Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e20323632353839.roa
File: 3139302e31342e3234392e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier: 4wKT0+0B7L4D0VtptzqNmZG26hwIoWM1LiIafu06kDk=
Subject key identifier: 7D:3B:3E:EE:27:61:2D:24:7C:41:FB:CF:1A:19:25:A0:94:2F:C1:A3
Certificate issuer: /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial: 5C291F384702881B1C20C612BC673790B7A176A3
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e20323632353839.roa
Signing time: Tue 05 Mar 2024 18:02:34 +0000
ROA not before: Tue 05 Mar 2024 17:57:34 +0000
ROA not after: Tue 04 Mar 2025 18:02:34 +0000
asID: 262589
IP address blocks: 190.14.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:29:1f:38:47:02:88:1b:1c:20:c6:12:bc:67:37:90:b7:a1:76:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Validity
Not Before: Mar 5 17:57:34 2024 GMT
Not After : Mar 4 18:02:34 2025 GMT
Subject: CN=7D3B3EEE27612D247C41FBCF1A1925A0942FC1A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:6c:73:ca:23:cf:85:83:10:55:5c:ac:2e:
90:77:88:ce:1e:60:6d:ea:6d:9b:74:8c:37:52:ca:
84:89:02:5e:15:4e:46:bf:dd:e0:3a:9f:d9:e4:c2:
a1:99:fc:90:62:ec:84:b2:31:c7:67:cf:af:e9:6d:
42:ae:28:82:06:e9:c1:58:3f:e5:fa:33:13:3d:d9:
51:1a:9c:04:62:70:71:6f:cc:0e:50:e5:2f:78:c0:
59:ff:bc:3d:f0:fe:bd:d9:e8:0b:83:12:ba:5e:dc:
88:13:94:6a:83:65:36:97:c7:1b:d0:c3:a7:2a:a5:
f6:f4:49:dc:7c:64:92:23:3c:f5:58:7d:c4:63:ed:
b0:44:b1:26:4a:0b:55:1d:f4:03:fa:1c:17:56:10:
d5:69:e3:51:24:83:f5:03:38:25:cb:e9:69:d2:5c:
6a:5f:c9:0b:dc:4d:9c:51:d3:0d:6e:13:db:6d:69:
fc:8c:59:91:3a:29:93:08:dc:49:1b:76:cb:b9:f7:
71:7f:54:f8:d0:3f:76:07:03:41:90:cc:01:1d:dd:
2a:31:95:4f:e0:a1:1a:0b:e2:58:05:d4:08:dc:84:
3b:9f:0d:7c:b9:72:b0:91:bd:0e:db:df:8f:b8:2a:
86:72:01:8c:11:06:ca:01:bb:5d:15:b7:bb:99:e9:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:3E:EE:27:61:2D:24:7C:41:FB:CF:1A:19:25:A0:94:2F:C1:A3
X509v3 Authority Key Identifier:
keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234392e302f32342d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.249.0/24
Signature Algorithm: sha256WithRSAEncryption
37:24:22:ea:2f:ae:e4:bc:4c:61:9b:2d:28:b5:50:21:22:c4:
48:33:5e:b9:95:b2:6d:18:96:e4:04:1b:1c:c7:39:3b:7a:b5:
6c:ae:71:66:f6:4e:62:a2:88:6a:08:2d:c4:4e:68:53:74:64:
0b:3f:cd:93:58:df:4b:bb:65:6b:a5:a8:c2:1f:e9:f8:d4:83:
5c:97:5c:69:bc:fd:0a:b0:24:90:d6:a5:71:f5:1c:78:bf:62:
b3:9f:bc:47:f9:bc:92:11:63:b4:f4:91:85:5d:76:ee:ff:17:
09:98:3d:8b:ae:2e:0c:3d:1d:12:db:99:d8:23:99:01:10:ac:
36:1b:24:b4:cb:c6:8e:67:ae:30:7b:f6:85:c7:3d:74:60:44:
10:69:3f:97:c6:71:98:7c:56:23:27:50:bd:45:77:5b:0f:88:
3a:b1:a2:24:d0:32:bb:66:5a:4c:46:eb:45:96:84:ab:9c:49:
e7:b6:aa:e3:f7:74:a7:37:a4:62:19:1c:f0:26:f7:c3:af:52:
80:97:b7:56:36:88:ef:aa:d2:c1:e9:de:06:a4:ad:4e:fa:69:
60:11:ae:ae:ba:38:c5:c3:ab:da:bd:c4:55:45:f8:68:12:48:
77:f0:45:e8:9a:ff:df:00:72:88:35:48:4c:d8:ee:59:ce:0f:
cb:71:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:35:46 2025 by rpki-client