Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138362e302f32332d3233203d3e20323730303437.roa
File: 3137392e302e3138362e302f32332d3233203d3e20323730303437.roa (raw, json)
Hash identifier: Vo8CqzvcRsBHtaRK0CxlA4FNQE2fgOWvI05xfk/h5I0=
Subject key identifier: 09:6F:ED:C6:97:72:17:B9:B7:B3:33:AD:BA:4B:1B:DE:D7:04:1E:85
Certificate issuer: /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial: 3BAC4EE8E3246DFDB86E2C94B444C9A0D00138F4
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138362e302f32332d3233203d3e20323730303437.roa
Signing time: Tue 05 Mar 2024 18:01:53 +0000
ROA not before: Tue 05 Mar 2024 17:56:53 +0000
ROA not after: Tue 04 Mar 2025 18:01:53 +0000
asID: 270047
IP address blocks: 179.0.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ac:4e:e8:e3:24:6d:fd:b8:6e:2c:94:b4:44:c9:a0:d0:01:38:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Validity
Not Before: Mar 5 17:56:53 2024 GMT
Not After : Mar 4 18:01:53 2025 GMT
Subject: CN=096FEDC6977217B9B7B333ADBA4B1BDED7041E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:f4:9b:c2:fb:22:35:67:3a:1b:08:e5:99:
3a:38:a8:d2:96:71:b0:cc:f9:31:c4:66:0e:a2:46:
16:ad:c1:18:a0:4f:17:21:ae:bb:8a:5c:dd:97:6c:
8e:e2:d0:33:7e:2e:c0:b4:b3:35:b0:3d:9a:25:26:
de:27:0b:f6:58:55:a9:5d:eb:8d:88:54:1f:f4:51:
d8:3f:b9:4b:55:88:be:47:11:e5:cc:df:0f:d3:71:
87:af:80:41:9d:b2:cf:98:81:42:db:93:63:a5:b6:
21:48:f7:f0:5c:c8:c6:0c:76:48:ca:3c:69:ed:30:
cb:84:4c:5f:7c:b4:b0:f0:d6:e4:3a:d4:64:dc:f7:
4b:5e:c0:71:de:f7:bb:ce:15:9a:ec:ee:a1:7c:5e:
fa:33:a9:70:55:7b:18:61:b6:fd:47:4f:e1:9c:2d:
13:22:b2:92:1e:89:d6:97:d0:d3:cb:ce:d3:e0:e8:
ef:04:86:04:94:2d:4c:84:51:6f:16:ed:5e:e5:3e:
19:8d:86:a0:55:c6:d5:44:0f:bb:e1:7d:07:97:cb:
9a:56:3a:09:c0:08:61:5d:05:8d:2f:22:1b:a0:0e:
d9:99:e7:fe:84:2a:9f:64:7d:da:7e:4d:07:b8:e7:
a1:c4:97:0c:a5:b2:7c:c2:28:56:4a:f6:5a:78:e2:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:ED:C6:97:72:17:B9:B7:B3:33:AD:BA:4B:1B:DE:D7:04:1E:85
X509v3 Authority Key Identifier:
keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138362e302f32332d3233203d3e20323730303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.186.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:a0:14:f4:e9:6d:a3:b2:7c:4b:13:c8:8f:53:72:3b:83:40:
0c:37:53:f7:5a:3c:ae:38:2c:68:b3:9c:35:bc:f6:3e:44:6b:
dc:de:64:6c:5d:98:97:fe:8e:ea:8c:fb:a3:12:53:dc:78:9c:
97:2f:37:61:70:35:ca:61:f0:19:cd:de:c0:75:c0:5a:3e:a1:
52:b2:9e:cf:7e:80:c7:29:fd:c7:0e:9b:9d:04:aa:b9:82:96:
4b:4f:1e:86:8d:6f:ce:29:71:85:06:bf:fe:e9:d0:9e:7c:c4:
19:78:33:c4:1d:02:7e:20:66:b8:80:75:ef:57:70:8b:cf:82:
ce:b4:ea:da:b2:eb:97:44:e7:07:2f:a3:1a:20:c4:cf:31:87:
71:a4:64:74:13:c9:1b:86:49:4a:d0:12:1e:71:5e:88:05:02:
e9:24:af:2c:06:a2:0a:2c:43:36:51:c4:35:9b:d6:b1:7f:2f:
8d:49:b5:3a:bf:73:ee:b9:8d:2c:ef:04:32:56:ef:a0:ea:3c:
69:0f:53:12:ca:d3:8c:86:e1:ad:bb:7c:2e:57:f2:d6:20:2c:
c0:84:ed:a3:89:cd:94:00:8b:46:cf:2d:ea:b1:cf:27:58:39:
68:1e:51:a3:47:fc:00:95:96:2e:54:6e:73:f8:d9:f8:1b:23:
cd:18:4f:a4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUO6xO6OMkbf24biyUtETJoNABOPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBBRkQyRUQ5ODZBNERBRTg2QTQ0OEMxRTZFNTY3Q0Uz
MzE4NkJDNDAeFw0yNDAzMDUxNzU2NTNaFw0yNTAzMDQxODAxNTNaMDMxMTAvBgNV
BAMTKDA5NkZFREM2OTc3MjE3QjlCN0IzMzNBREJBNEIxQkRFRDcwNDFFODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4g/SbwvsiNWc6GwjlmTo4qNKW
cbDM+THEZg6iRhatwRigTxchrruKXN2XbI7i0DN+LsC0szWwPZolJt4nC/ZYVald
642IVB/0Udg/uUtViL5HEeXM3w/TcYevgEGdss+YgULbk2OltiFI9/BcyMYMdkjK
PGntMMuETF98tLDw1uQ61GTc90tewHHe97vOFZrs7qF8XvozqXBVexhhtv1HT+Gc
LRMispIeidaX0NPLztPg6O8EhgSULUyEUW8W7V7lPhmNhqBVxtVED7vhfQeXy5pW
OgnACGFdBY0vIhugDtmZ5/6EKp9kfdp+TQe456HElwylsnzCKFZK9lp44iYhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUCW/txpdyF7m3szOtuksb3tcEHoUwHwYDVR0j
BBgwFoAUkK/S7ZhqTa6GpEjB5uVnzjMYa8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjNDNDY4RkYyRDI2QUZGNkRDOTZCQzQ0OUVEMTc0QzlC
NUYwMTlFMEVEMkRGMDlGRjlEQjdDMjhERjY5NjY0LzAvOTBBRkQyRUQ5ODZBNERB
RTg2QTQ0OEMxRTZFNTY3Q0UzMzE4NkJDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MEFGRDJFRDk4NkE0REFFODZB
NDQ4QzFFNkU1NjdDRTMzMTg2QkM0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUYzQzQ2OEZGMkQyNkFGRjZEQzk2QkM0NDlFRDE3NEM5QjVGMDE5RTBF
RDJERjA5RkY5REI3QzI4REY2OTY2NC8wLzMxMzczOTJlMzAyZTMxMzgzNjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzczMDMwMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbMAujAN
BgkqhkiG9w0BAQsFAAOCAQEAnqAU9Olto7J8SxPIj1NyO4NADDdT91o8rjgsaLOc
Nbz2PkRr3N5kbF2Yl/6O6oz7oxJT3Hicly83YXA1ymHwGc3ewHXAWj6hUrKez36A
xyn9xw6bnQSquYKWS08eho1vzilxhQa//unQnnzEGXgzxB0CfiBmuIB171dwi8+C
zrTq2rLrl0TnBy+jGiDEzzGHcaRkdBPJG4ZJStASHnFeiAUC6SSvLAaiCixDNlHE
NZvWsX8vjUm1Or9z7rmNLO8EMlbvoOo8aQ9TEsrTjIbhrbt8Llfy1iAswITto4nN
lACLRs8t6rHPJ1g5aB5Ro0f8AJWWLlRuc/jZ+BsjzRhPpA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:24:34 2025 by rpki-client