Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133332e302f32342d3234203d3e203532323333.roa
File: 3139302e38382e3133332e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier: wjc8jikSsde1DQxfWHy61OG+f/L+LXgCnPXLJBcDM90=
Subject key identifier: 8E:EA:5C:23:79:41:29:51:9E:C8:32:A1:76:12:8C:86:C9:73:28:BB
Certificate issuer: /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial: 75294DE8B5C449105665376983598DF848EF57A0
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133332e302f32342d3234203d3e203532323333.roa
Signing time: Wed 27 Nov 2024 15:15:00 +0000
ROA not before: Wed 27 Nov 2024 15:10:00 +0000
ROA not after: Wed 26 Nov 2025 15:15:00 +0000
asID: 52233
IP address blocks: 190.88.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:29:4d:e8:b5:c4:49:10:56:65:37:69:83:59:8d:f8:48:ef:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Validity
Not Before: Nov 27 15:10:00 2024 GMT
Not After : Nov 26 15:15:00 2025 GMT
Subject: CN=8EEA5C23794129519EC832A176128C86C97328BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:34:cb:ae:91:5e:15:bc:19:75:7c:3b:4e:
2d:03:b0:99:4e:94:fe:ed:25:75:96:63:56:6d:5a:
98:d2:2d:26:f8:76:8d:4c:1f:6a:a6:65:21:14:43:
dc:f8:dc:a8:1d:6b:24:e2:d3:e2:ff:f0:9b:b6:1d:
4e:8d:09:f4:a0:3d:75:97:4d:3a:17:18:4c:20:d0:
d2:ed:e3:81:c0:a8:f9:b0:c5:3b:ac:4e:dc:82:0f:
db:a1:63:d8:5d:91:12:88:d4:27:fa:a0:30:7c:64:
68:92:a7:d5:0f:58:2a:24:48:53:45:a0:c8:b6:f5:
04:17:ec:82:3b:f8:c4:36:d2:dd:a5:5a:a2:f4:2a:
8a:e6:61:eb:55:3f:5e:5a:96:ee:ae:33:2a:ba:17:
30:a5:84:73:5a:09:ce:b6:73:62:64:dc:b6:9e:a6:
2d:3c:f8:b4:ef:93:c7:a0:8b:2e:a5:0c:f1:f8:04:
91:fd:b8:b4:f4:d3:f1:18:f8:ef:bf:e0:c5:5d:94:
f0:8f:0e:6e:21:ff:4d:ba:14:ae:85:a9:d5:cc:f3:
4e:d0:2a:ca:db:52:95:9a:7c:6b:36:47:5c:c8:22:
a2:97:2f:79:72:b2:7e:74:c4:7a:f1:07:71:2e:ec:
1b:34:a0:56:d0:d1:f9:22:5c:aa:37:d6:9f:0d:80:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EA:5C:23:79:41:29:51:9E:C8:32:A1:76:12:8C:86:C9:73:28:BB
X509v3 Authority Key Identifier:
keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133332e302f32342d3234203d3e203532323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.88.133.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2a:35:fd:7e:53:34:45:db:d1:fd:7a:cd:45:f4:64:07:02:
f5:88:62:25:13:07:b7:90:c9:0d:85:d1:bf:0b:85:02:b3:37:
31:08:aa:e6:37:ca:06:5e:d1:da:2e:c1:07:ad:dd:23:49:9b:
90:35:4a:65:06:54:9e:f4:74:e7:01:0e:5b:48:65:7b:66:c9:
fa:08:4b:c9:d3:c6:72:54:f7:0b:1a:fc:f7:9c:99:d5:54:1b:
c3:47:0d:8d:d6:56:1d:2e:1c:27:fa:26:93:dc:c8:0c:93:c1:
57:d1:25:9c:da:c7:98:e0:b6:19:b2:34:02:4d:cd:cb:f3:ac:
aa:5e:ef:73:ea:bb:42:43:f3:5a:72:a8:b4:85:db:60:fd:6f:
4e:8b:bb:10:56:db:14:f3:99:c4:83:73:32:0b:f2:fa:96:bf:
49:dc:04:60:02:a5:36:6d:49:e0:a4:a7:ae:a1:d1:b1:14:ef:
4b:5d:7f:1e:51:51:40:79:41:c6:55:ed:f6:ce:da:fd:11:00:
90:5d:5c:15:50:da:bd:9d:87:b1:75:2e:81:5b:dd:00:ab:98:
97:67:3b:c3:e6:1b:3e:23:f1:72:e9:2f:30:82:d4:55:6d:8e:
b6:cd:88:50:45:0b:e3:06:12:40:f8:b0:78:5a:d8:1a:5d:0b:
06:83:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:01:02 2025 by rpki-client