Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38362e302f32342d3234203d3e203237383435.roa
File: 3139302e39372e38362e302f32342d3234203d3e203237383435.roa (raw, json)
Hash identifier: qXLy/2svsqdL3W2EcGPw9n92bZt9N9lQV5ce0vRFBn4=
Subject key identifier: E0:DB:32:CF:DC:60:88:77:2E:39:C7:FB:1C:1E:D1:1A:70:D1:FB:6B
Certificate issuer: /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial: 674B95EA9C1AB02E0149B99554184D49D6C08BD5
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38362e302f32342d3234203d3e203237383435.roa
Signing time: Fri 06 Dec 2024 01:10:00 +0000
ROA not before: Fri 06 Dec 2024 01:05:00 +0000
ROA not after: Fri 05 Dec 2025 01:10:00 +0000
asID: 27845
IP address blocks: 190.97.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4b:95:ea:9c:1a:b0:2e:01:49:b9:95:54:18:4d:49:d6:c0:8b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Validity
Not Before: Dec 6 01:05:00 2024 GMT
Not After : Dec 5 01:10:00 2025 GMT
Subject: CN=E0DB32CFDC6088772E39C7FB1C1ED11A70D1FB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:ba:bc:b2:c6:a1:31:42:1e:0a:bc:04:b0:
79:f6:3e:f2:0c:a6:08:55:6f:c3:e3:97:d5:5b:58:
fb:fd:4a:fe:89:2e:34:9c:15:e1:43:d1:de:1c:34:
83:8a:78:ad:95:cd:31:e3:65:31:dd:5b:6a:1a:f9:
c3:58:67:1d:bf:eb:c2:90:4b:2b:00:76:70:d8:0f:
a2:30:89:21:51:54:a5:5e:77:f0:02:ff:1d:6e:e3:
1e:fb:10:ff:02:48:21:f7:db:68:95:2b:38:53:72:
09:db:4e:c8:ca:6a:39:d6:56:57:e2:7c:e9:e7:19:
69:15:31:fa:2f:8b:37:5a:8d:73:76:6e:2c:d5:56:
83:91:07:c2:44:7c:ee:48:2e:d3:23:c6:a8:21:fd:
7b:fb:49:27:e7:be:3e:b5:d5:64:25:e4:75:c9:22:
79:53:a8:0f:b2:a5:da:5c:73:2a:1a:68:91:46:ee:
28:2e:eb:54:58:5e:62:e5:33:48:c0:d8:5d:29:fe:
32:cf:94:23:3d:dd:27:d9:9f:9f:56:73:16:cf:8a:
e4:92:92:3e:50:80:c8:e5:a1:5e:de:cf:2b:f2:d1:
4c:f0:c5:29:7e:81:07:f7:7c:19:57:98:59:30:39:
7f:04:d2:95:f9:54:42:5d:86:64:fb:da:d4:c2:01:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DB:32:CF:DC:60:88:77:2E:39:C7:FB:1C:1E:D1:1A:70:D1:FB:6B
X509v3 Authority Key Identifier:
keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38362e302f32342d3234203d3e203237383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.97.86.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d4:4d:de:2a:9d:41:44:34:27:22:ff:8b:d3:7b:a8:81:a5:
00:2f:82:90:a9:f1:6a:60:bf:05:ae:c2:b3:4c:1e:a7:74:4e:
21:43:03:e2:aa:8e:15:d3:a9:86:fa:8b:0d:a7:fe:88:02:d3:
86:0e:be:55:f2:0a:63:f3:aa:9f:75:65:02:e9:85:cd:46:e4:
3b:8a:e7:5b:23:ce:44:8c:f3:de:a3:9b:50:63:81:f7:a9:01:
29:b5:2f:d8:4b:0d:05:17:19:f5:6c:44:78:23:ed:77:ab:e2:
74:6f:1d:70:6b:ae:ad:ba:43:14:65:47:35:2c:e8:b7:07:2e:
90:3d:6f:90:68:35:5c:26:fe:b6:72:3d:ff:4c:e6:26:86:fd:
81:e1:6c:bb:ec:90:5d:91:7b:0f:29:f9:2b:f8:7d:07:b9:46:
b4:ad:4e:8c:19:b8:61:47:2a:2b:48:34:82:dc:e2:f4:77:90:
41:bd:3a:5d:93:9f:47:13:81:15:9e:a0:88:3c:12:71:08:5a:
08:ca:45:6f:a1:cc:e9:60:2c:ec:e6:14:21:3e:9e:19:44:77:
91:ff:01:01:bf:3a:23:20:38:78:f7:ba:77:79:1d:20:aa:5e:
3b:f9:36:59:32:be:2e:3b:2f:44:43:28:f0:d6:9f:8b:13:3a:
25:28:6b:25
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZ0uV6pwasC4BSbmVVBhNSdbAi9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVEQjBEMTdCMTU3QkY2QUQwOEJBQzI1OTg4NDg5QUZE
NTVCODVCQzAeFw0yNDEyMDYwMTA1MDBaFw0yNTEyMDUwMTEwMDBaMDMxMTAvBgNV
BAMTKEUwREIzMkNGREM2MDg4NzcyRTM5QzdGQjFDMUVEMTFBNzBEMUZCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcPLq8ssahMUIeCrwEsHn2PvIM
pghVb8Pjl9VbWPv9Sv6JLjScFeFD0d4cNIOKeK2VzTHjZTHdW2oa+cNYZx2/68KQ
SysAdnDYD6IwiSFRVKVed/AC/x1u4x77EP8CSCH322iVKzhTcgnbTsjKajnWVlfi
fOnnGWkVMfovizdajXN2bizVVoORB8JEfO5ILtMjxqgh/Xv7SSfnvj611WQl5HXJ
InlTqA+ypdpccyoaaJFG7igu61RYXmLlM0jA2F0p/jLPlCM93SfZn59WcxbPiuSS
kj5QgMjloV7ezyvy0UzwxSl+gQf3fBlXmFkwOX8E0pX5VEJdhmT72tTCAYlBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU4Nsyz9xgiHcuOcf7HB7RGnDR+2swHwYDVR0j
BBgwFoAUVdsNF7FXv2rQi6wlmISJr9VbhbwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTlDQjgxN0M5RTdDNTQzNTJENjRENTU0OEU2QjVBMTE5
MTkyREY3RUMyRDhEODFFMzc5QzQ5MjRCNzhBMUZDLzAvNTVEQjBEMTdCMTU3QkY2
QUQwOEJBQzI1OTg4NDg5QUZENTVCODVCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NURCMEQxN0IxNTdCRjZBRDA4
QkFDMjU5ODg0ODlBRkQ1NUI4NUJDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U5Q0I4MTdDOUU3QzU0MzUyRDY0RDU1NDhFNkI1QTExOTE5MkRGN0VD
MkQ4RDgxRTM3OUM0OTI0Qjc4QTFGQy8wLzMxMzkzMDJlMzkzNzJlMzgzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczODM0MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+YVYwDQYJ
KoZIhvcNAQELBQADggEBAJbUTd4qnUFENCci/4vTe6iBpQAvgpCp8WpgvwWuwrNM
Hqd0TiFDA+KqjhXTqYb6iw2n/ogC04YOvlXyCmPzqp91ZQLphc1G5DuK51sjzkSM
896jm1BjgfepASm1L9hLDQUXGfVsRHgj7Xer4nRvHXBrrq26QxRlRzUs6LcHLpA9
b5BoNVwm/rZyPf9M5iaG/YHhbLvskF2Rew8p+Sv4fQe5RrStTowZuGFHKitINILc
4vR3kEG9Ol2Tn0cTgRWeoIg8EnEIWgjKRW+hzOlgLOzmFCE+nhlEd5H/AQG/OiMg
OHj3und5HSCqXjv5Nlkyvi47L0RDKPDWn4sTOiUoayU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:24:43 2025 by rpki-client