Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa
File: 3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa (raw, json)
Hash identifier: otQ9X0TopxK5Wiok9BPIvj1lRRIE3HmfP5/a1bDFOyI=
Subject key identifier: BF:99:5D:B1:69:DE:FD:34:AA:9A:B8:8B:70:A6:B6:78:E9:95:49:F7
Certificate issuer: /CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
Certificate serial: 58BD6DC9A6B3A2299978A9484F5A203F73269215
Authority key identifier: D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa
Signing time: Tue 05 Mar 2024 17:51:38 +0000
ROA not before: Tue 05 Mar 2024 17:46:38 +0000
ROA not after: Tue 04 Mar 2025 17:51:38 +0000
asID: 262259
IP address blocks: 190.99.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:bd:6d:c9:a6:b3:a2:29:99:78:a9:48:4f:5a:20:3f:73:26:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
Validity
Not Before: Mar 5 17:46:38 2024 GMT
Not After : Mar 4 17:51:38 2025 GMT
Subject: CN=BF995DB169DEFD34AA9AB88B70A6B678E99549F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:e6:6f:40:13:cc:17:29:66:2e:76:a8:53:
2e:8c:58:75:6b:97:0c:17:5e:1c:76:a3:cd:bc:57:
f2:a3:a4:0e:8c:8d:80:9d:5a:1d:41:27:80:a3:f9:
1d:02:c1:93:ba:37:1d:3d:0e:68:f2:a5:8b:b3:84:
82:67:38:f7:42:7d:2c:9b:14:25:f5:bb:91:c4:ce:
0b:15:c4:5b:58:e5:ea:4d:03:72:15:4c:03:38:17:
12:cf:d0:6b:4c:87:2a:8f:5c:fe:5d:14:e1:5e:ef:
0d:10:63:c8:b9:24:78:09:54:41:4d:4b:bb:e7:4b:
a5:22:b9:05:e7:37:e7:37:b3:5d:e8:ba:db:d4:d4:
39:81:4e:fb:90:2d:a1:49:57:cc:3d:ad:2f:48:74:
62:ad:2e:b5:5b:c8:e4:63:c9:7c:ca:0d:0e:cc:95:
fd:19:cb:94:70:00:22:22:aa:bf:b3:bc:b4:8a:94:
1d:86:1c:9f:21:23:87:a4:f5:8f:62:cf:42:eb:f0:
7b:2f:92:1c:a5:25:a2:88:0d:76:f1:0b:48:29:92:
3d:4c:ca:12:4a:56:ec:ee:bf:32:ae:51:4f:e4:09:
bf:54:18:6f:a3:9a:91:b0:8c:36:53:0e:10:c5:23:
ee:69:ac:e7:a5:43:78:16:ec:1f:29:ee:a3:50:e7:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:99:5D:B1:69:DE:FD:34:AA:9A:B8:8B:70:A6:B6:78:E9:95:49:F7
X509v3 Authority Key Identifier:
keyid:D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139302e39392e3131322e302f32322d3234203d3e20323632323539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:0d:88:f0:16:bb:d2:f8:c8:ec:73:f6:6a:a8:45:01:2d:12:
a3:0a:67:73:29:80:fb:72:05:0a:ca:c0:0f:fb:63:01:69:6d:
9a:79:85:9d:75:c1:ea:f5:d7:7e:c9:b1:6e:d2:53:42:4e:56:
f6:a1:32:bf:06:fe:18:ea:03:85:9c:3e:de:ee:31:10:b5:8c:
19:f0:05:88:b5:86:93:d2:d8:b8:25:f2:9f:46:12:1c:c9:c2:
cf:5e:d6:a3:9b:ea:bc:25:47:e7:88:a9:ba:0d:0b:30:9f:72:
b8:5d:27:c7:74:da:68:f4:91:b0:f5:ea:26:d1:d5:81:16:81:
c2:3a:25:f8:f4:65:c9:a3:60:1a:af:1e:9f:56:b0:8a:32:a2:
db:fb:43:06:d0:b8:78:f1:d8:48:c6:08:91:a9:f4:01:af:35:
1e:58:3b:bf:f8:1f:b0:e9:d0:23:a4:87:e9:47:02:72:59:10:
4a:18:ce:3d:ad:f9:08:54:16:e9:e2:68:71:8c:e9:ea:66:2d:
07:03:4d:8d:13:6d:f4:db:47:51:28:cf:c4:bf:2d:d3:5c:89:
3d:5f:06:6f:8c:bb:d9:36:14:3c:6e:b0:bf:58:ea:4b:8d:62:
d1:7b:72:e2:47:a9:55:24:c8:98:2e:f8:41:1f:e3:fa:70:9c:
98:94:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:35:06 2025 by rpki-client