Hash identifier: Ubou5P1dCZGxcNACD7FdLW6SbKjbCerfw9iMeTs29co=
Subject key identifier: 3B:FA:C8:7C:A9:9C:5B:32:9C:84:1F:9D:7C:C2:3B:B0:D1:30:6D:D0
Certificate issuer: /CN=7944892887A229F94947FB31A3A32FD54294016E
Certificate serial: 19AA882309767BFEBD785093F48AAEF5B73FF8F8
Authority key identifier: 79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa
Signing time: Tue 05 Mar 2024 18:08:00 +0000
ROA not before: Tue 05 Mar 2024 18:03:00 +0000
ROA not after: Tue 04 Mar 2025 18:08:00 +0000
asID: 272150
IP address blocks: 192.141.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:aa:88:23:09:76:7b:fe:bd:78:50:93:f4:8a:ae:f5:b7:3f:f8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7944892887A229F94947FB31A3A32FD54294016E
Validity
Not Before: Mar 5 18:03:00 2024 GMT
Not After : Mar 4 18:08:00 2025 GMT
Subject: CN=3BFAC87CA99C5B329C841F9D7CC23BB0D1306DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:3a:73:a1:67:77:1c:54:f0:52:03:c6:90:
57:97:cf:5e:ba:08:48:d4:ed:a4:57:e1:de:0a:7a:
d8:00:71:bb:ae:bb:7e:d8:d0:53:7a:5d:e1:c9:3f:
12:cb:8c:63:bf:df:ae:2e:13:f7:d1:87:e9:78:50:
75:b9:41:93:64:e1:46:c3:69:32:fb:8e:e5:df:f8:
60:73:67:ae:39:c8:49:e6:88:d4:71:bf:9f:da:9a:
e6:23:31:c9:82:ac:17:a7:41:47:56:9f:ed:e0:27:
e5:64:a9:00:81:41:2f:fd:d5:7d:10:fe:81:a9:f8:
e0:79:33:03:d9:5e:ab:42:6c:d6:6f:91:1a:2e:fd:
8b:b8:26:73:e8:dc:57:db:2c:e4:3a:e4:41:37:10:
ba:1a:c6:91:c7:14:ff:7f:f1:98:b8:0d:00:cf:7c:
2c:90:ad:bb:f3:ed:bb:f7:5d:1e:34:fa:db:8a:e8:
a7:0b:15:35:73:8e:04:c7:cd:84:dc:ed:37:b3:e8:
bf:dd:8d:c9:c1:ad:fe:68:8b:d9:da:ad:ab:a2:41:
cc:6d:d7:b7:f2:05:71:31:44:e7:79:cb:0c:e3:57:
b5:5e:28:99:42:a2:af:ae:6c:6e:3e:65:0b:18:12:
dc:d2:1c:af:00:49:b9:70:1f:44:c9:33:42:3a:bf:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FA:C8:7C:A9:9C:5B:32:9C:84:1F:9D:7C:C2:3B:B0:D1:30:6D:D0
X509v3 Authority Key Identifier:
keyid:79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.21.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:29:56:7b:ef:50:42:53:80:ba:0b:fd:ec:25:01:49:f5:65:
60:a2:f1:99:e8:34:fb:db:a8:df:dd:4c:00:69:93:0d:6a:45:
91:5e:08:4f:f0:4d:12:97:ab:ea:c6:7b:b5:ec:36:39:e0:54:
57:5f:c6:1a:ee:8a:62:05:ed:76:41:4c:81:43:95:f7:6d:98:
28:ac:62:09:90:91:02:db:16:6f:e7:cb:bc:01:35:35:d6:cd:
12:41:5d:a1:0a:26:29:82:63:31:60:d3:4b:a2:ab:d6:ee:2f:
09:79:a0:b6:2f:ad:bd:4c:7c:e1:2d:14:b3:e9:d2:17:6f:9e:
5b:68:91:1a:2d:82:62:73:a3:fe:af:59:46:66:14:34:89:d8:
0e:53:40:c8:af:19:cf:02:f0:dd:a7:2d:79:ee:e7:8c:31:8b:
ce:a8:74:b6:21:70:09:56:d9:ad:05:85:09:d8:69:df:e7:56:
a4:33:e4:8f:69:aa:58:dc:ec:d4:9b:74:ee:ce:a3:09:82:e9:
38:e0:ac:ad:00:a6:a7:a6:cb:55:56:fb:f5:ee:9c:8c:84:90:
be:dc:af:56:31:34:b6:1a:7e:01:86:79:24:57:a8:fe:f2:30:
69:46:ec:9c:de:cc:fb:c4:7e:c8:b0:ec:1a:da:b2:c4:b6:c4:
a7:28:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:06:37 2025 by rpki-client