Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37302e302f32332d3234203d3e203237383435.roa
File: 3139302e39372e37302e302f32332d3234203d3e203237383435.roa (raw, json)
Hash identifier: 78ruBkduDx4VxHGBu39N228icnC3LGXSXMtx5I5I/E8=
Subject key identifier: 8C:68:8F:F1:41:BB:A5:30:CD:BB:25:93:B5:AE:83:BF:BD:2D:49:93
Certificate issuer: /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial: 2685366F5C9261770736DD405D72FA4E79EA7941
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37302e302f32332d3234203d3e203237383435.roa
Signing time: Tue 05 Mar 2024 17:46:32 +0000
ROA not before: Tue 05 Mar 2024 17:41:32 +0000
ROA not after: Tue 04 Mar 2025 17:46:32 +0000
asID: 27845
IP address blocks: 190.97.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:85:36:6f:5c:92:61:77:07:36:dd:40:5d:72:fa:4e:79:ea:79:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Validity
Not Before: Mar 5 17:41:32 2024 GMT
Not After : Mar 4 17:46:32 2025 GMT
Subject: CN=8C688FF141BBA530CDBB2593B5AE83BFBD2D4993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:4f:0c:fa:ae:d7:00:b7:a2:9b:0d:a7:f6:
d4:f3:74:6a:8b:50:94:a7:1f:ab:1a:8a:e7:10:2a:
7c:83:9d:df:a8:09:c6:ed:68:b2:f3:4a:8e:95:cd:
43:f4:05:2d:5b:34:af:d3:28:ad:be:d0:42:d0:10:
65:6c:ac:86:c1:3d:44:70:40:3d:66:4f:12:29:14:
29:b1:8f:52:be:24:22:f6:73:4a:49:80:48:a2:2a:
1c:1c:32:5b:b8:e1:d2:b8:13:11:38:e8:3b:26:16:
99:2a:74:38:02:ab:4e:a3:e5:1f:d9:35:12:ba:93:
c7:1e:cb:15:14:b0:a1:02:27:07:d4:18:b7:c8:cd:
a3:63:86:a7:ca:07:c1:bd:ef:31:83:14:67:be:5c:
5f:72:ed:85:69:c6:df:58:17:47:c1:ef:a2:85:89:
3d:49:da:dc:42:1c:0d:42:cb:9c:8d:c5:8b:b8:d3:
77:d5:d0:9d:04:a5:aa:46:55:8a:e4:1f:6a:0e:b8:
fe:b0:f5:76:91:fe:bc:73:bd:0e:ca:1f:9b:38:32:
43:f5:8a:93:f6:0c:b3:e6:14:b9:a4:91:0b:b3:ab:
b0:62:24:d0:2d:83:ea:23:5c:9d:f7:06:e4:4d:1b:
85:26:70:dc:3d:02:d1:cc:c4:24:6f:7c:2c:9b:ae:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:68:8F:F1:41:BB:A5:30:CD:BB:25:93:B5:AE:83:BF:BD:2D:49:93
X509v3 Authority Key Identifier:
keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37302e302f32332d3234203d3e203237383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.97.70.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:e3:1b:5f:bb:16:44:68:0c:0c:61:4c:0b:f5:3e:31:95:a0:
d3:e5:04:6f:64:fc:59:7d:7e:98:98:cd:57:02:3d:9e:47:ef:
4f:e9:4a:5d:e7:2b:9a:ef:4e:dd:b4:46:b6:e1:37:91:7b:fb:
81:38:9d:43:88:ad:62:05:22:d1:84:72:ee:0d:16:5a:4f:72:
ce:77:9e:20:f9:a7:6c:c9:92:21:82:b7:2c:9f:19:7f:4f:e5:
b4:93:48:14:8a:03:b9:d4:c6:15:96:fd:02:80:3c:8e:4e:36:
65:89:14:9f:96:2d:28:9d:ff:54:77:2b:af:03:b3:61:ad:58:
0b:b7:df:85:07:14:0a:77:8a:f3:b3:44:00:24:26:9e:02:cc:
65:96:ad:af:e7:89:92:17:75:1a:7a:74:08:e5:1d:f8:4e:14:
da:21:d9:1a:72:37:60:61:11:a3:d3:ed:31:4d:57:b5:23:b0:
00:ef:09:39:80:d0:f7:52:97:6c:b8:67:eb:bd:cc:69:46:e4:
8b:1d:e9:09:79:0b:99:64:80:15:f5:f6:f3:96:52:e3:d8:cc:
09:3d:aa:7a:d9:92:80:58:cb:29:74:cf:96:fe:ca:32:a0:7d:
6b:c9:6d:b8:fc:70:44:21:3f:d8:cd:ea:89:e1:1b:7b:d0:ad:
ba:56:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:20:35 2025 by rpki-client