Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa
File: 3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa (raw, json)
Hash identifier: 1TxdvuIoa4ejLfbpeVOsvoRYRebCK+dwX/tLK4bUqKo=
Subject key identifier: CE:8A:EC:8C:9B:6D:C6:2D:65:4B:C0:0B:84:E6:C5:52:76:0F:2A:AF
Certificate issuer: /CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Certificate serial: 2AAA6B3C939CE795295877EAE50EEE70D50DC98E
Authority key identifier: C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa
Signing time: Tue 05 Mar 2024 17:56:08 +0000
ROA not before: Tue 05 Mar 2024 17:51:08 +0000
ROA not after: Tue 04 Mar 2025 17:56:08 +0000
asID: 263703
IP address blocks: 190.97.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:aa:6b:3c:93:9c:e7:95:29:58:77:ea:e5:0e:ee:70:d5:0d:c9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Validity
Not Before: Mar 5 17:51:08 2024 GMT
Not After : Mar 4 17:56:08 2025 GMT
Subject: CN=CE8AEC8C9B6DC62D654BC00B84E6C552760F2AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:6e:3f:33:52:16:bb:9a:0b:c1:b5:3d:7a:
77:24:cd:67:61:56:9c:99:07:e8:ca:b6:88:3b:33:
2c:5d:57:c5:31:2d:c1:16:78:eb:4b:d4:f5:4a:3d:
45:79:e6:bd:4b:ab:5f:c4:40:26:87:5d:f3:20:4a:
7e:2c:d0:0c:e1:ba:fd:f9:24:e6:63:98:c0:ff:99:
3f:d1:a7:ff:83:83:67:c3:ce:b7:55:72:73:b6:d9:
e8:fd:3a:5e:ef:99:c6:21:8e:81:85:7b:a7:30:7a:
09:08:a2:91:ed:3b:43:1a:bb:b0:2c:70:37:56:e1:
80:72:bb:f7:33:a1:44:a9:b8:3f:3d:43:e9:03:06:
40:89:b4:54:53:7a:52:bf:bd:10:97:c3:c5:9e:f8:
fe:fe:5b:e9:fe:4e:01:29:57:34:09:e1:54:ba:cf:
54:8d:a8:3c:9c:61:31:bf:03:a3:33:e8:b1:53:fb:
dd:62:81:91:a3:a7:21:61:b4:2d:16:4a:2e:ef:75:
c6:0f:72:c3:ae:ce:db:71:aa:b3:91:fa:9d:3f:f5:
63:e7:44:9c:f3:ab:ea:10:6f:20:8c:33:8b:94:f7:
c6:22:ff:6b:f6:3c:af:4a:f9:b6:cf:47:2f:d0:5e:
48:d9:82:2c:07:23:16:4b:8e:32:8d:5d:47:75:e1:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:EC:8C:9B:6D:C6:2D:65:4B:C0:0B:84:E6:C5:52:76:0F:2A:AF
X509v3 Authority Key Identifier:
keyid:C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.97.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:18:b9:3f:6c:04:cf:92:1b:9f:4c:a7:35:43:0c:69:3c:ec:
1c:d1:fb:50:b9:ba:7b:4f:d9:0b:68:2d:9c:32:c6:39:11:17:
44:24:b4:68:83:d2:ad:a5:39:ce:36:dc:ad:fd:b4:12:35:a0:
4d:db:ab:cc:9a:e7:68:1a:a3:31:77:77:46:f8:60:4c:de:ba:
93:37:b6:15:e9:69:77:a7:80:29:6e:35:63:97:60:da:8f:d8:
ca:ac:28:87:7c:ed:62:22:1e:4b:ca:fc:b3:53:60:40:57:3c:
2d:27:e5:7b:fe:ce:22:8a:24:26:ee:30:29:8c:0c:61:08:49:
59:1c:e1:fd:cb:77:5f:c2:92:80:5a:25:b4:a7:31:03:12:90:
b8:da:8d:69:a6:50:50:3a:78:20:e9:76:5e:9a:36:18:91:11:
5b:00:a5:49:4d:13:24:99:62:fe:fd:2f:43:3f:c3:9b:26:0f:
86:2a:b6:10:82:aa:a0:c0:52:66:f8:b2:ec:48:3e:03:80:05:
a4:02:42:67:c7:e3:55:a7:ab:21:ea:97:26:8b:c7:b1:5a:eb:
47:25:43:f2:43:ee:e9:ae:c2:80:da:cc:49:15:94:70:d5:aa:
df:a2:d5:4d:b9:67:84:3c:df:4b:76:12:a3:f0:fd:95:4b:ee:
96:2c:c6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:26:21 2025 by rpki-client