Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34382e302f32302d3234203d3e203237373733.roa
File: 3139302e39392e34382e302f32302d3234203d3e203237373733.roa (raw, json)
Hash identifier: fzZ+Y6Zu4kNeoy2tgE2autzmudWOv8M1mJlYqJQkXdE=
Subject key identifier: 3F:4B:97:8B:9E:D3:CE:1D:CE:6D:F7:77:48:95:67:E3:07:13:06:49
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 040DFB814694883D243F18E3E2BBEBCC68C1748C
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34382e302f32302d3234203d3e203237373733.roa
Signing time: Tue 05 Mar 2024 18:10:32 +0000
ROA not before: Tue 05 Mar 2024 18:05:32 +0000
ROA not after: Tue 04 Mar 2025 18:10:32 +0000
asID: 27773
IP address blocks: 190.99.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0d:fb:81:46:94:88:3d:24:3f:18:e3:e2:bb:eb:cc:68:c1:74:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Mar 5 18:05:32 2024 GMT
Not After : Mar 4 18:10:32 2025 GMT
Subject: CN=3F4B978B9ED3CE1DCE6DF777489567E307130649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1f:1c:31:f7:dc:a5:11:5b:50:49:c5:2f:ec:
9e:63:01:24:09:a6:da:a2:73:9f:5f:14:09:35:b9:
73:85:b9:5d:cd:8b:af:00:f5:32:93:c4:79:8d:50:
09:f6:f7:ba:9d:a0:58:3b:1e:74:db:9b:70:e5:8b:
dd:32:b5:58:4c:47:c2:20:b6:b7:c0:40:0a:23:4a:
7e:67:c6:54:de:17:61:36:f2:0d:90:ec:ae:60:09:
a5:19:55:d9:9c:56:ad:ba:84:8a:6c:05:19:a0:3f:
5e:1c:51:2e:86:78:b7:59:d8:47:fc:b1:41:93:25:
e7:dd:db:4e:e5:e4:a9:77:0b:54:c6:2a:d0:ee:1e:
24:ae:c0:b7:13:7f:ee:39:26:88:a9:39:42:f1:a5:
d0:79:d9:9b:94:e0:31:b3:95:4b:1c:5d:a6:19:78:
8f:15:5c:84:73:9b:1f:0b:ac:ab:c1:68:c8:34:c8:
1b:10:e6:7c:c5:a9:3f:a0:da:7f:26:eb:a5:7f:00:
be:eb:bc:61:f1:45:1f:5b:b8:01:be:b6:d4:de:48:
e2:db:8a:b3:b7:ad:1e:65:7f:4d:ab:d7:43:3a:59:
d8:42:05:af:c2:d8:2c:1d:79:a4:e6:7a:b2:5c:38:
bd:19:d6:c8:df:42:41:08:eb:9b:b5:0e:06:93:40:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:97:8B:9E:D3:CE:1D:CE:6D:F7:77:48:95:67:E3:07:13:06:49
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34382e302f32302d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.48.0/20
Signature Algorithm: sha256WithRSAEncryption
21:12:3e:44:ed:dd:1e:d2:e7:b2:74:2f:f5:4e:7f:f6:dc:70:
85:0a:3d:3e:53:2b:df:54:75:bc:9c:c2:66:10:38:e8:f2:6d:
a9:e1:8d:57:48:1c:1b:67:ad:9b:ea:b5:37:ff:d2:39:3a:da:
05:76:4b:50:a0:c0:42:28:ec:3b:37:66:1c:0f:43:ca:36:12:
db:bf:68:5d:45:34:57:c5:93:4f:51:f6:c3:73:3d:88:3b:7b:
fd:47:c8:7a:29:fa:17:41:0c:ef:51:26:16:f6:76:93:2d:37:
2d:07:1b:00:92:67:c5:1a:bd:a5:c4:c3:fb:dd:d7:92:ac:12:
76:3d:aa:24:20:29:11:08:94:79:ba:f4:94:bb:ce:a6:7d:1e:
c8:93:50:d5:96:ef:90:f5:5e:da:a3:d7:9b:76:1b:21:b8:64:
3f:ae:53:c0:d1:6a:41:a3:32:1e:9d:c3:ad:7a:22:fc:12:cf:
8d:44:9d:36:9a:21:6f:dd:f8:20:3d:c3:4a:5f:4e:85:8a:7d:
cf:c8:9f:b0:fd:6f:c6:4f:ce:77:f6:dc:f9:0b:88:9c:62:80:
46:da:6a:76:99:07:1c:4b:b3:51:8b:fa:81:80:4d:b5:83:bc:
f7:d4:97:e3:da:98:cd:1c:65:0b:89:29:3e:1a:4b:73:d4:d5:
8b:c2:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:37:36 2025 by rpki-client