Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133372e302f32342d3234203d3e203532323333.roa
File: 3139302e38382e3133372e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier: 6/0mwbf7KHoskizQ7sRLPQYBhelH8XrT04VClHS530I=
Subject key identifier: FE:07:63:30:5D:81:A3:53:E1:B6:D5:C2:5B:FF:A0:BA:43:CB:0A:E0
Certificate issuer: /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial: 2FA07F87BB5683E928BF9A3AB42433C35DC01A38
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133372e302f32342d3234203d3e203532323333.roa
Signing time: Tue 03 Dec 2024 13:55:00 +0000
ROA not before: Tue 03 Dec 2024 13:50:00 +0000
ROA not after: Tue 02 Dec 2025 13:55:00 +0000
asID: 52233
IP address blocks: 190.88.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a0:7f:87:bb:56:83:e9:28:bf:9a:3a:b4:24:33:c3:5d:c0:1a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Validity
Not Before: Dec 3 13:50:00 2024 GMT
Not After : Dec 2 13:55:00 2025 GMT
Subject: CN=FE0763305D81A353E1B6D5C25BFFA0BA43CB0AE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:5a:88:6b:e7:f6:27:04:0f:e8:d2:19:30:
b6:8f:b2:b5:e0:4c:56:12:8e:39:1c:db:01:be:58:
61:0a:86:36:90:34:c2:8f:85:04:db:e2:4e:92:8f:
fc:ae:e1:fd:d1:44:a8:15:63:90:34:e6:47:3f:c2:
15:dc:c1:de:41:b3:57:96:f1:83:17:f7:9b:d3:c6:
43:42:b6:de:de:9c:5d:95:b3:80:00:3c:dd:33:4a:
96:2c:d4:d1:b9:cb:4a:56:43:36:9e:b6:6d:e0:87:
42:b5:ea:ac:0f:75:f8:1f:6e:02:aa:58:6d:8e:9b:
8f:12:74:f8:71:b5:1d:22:06:40:46:f1:b8:70:fe:
76:ae:40:b7:37:1b:e2:65:36:2b:01:1f:04:41:a4:
3f:11:07:c3:ee:11:d9:15:2d:51:1e:85:d6:22:4e:
57:49:f9:9a:2f:fd:73:8d:ac:0b:c4:b2:d6:b9:93:
60:56:61:af:0d:9b:5f:78:2c:31:5c:21:cc:79:55:
21:8e:95:4d:0b:b4:c2:b8:28:24:a8:f1:26:05:e7:
90:a8:fe:0e:8a:52:d4:46:4b:9c:99:ac:45:f4:4e:
8f:ee:2a:92:88:52:a7:a3:6e:b6:7d:e6:b6:06:b2:
15:2f:62:f8:7a:da:46:5c:58:14:12:76:7f:e6:3a:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:07:63:30:5D:81:A3:53:E1:B6:D5:C2:5B:FF:A0:BA:43:CB:0A:E0
X509v3 Authority Key Identifier:
keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133372e302f32342d3234203d3e203532323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.88.137.0/24
Signature Algorithm: sha256WithRSAEncryption
22:60:8f:fa:9b:fd:64:c6:a7:9d:bd:f7:d5:c4:d7:f0:00:a0:
85:23:46:2b:b6:9d:f3:ec:8c:a9:a9:10:34:62:91:2c:e7:8f:
40:f5:a2:6c:4f:19:cd:65:73:29:e1:a7:6d:bb:7c:70:1a:92:
13:1e:fe:74:e9:23:f0:2b:42:6a:40:67:7d:41:7f:10:15:a5:
fb:4a:b1:b8:17:4b:27:e7:48:41:ee:c4:20:34:b0:2a:b3:1d:
9b:93:ae:58:b8:9c:ec:e5:dc:82:1e:f4:9d:05:c0:b9:9a:ce:
cb:b4:96:61:eb:25:76:7a:80:3f:2c:34:08:9b:9c:bc:3f:47:
17:ac:0d:f7:31:89:5e:a1:92:6d:6e:08:88:96:0e:43:56:3f:
52:8a:d8:74:4e:2e:97:ca:ff:9b:4b:4e:a7:10:bd:3e:a7:d5:
a7:e3:25:ad:5c:e3:b0:c0:1f:74:d7:c1:e7:27:67:43:40:eb:
ce:3e:8a:34:25:04:82:8d:3e:eb:1c:92:13:e0:19:f6:0b:42:
30:94:d0:d7:52:f9:57:c1:dd:e2:61:58:b9:01:26:63:aa:45:
9b:bb:ad:17:34:2a:c0:0e:0a:ef:88:b0:0e:4e:b6:84:55:b6:
b5:61:b0:6a:44:74:c2:23:80:a8:79:ec:b9:46:4a:56:2a:c2:
67:6d:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:01:01 2025 by rpki-client