Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa
File: 3139302e39302e38372e302f32342d3234203d3e203237383337.roa (raw, json)
Hash identifier: cevDrccJcvP1v6cp8AHG3WtVC15xt55n8T0e2HXd2nQ=
Subject key identifier: ED:F6:1D:E8:C4:1E:2D:1A:F8:24:C7:45:DB:8D:A4:9B:B8:F3:AD:7A
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 3525BFDB9947FFBA3174CDA4F3739F76715F1626
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa
Signing time: Tue 05 Mar 2024 18:00:49 +0000
ROA not before: Tue 05 Mar 2024 17:55:49 +0000
ROA not after: Tue 04 Mar 2025 18:00:49 +0000
asID: 27837
IP address blocks: 190.90.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:25:bf:db:99:47:ff:ba:31:74:cd:a4:f3:73:9f:76:71:5f:16:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Mar 5 17:55:49 2024 GMT
Not After : Mar 4 18:00:49 2025 GMT
Subject: CN=EDF61DE8C41E2D1AF824C745DB8DA49BB8F3AD7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:1d:5d:f9:bd:3b:a8:a8:1e:35:8f:d3:34:
6b:04:ce:0b:8d:70:94:19:88:df:cb:9d:6c:60:6f:
01:32:54:40:c5:84:b8:65:c1:75:24:ec:07:68:14:
cb:1b:34:4b:91:dc:ad:76:39:f5:f2:57:be:51:e5:
f5:39:39:fc:e7:3b:1c:ca:6e:6d:6f:bc:5e:96:d8:
64:c5:2b:05:db:7a:64:bb:b5:90:79:9e:a6:80:c4:
a3:cb:90:69:49:7f:88:ad:69:29:b4:b1:55:b7:9f:
40:e6:38:a4:8b:35:2d:e9:b6:21:0f:63:0f:a5:0c:
34:ac:13:e7:8b:04:e0:4c:17:05:71:e8:3f:c6:ad:
61:1e:b5:c7:e6:51:a8:25:d0:0c:38:90:77:55:07:
91:2e:4c:87:e6:86:0f:fe:c7:26:3f:15:4d:02:ee:
80:fd:da:25:cb:bd:47:78:82:6b:f5:13:63:22:fe:
21:50:db:9c:e2:cc:e5:86:db:35:39:1d:f5:0b:0a:
9c:83:a7:a8:0c:16:70:f6:70:ad:89:85:f8:ae:03:
d9:fe:5c:9d:d2:08:73:18:d4:ce:3b:29:3f:89:60:
9d:b0:6e:90:0f:88:59:5f:a4:4d:33:8e:84:9a:5d:
9f:bc:93:c3:4d:07:d7:94:63:69:b9:a8:e0:0e:45:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F6:1D:E8:C4:1E:2D:1A:F8:24:C7:45:DB:8D:A4:9B:B8:F3:AD:7A
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.87.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c2:dd:01:9a:41:e7:ff:33:a4:9e:2f:ef:13:b3:82:62:dd:
51:c8:ad:37:3e:07:66:29:d9:b8:0d:56:06:13:92:99:ed:67:
d2:73:4b:71:ee:d9:bf:3c:3a:5a:f7:e7:12:2d:6c:2f:b6:b9:
6a:b7:cf:c2:df:c9:a0:f3:96:32:ba:02:91:25:d1:1a:ad:7c:
ee:c2:cf:35:0b:f8:95:b0:4a:4f:d0:cf:3b:6e:d5:b1:c0:ba:
49:6a:07:e7:1c:bb:7a:b3:05:d9:6e:d1:df:e9:6a:fb:68:42:
34:b9:01:3a:85:fa:e8:0a:73:76:18:95:e8:b2:65:70:78:37:
b8:11:84:57:90:2c:90:ea:1e:51:b9:6c:ef:61:f9:b7:36:9a:
5d:ec:62:65:99:5b:3b:77:4b:68:89:b6:57:e2:02:f8:5b:4f:
e3:4a:d8:e7:6a:98:ad:5a:3f:1b:95:29:d2:36:b6:7b:bc:1a:
02:7d:7b:ac:2f:31:a6:53:0a:5b:c4:7b:71:54:fa:70:2c:0e:
fa:a7:b7:51:a7:c6:dc:3d:6d:d2:df:d6:68:40:85:c4:b0:a8:
ba:81:93:36:bf:26:4a:54:00:dd:6d:51:99:bc:b0:bb:a5:3a:
14:e4:e8:dc:6e:33:3d:b4:bd:05:ac:df:25:5e:d7:f1:32:ba:
34:52:a8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:31:05 2025 by rpki-client