Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa
File: 3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa (raw, json)
Hash identifier: 6ywDjLeZkQwLoD81XA1VmTLgWnt4OZiUxU0Fd2IKD8I=
Subject key identifier: BD:0F:93:8F:43:33:37:3C:28:96:53:3B:BE:BD:5A:47:FB:86:9B:1B
Certificate issuer: /CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Certificate serial: 1DDC278D61F2BFDB18A7247BF362F4E16EA55956
Authority key identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa
Signing time: Tue 05 Mar 2024 18:15:39 +0000
ROA not before: Tue 05 Mar 2024 18:10:39 +0000
ROA not after: Tue 04 Mar 2025 18:15:39 +0000
asID: 262932
IP address blocks: 191.103.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:dc:27:8d:61:f2:bf:db:18:a7:24:7b:f3:62:f4:e1:6e:a5:59:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Validity
Not Before: Mar 5 18:10:39 2024 GMT
Not After : Mar 4 18:15:39 2025 GMT
Subject: CN=BD0F938F4333373C2896533BBEBD5A47FB869B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d0:58:db:57:7c:45:ca:dd:9b:5b:c5:8c:4d:
39:d5:da:a6:9d:12:cf:ed:15:19:08:8a:4e:af:e8:
b2:b8:09:5d:5c:8a:6f:f3:fc:e3:55:e3:f0:76:dd:
d1:1d:14:0b:5c:93:98:de:97:2c:b9:21:62:ca:ac:
8c:a1:4a:ed:5a:da:71:99:44:e3:62:9e:63:62:4e:
3b:c9:1a:7c:cc:ec:b5:b7:33:6d:ff:40:78:a6:dd:
38:35:65:fa:1d:b0:db:c8:f9:09:44:52:e3:88:77:
b6:86:d1:cb:7e:e8:ef:e6:85:8b:c7:2f:68:90:3d:
a4:49:ed:3c:27:00:8c:03:8b:9f:a1:ea:2f:60:ee:
ea:01:e4:ec:fb:f6:6e:0d:50:e5:07:25:5d:42:7a:
65:72:a4:91:1a:a3:a5:64:67:cf:99:7b:51:27:ff:
c1:ab:58:b0:af:f0:08:53:7b:11:1d:3d:78:38:eb:
78:4d:37:d6:8e:75:58:fe:23:1f:6f:e2:58:67:df:
fc:a6:97:70:58:3e:2c:1c:f4:79:cb:d3:0e:84:36:
a1:2c:9d:07:95:b7:1e:a6:1e:7a:8e:39:92:e7:bc:
82:f2:5d:e6:e4:f6:a0:8f:3f:6d:38:00:19:94:12:
3b:ef:37:3f:ff:d7:5a:53:ce:1c:60:85:19:14:8e:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:93:8F:43:33:37:3C:28:96:53:3B:BE:BD:5A:47:FB:86:9B:1B
X509v3 Authority Key Identifier:
keyid:59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.103.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:8e:93:98:39:a9:c0:eb:ca:40:15:2a:ac:09:8d:ce:58:45:
fc:24:3a:19:cb:69:33:ed:85:f7:26:36:05:31:12:dd:18:31:
b3:16:ef:ff:ad:63:15:d8:9e:fe:44:1d:67:2b:8f:79:3b:cc:
e6:a0:de:82:ae:a8:c9:6d:d8:d2:b0:8c:d3:41:f9:b4:d6:10:
a9:14:26:bc:24:0d:46:56:22:d7:e0:f2:07:79:96:bd:a9:c2:
41:4e:d2:d3:ce:ba:32:88:5f:b0:d7:1f:50:2e:87:07:02:52:
e0:ab:ab:2f:de:9e:e5:70:23:b1:a2:0e:73:ce:ad:b1:46:9f:
3d:da:8f:74:94:c2:27:bb:e8:ce:82:87:54:78:6e:22:a5:bc:
31:53:1e:6a:bd:fd:fe:a2:24:c5:70:ec:63:d6:f7:14:9a:ba:
c8:c0:21:c3:dc:00:3e:ee:36:1a:3c:99:90:f3:8b:de:af:0f:
6d:6f:3a:5d:ef:55:d4:58:50:49:c5:d5:48:bf:1a:c3:6b:b1:
76:b1:94:81:1b:47:1b:af:5c:93:2a:11:01:30:a4:7f:b6:6d:
0a:2d:1b:93:98:f0:b4:48:04:24:66:ec:6e:0c:0c:c2:38:14:
a0:db:b3:28:0f:f1:e1:73:59:2f:0e:d9:7f:1f:b2:eb:b5:2c:
6e:0f:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:02:00 2025 by rpki-client