Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa
File: 3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa (raw, json)
Hash identifier: zeu0l/Qd4SBxr3TeRLDS2o0G2sggTcNmgAUAj91unbM=
Subject key identifier: 14:6E:E6:CD:E7:FD:CA:83:6A:14:9F:7E:87:E2:49:CC:D1:0D:16:8E
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 2B092EAD79736C644EF98101215BDEB5AF030888
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa
Signing time: Tue 05 Mar 2024 18:00:44 +0000
ROA not before: Tue 05 Mar 2024 17:55:44 +0000
ROA not after: Tue 04 Mar 2025 18:00:44 +0000
asID: 262589
IP address blocks: 190.90.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:09:2e:ad:79:73:6c:64:4e:f9:81:01:21:5b:de:b5:af:03:08:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Mar 5 17:55:44 2024 GMT
Not After : Mar 4 18:00:44 2025 GMT
Subject: CN=146EE6CDE7FDCA836A149F7E87E249CCD10D168E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:2a:cf:0d:60:18:1c:28:5c:7f:8b:6d:81:
51:5c:cd:9f:fb:a4:40:0c:ce:c2:31:38:76:18:d8:
52:f5:68:f0:73:30:7a:9d:df:24:2a:05:10:65:9f:
c9:98:c8:0f:74:9a:c3:22:8b:be:d9:ad:4f:7f:cd:
6e:d2:94:55:7e:93:c8:0e:e2:1f:a4:f4:f2:d4:8b:
a3:a1:d2:71:f3:5c:c9:18:be:69:15:18:24:ec:c2:
d8:3a:4b:d7:3f:7d:58:aa:8f:b1:a0:97:82:95:11:
f2:3e:e9:a6:61:f1:39:f3:70:59:ba:08:03:71:cd:
5e:4c:f4:51:03:f5:39:15:13:68:04:21:ef:f5:a1:
b4:22:e7:eb:6a:e7:4a:7d:32:c0:87:86:c1:4e:7d:
f6:60:d4:19:cc:9c:eb:ad:d5:22:39:2a:a8:8e:1b:
84:79:de:60:2c:48:dc:c0:c3:ef:af:53:53:c8:75:
57:a9:5a:7a:84:ea:86:fd:c3:6c:69:03:ab:3c:a5:
0a:f0:9c:f7:78:d2:b6:f6:55:16:88:24:ea:a5:fc:
41:48:3e:a6:57:1c:e6:93:6c:27:e4:31:63:e6:a8:
ee:bf:e2:1d:fe:c6:ad:8f:d7:86:88:f4:b4:f4:40:
dc:50:45:fb:f2:0e:2f:38:c8:e6:3f:21:c5:5f:d9:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:E6:CD:E7:FD:CA:83:6A:14:9F:7E:87:E2:49:CC:D1:0D:16:8E
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.144.0/21
Signature Algorithm: sha256WithRSAEncryption
29:a5:10:37:2e:0c:2b:3d:34:7a:91:bd:0e:4c:90:9d:4a:01:
ca:21:8c:b1:c2:bf:86:a5:94:c6:f8:63:05:81:53:cd:17:87:
8c:fc:63:77:af:ec:44:f8:2a:b2:8d:13:0c:0e:5d:98:10:5d:
52:f9:9e:9a:3a:0f:12:6a:76:36:da:2e:80:3d:ad:b9:1d:1d:
ac:12:cf:48:c8:ac:57:be:e7:58:78:05:a4:64:a5:7b:d2:d8:
fb:6e:34:6d:5c:b8:f4:c1:ec:93:b4:96:b2:72:b5:79:d8:62:
63:ea:39:27:a5:b0:fa:16:01:19:50:9e:56:a0:54:e7:83:1a:
d8:83:47:c1:23:b4:78:76:cd:1e:66:1a:04:d8:c7:75:18:7d:
a7:cf:c7:74:bd:9e:25:20:95:35:9b:90:b2:f1:59:ee:2a:17:
88:15:0c:c5:a8:17:3b:60:87:78:1b:5d:01:3b:27:aa:33:0a:
37:85:7c:e4:4b:83:82:e8:e9:b0:ae:1a:6b:62:c2:b9:ae:96:
35:21:48:d9:89:f8:ec:2c:30:49:64:aa:75:f1:79:e7:fd:ed:
a7:84:db:a9:8b:e5:46:5a:21:c2:a3:ab:a5:33:51:74:8d:e8:
54:eb:63:fd:2c:1c:fc:10:8c:67:58:d4:a5:a2:e0:2d:5d:93:
c4:e4:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:33:09 2025 by rpki-client