Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36382e302f32332d3233203d3e203237383435.roa
File: 3139302e39372e36382e302f32332d3233203d3e203237383435.roa (raw, json)
Hash identifier: i6nDr9ATB4r83cgTAj14sHrTi8gFI0wpRqBvT+6dL0U=
Subject key identifier: 1F:C3:63:BA:2F:D9:F0:3F:93:06:2C:1C:FF:AA:C1:28:BB:FD:80:DC
Certificate issuer: /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial: 3239DEA8749753B07E492EEA9B53BF0ED558F44A
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36382e302f32332d3233203d3e203237383435.roa
Signing time: Tue 05 Mar 2024 17:46:31 +0000
ROA not before: Tue 05 Mar 2024 17:41:31 +0000
ROA not after: Tue 04 Mar 2025 17:46:31 +0000
asID: 27845
IP address blocks: 190.97.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:39:de:a8:74:97:53:b0:7e:49:2e:ea:9b:53:bf:0e:d5:58:f4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Validity
Not Before: Mar 5 17:41:31 2024 GMT
Not After : Mar 4 17:46:31 2025 GMT
Subject: CN=1FC363BA2FD9F03F93062C1CFFAAC128BBFD80DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:e7:1c:3f:93:2f:ba:8a:2c:c7:dd:2c:88:
22:28:14:33:0d:a7:75:1c:fb:c4:56:59:65:15:b8:
13:25:2e:73:2b:a9:71:cc:ba:f2:f7:6f:91:57:e1:
4d:5c:9d:61:6f:8a:47:1c:a3:97:39:b5:c5:df:35:
1e:b0:ca:4f:64:23:0c:f2:8c:f4:9d:0a:b3:21:6f:
d7:4b:76:a2:c6:bb:69:16:86:1f:e3:d0:6d:11:0f:
d1:58:ac:47:78:0b:a0:78:fa:d7:58:ea:97:d8:2b:
f7:f3:7b:5e:e1:0a:49:c7:9b:32:d0:f3:1a:03:42:
37:9e:54:80:7e:08:3b:b8:fd:8a:bd:c0:a5:31:60:
61:e0:22:cb:a7:e7:47:64:a3:5a:c4:29:71:52:ad:
67:b0:ff:2a:a5:90:2b:c7:82:98:4a:11:c5:5a:ac:
12:40:3a:fd:3b:03:1f:75:3a:bb:ef:4b:be:25:0b:
eb:56:b7:b0:e5:48:92:38:ae:ec:18:1c:b9:38:8c:
16:e5:d5:17:72:99:bb:1d:e8:46:89:b6:30:02:a8:
5d:19:ef:36:b3:ea:60:e7:28:e1:06:4c:bd:f2:69:
eb:64:cc:94:c3:a2:61:41:e0:92:bd:59:35:34:10:
2c:65:99:f5:50:03:88:17:23:1d:8e:7a:4d:20:31:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:63:BA:2F:D9:F0:3F:93:06:2C:1C:FF:AA:C1:28:BB:FD:80:DC
X509v3 Authority Key Identifier:
keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36382e302f32332d3233203d3e203237383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.97.68.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:bc:8b:33:3c:2b:36:d2:9b:8b:18:95:1e:09:eb:c1:02:a3:
c9:f1:ec:68:05:a5:9b:b9:a9:cc:60:0d:88:44:71:d3:3a:8a:
2f:dd:9c:35:0c:da:ef:70:1e:a3:c2:06:90:7c:96:32:28:a9:
a5:ec:dc:bb:37:bb:61:68:b9:72:dc:16:46:a4:fa:5c:5a:db:
31:e7:e6:d5:df:05:e9:a4:6f:7e:07:aa:a6:db:5b:bd:6d:c4:
81:49:64:f9:6d:a5:ce:34:11:78:54:e2:9d:2d:90:51:a1:5a:
57:45:1f:5e:c2:e9:3b:a6:cd:7f:31:24:5c:66:82:4e:24:2c:
f5:57:2a:a6:51:2c:fb:0e:6c:37:88:42:38:b0:7a:3a:ac:13:
4f:46:a8:f4:1b:77:e6:2e:f1:0f:51:06:98:c9:b1:6a:ed:c0:
75:d2:f4:c3:85:de:33:f8:00:56:8a:7a:7a:00:81:12:b0:4b:
94:ed:47:64:01:22:b2:34:a8:47:62:17:e9:b1:ea:19:aa:77:
59:c7:ea:bf:a8:52:5a:da:74:d0:bf:ea:20:e8:40:bb:1a:59:
6a:81:26:13:d1:ae:82:39:46:2b:e0:16:60:90:c7:64:ba:89:
ae:c9:7f:4b:49:b5:86:d2:da:cd:4a:dd:86:2e:8e:2d:99:c6:
c8:b3:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:22:09 2025 by rpki-client