Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203130343831.roa
File: 3139312e35322e3230382e302f32322d3234203d3e203130343831.roa (raw, json)
Hash identifier: F8bw86LyhllFD+X9gZ+uQvXFR8dTd420+TDUrBkcq5k=
Subject key identifier: 1B:53:89:1A:90:A1:2E:10:16:2D:A8:8C:B6:0E:1C:1E:7E:70:EC:96
Certificate issuer: /CN=BFFF9ED422983457E784A1C5DF441797B00B1886
Certificate serial: 3A49B6EC59173531B24D2F043F775FE4BB40EBC4
Authority key identifier: BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203130343831.roa
Signing time: Wed 07 Aug 2024 17:05:00 +0000
ROA not before: Wed 07 Aug 2024 17:00:00 +0000
ROA not after: Wed 06 Aug 2025 17:05:00 +0000
asID: 10481
IP address blocks: 191.52.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:49:b6:ec:59:17:35:31:b2:4d:2f:04:3f:77:5f:e4:bb:40:eb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFFF9ED422983457E784A1C5DF441797B00B1886
Validity
Not Before: Aug 7 17:00:00 2024 GMT
Not After : Aug 6 17:05:00 2025 GMT
Subject: CN=1B53891A90A12E10162DA88CB60E1C1E7E70EC96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:73:e6:c4:7b:61:c7:ba:f2:27:bf:02:25:
6a:cc:2c:ef:26:3b:2f:05:df:5c:01:37:7b:b7:6f:
38:4e:d5:a7:25:a5:65:c8:16:96:f4:e4:71:dd:c8:
ce:9b:a0:36:a7:60:47:99:24:d4:66:8d:57:ee:f5:
a2:86:76:c1:62:cb:5f:03:a3:af:a5:78:29:93:d7:
e8:23:ac:cc:cd:df:63:97:fb:8c:48:3d:05:fa:69:
1c:5a:1e:96:f0:b9:38:ba:53:7e:0f:27:01:4f:ba:
f3:e0:cb:4e:e2:00:4b:bd:47:33:96:ca:d8:ab:94:
24:3a:5b:65:5f:a0:10:66:91:a8:fa:ab:88:f8:b9:
17:61:13:ec:4f:06:95:ad:b9:91:a4:5b:ae:ce:ae:
04:da:cc:1e:74:94:58:98:03:ae:80:0b:5d:45:78:
0f:bf:f9:36:fa:4e:b8:c4:34:a7:08:98:ec:f4:14:
2d:94:06:98:31:53:a0:49:00:86:d6:5d:64:4b:ca:
e9:b5:26:49:83:d0:f2:78:3d:e3:ed:c6:d6:0e:54:
29:93:8b:92:3e:65:2e:b3:04:59:95:ec:0c:60:e6:
88:33:d2:92:76:01:ad:b3:e0:b1:9e:00:ad:6c:32:
0d:bc:90:a1:2b:de:d4:c2:cc:c1:c4:a0:91:e4:e2:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:53:89:1A:90:A1:2E:10:16:2D:A8:8C:B6:0E:1C:1E:7E:70:EC:96
X509v3 Authority Key Identifier:
keyid:BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e203130343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.52.208.0/22
Signature Algorithm: sha256WithRSAEncryption
57:a1:97:e1:f9:f4:7d:9a:cb:6c:33:fa:cc:7d:ef:e5:c8:e0:
67:35:6b:0f:d4:f9:1a:45:87:72:9c:bd:ac:65:65:34:21:dc:
d6:89:6d:5c:e0:2c:e8:41:f3:52:f7:29:80:b4:27:7e:67:11:
e7:97:bf:90:62:40:a2:f5:5c:d2:72:19:3b:ea:07:49:8b:49:
0e:c2:75:96:d4:67:fe:1c:74:0b:07:ac:1f:61:7c:05:5b:9c:
bf:36:ec:fa:d3:e2:ce:1e:3b:39:6e:62:8e:22:df:a5:ff:b3:
e9:ba:f5:e9:32:75:43:14:8d:49:7d:f0:fe:8b:2d:56:8b:46:
42:1e:75:3a:53:0e:dc:2b:43:50:75:82:5f:e3:5a:93:3f:e2:
98:20:5e:b4:bd:21:22:54:b3:91:78:ee:2e:15:6c:e2:f9:da:
43:0a:91:e9:cb:64:51:2e:08:55:f3:a5:03:05:ed:38:b8:a2:
26:6f:50:c4:cc:f5:2a:78:0f:0a:bc:12:28:4a:ec:6a:05:f1:
2b:fb:80:4a:41:d5:c2:7d:ca:cc:4b:ff:74:8e:be:29:cb:25:
d9:a3:b2:67:ad:05:56:26:60:fb:d8:db:0e:46:09:fb:41:cc:
fe:dd:29:69:81:d5:1d:af:a1:66:5f:f7:e6:35:51:59:2b:46:
a7:d6:10:e1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOkm27FkXNTGyTS8EP3df5LtA68QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZGRjlFRDQyMjk4MzQ1N0U3ODRBMUM1REY0NDE3OTdC
MDBCMTg4NjAeFw0yNDA4MDcxNzAwMDBaFw0yNTA4MDYxNzA1MDBaMDMxMTAvBgNV
BAMTKDFCNTM4OTFBOTBBMTJFMTAxNjJEQTg4Q0I2MEUxQzFFN0U3MEVDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZh3PmxHthx7ryJ78CJWrMLO8m
Oy8F31wBN3u3bzhO1aclpWXIFpb05HHdyM6boDanYEeZJNRmjVfu9aKGdsFiy18D
o6+leCmT1+gjrMzN32OX+4xIPQX6aRxaHpbwuTi6U34PJwFPuvPgy07iAEu9RzOW
ytirlCQ6W2VfoBBmkaj6q4j4uRdhE+xPBpWtuZGkW67OrgTazB50lFiYA66AC11F
eA+/+Tb6TrjENKcImOz0FC2UBpgxU6BJAIbWXWRLyum1JkmD0PJ4PePtxtYOVCmT
i5I+ZS6zBFmV7Axg5ogz0pJ2Aa2z4LGeAK1sMg28kKEr3tTCzMHEoJHk4lHfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUG1OJGpChLhAWLaiMtg4cHn5w7JYwHwYDVR0j
BBgwFoAUv/+e1CKYNFfnhKHF30QXl7ALGIYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MDZCMTA2MzcxOEE2MUFFNTYxREIxOEE4NzBGNTgzRDE0
RDY1MTNDOTlFOTREQzE0RjQ3RDZEQkZCQkMwQTJDLzAvQkZGRjlFRDQyMjk4MzQ1
N0U3ODRBMUM1REY0NDE3OTdCMDBCMTg4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkZGOUVENDIyOTgzNDU3RTc4
NEExQzVERjQ0MTc5N0IwMEIxODg2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDA2QjEwNjM3MThBNjFBRTU2MURCMThBODcwRjU4M0QxNEQ2NTEzQzk5
RTk0REMxNEY0N0Q2REJGQkJDMEEyQy8wLzMxMzkzMTJlMzUzMjJlMzIzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMDM0MzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr800DAN
BgkqhkiG9w0BAQsFAAOCAQEAV6GX4fn0fZrLbDP6zH3v5cjgZzVrD9T5GkWHcpy9
rGVlNCHc1oltXOAs6EHzUvcpgLQnfmcR55e/kGJAovVc0nIZO+oHSYtJDsJ1ltRn
/hx0CwesH2F8BVucvzbs+tPizh47OW5ijiLfpf+z6br16TJ1QxSNSX3w/ostVotG
Qh51OlMO3CtDUHWCX+Nakz/imCBetL0hIlSzkXjuLhVs4vnaQwqR6ctkUS4IVfOl
AwXtOLiiJm9QxMz1KngPCrwSKErsagXxK/uASkHVwn3KzEv/dI6+Kcsl2aOyZ60F
ViZg+9jbDkYJ+0HM/t0paYHVHa+hZl/35jVRWStGp9YQ4Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:33 2025 by rpki-client