Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36342e302f32322d3232203d3e203237383435.roa
File: 3139302e39372e36342e302f32322d3232203d3e203237383435.roa (raw, json)
Hash identifier: hfEQJgNjQ7CA7pvj+Vhm5Qllxs0jPixIDpUoIk2VzHQ=
Subject key identifier: D1:AE:CA:4E:BC:D7:C7:25:EA:11:95:69:70:86:73:A5:F3:8A:EE:13
Certificate issuer: /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial: 2C1E1731AC6FA93A005EDEAB1B6A51CA706365FD
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36342e302f32322d3232203d3e203237383435.roa
Signing time: Tue 05 Mar 2024 17:46:34 +0000
ROA not before: Tue 05 Mar 2024 17:41:34 +0000
ROA not after: Tue 04 Mar 2025 17:46:34 +0000
asID: 27845
IP address blocks: 190.97.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:1e:17:31:ac:6f:a9:3a:00:5e:de:ab:1b:6a:51:ca:70:63:65:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Validity
Not Before: Mar 5 17:41:34 2024 GMT
Not After : Mar 4 17:46:34 2025 GMT
Subject: CN=D1AECA4EBCD7C725EA119569708673A5F38AEE13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:0d:dc:1f:25:31:c6:33:f8:87:eb:35:a5:
c5:dc:04:70:22:74:4a:b3:28:c6:2f:cc:4b:df:62:
77:5a:4e:97:17:c5:f3:a5:d7:9e:ed:e0:ed:cb:58:
1f:ac:af:f5:4f:85:b0:07:70:11:84:fb:65:08:3a:
29:5c:5b:f3:f5:04:36:47:48:9a:e0:b3:17:e7:d6:
05:66:49:c8:ed:3a:1e:4b:01:5d:11:6e:f6:d6:02:
70:e3:a2:70:aa:1a:f1:11:d7:74:d1:8d:08:76:02:
84:bf:ec:87:b9:01:68:13:0e:21:e2:65:b9:f9:af:
f2:66:a2:56:8c:4a:e3:ea:34:8e:d7:4c:44:13:44:
6f:e6:5f:c6:d6:98:e1:a2:3d:1b:4c:3f:01:43:7e:
85:91:fb:85:a9:1e:03:fa:98:c8:f1:cc:af:20:9c:
3c:9d:c3:ad:b5:2d:36:06:5a:92:a5:01:f9:56:2b:
a1:92:c4:47:fe:35:16:6f:a6:c1:bd:ea:26:4d:e6:
d2:db:78:d3:0e:15:2a:da:27:f3:b9:6d:d9:cb:1f:
fd:70:ba:93:e6:a0:35:02:80:48:46:20:94:e8:bf:
ab:20:38:92:a7:6b:21:64:79:8c:73:a6:db:14:2a:
f5:cf:25:5c:2c:36:99:ea:91:ba:63:b9:77:43:62:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AE:CA:4E:BC:D7:C7:25:EA:11:95:69:70:86:73:A5:F3:8A:EE:13
X509v3 Authority Key Identifier:
keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36342e302f32322d3232203d3e203237383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.97.64.0/22
Signature Algorithm: sha256WithRSAEncryption
70:f8:88:c7:ff:9e:72:79:4e:74:92:4d:72:88:c8:dd:46:27:
8a:22:76:7f:fc:28:66:8c:37:87:5c:a7:e0:c3:0d:2e:52:9f:
c5:3b:8d:dd:09:e0:53:dc:34:b0:a6:90:cb:56:7c:d5:31:11:
f1:34:15:d7:3f:3f:3a:ba:7c:7d:d4:cf:68:3a:8a:11:52:f0:
40:33:0f:ca:6a:be:c6:ab:2a:2f:1c:30:d7:a4:a4:fa:ae:77:
34:2f:77:40:13:3e:25:60:bd:46:71:ed:ed:1e:50:50:78:1b:
46:db:1c:47:6b:01:1b:97:ae:79:06:96:d9:66:4f:58:9c:b1:
dd:23:b0:74:37:97:31:e8:69:98:fc:08:1f:09:d0:fb:a3:e2:
7c:11:f1:fe:55:21:0f:af:dc:5f:74:91:56:a2:08:0c:1c:25:
0c:ff:b5:01:9c:1d:6d:ff:32:b0:7e:36:24:c4:f4:fc:02:a6:
f2:12:cc:90:93:ce:aa:7c:bf:76:71:a0:df:a2:20:7c:a2:08:
e9:00:7f:34:04:2a:f5:86:e2:6a:30:8a:70:6b:51:2e:82:a3:
3a:69:15:8f:3b:b2:90:23:d1:88:e2:68:71:6e:b1:85:aa:8b:
73:b9:d0:63:1e:8f:bd:01:7a:88:bb:13:c8:80:95:f2:e7:53:
29:56:d6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:42:29 2025 by rpki-client