Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa
File: 3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier: eqt2aR8E1azI1qUb8qVvJ5TVBeZtpawdWlgVyIKVKB0=
Subject key identifier: 90:16:0F:FC:73:DB:54:5D:EA:5B:8C:2C:92:D0:82:C3:91:8D:C9:4E
Certificate issuer: /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial: 1C7CC17DD62CA02A352774CACEB1E66395FA2057
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa
Signing time: Tue 05 Mar 2024 18:01:42 +0000
ROA not before: Tue 05 Mar 2024 17:56:42 +0000
ROA not after: Tue 04 Mar 2025 18:01:42 +0000
asID: 28099
IP address blocks: 168.194.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7c:c1:7d:d6:2c:a0:2a:35:27:74:ca:ce:b1:e6:63:95:fa:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Validity
Not Before: Mar 5 17:56:42 2024 GMT
Not After : Mar 4 18:01:42 2025 GMT
Subject: CN=90160FFC73DB545DEA5B8C2C92D082C3918DC94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:ab:52:3d:fe:5e:c6:17:a5:26:68:de:25:
37:46:9a:59:95:01:e5:b0:1b:e2:4a:c5:af:46:d7:
14:0e:a5:a7:30:08:79:8f:27:f1:9b:14:3f:40:ab:
1a:4d:61:bd:93:ef:95:8e:19:5b:da:16:0e:b6:f6:
5e:50:bf:98:83:5b:e0:e7:f0:d8:3a:3b:b6:d6:8e:
bb:76:0c:e0:2c:aa:54:e3:d8:6d:55:f8:e2:d3:40:
27:5a:bb:6a:1a:3b:d7:fe:75:21:9c:b6:a6:94:69:
91:e5:5d:10:83:b0:2e:a8:21:dd:21:b9:cb:77:80:
b7:f9:d2:27:88:6f:b8:f9:c1:14:53:22:74:88:eb:
97:01:14:ff:8d:96:0b:42:c4:7a:c0:ca:9f:88:d8:
4b:22:84:a3:fc:07:4c:05:57:1b:20:cb:ea:6f:36:
55:21:13:93:57:93:7b:df:94:51:4a:fe:fb:ab:f5:
90:44:07:81:e7:e3:e6:d8:0b:ef:20:7b:78:19:29:
89:26:d4:a5:75:c7:5a:cd:46:58:8d:19:0c:00:d1:
80:df:8a:eb:7b:94:cd:72:50:9e:20:bb:be:f1:43:
d9:5a:4c:78:57:0e:31:2f:99:f3:f4:48:46:79:4e:
51:e5:23:7c:4c:65:e5:d8:4c:60:b9:3d:b6:11:81:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:16:0F:FC:73:DB:54:5D:EA:5B:8C:2C:92:D0:82:C3:91:8D:C9:4E
X509v3 Authority Key Identifier:
keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.199.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a0:5f:ae:dd:dd:bd:7c:88:93:22:d4:a1:ab:1d:11:85:de:
14:c6:63:0f:b9:c0:fa:54:9e:d1:0a:ca:35:32:fc:21:40:44:
fe:38:82:a4:dc:ff:cb:fa:e5:7c:20:5e:c1:c3:81:ce:36:2a:
d6:65:33:7e:00:da:f9:4d:89:88:b7:de:96:f7:b9:f5:ec:b7:
e3:92:c8:ad:c7:0d:86:f9:83:9b:79:d6:ba:0e:75:82:c8:a6:
95:36:9b:16:fd:c6:82:fa:ac:6d:c6:b7:d2:3e:a4:70:04:21:
23:e1:ae:11:be:07:a6:49:af:32:2c:d9:c0:e6:28:70:23:57:
37:62:75:fe:3a:fe:7b:d6:f1:74:37:aa:35:9d:ee:b0:12:b6:
12:c7:0e:a6:be:20:d6:64:bc:43:3d:38:60:38:8a:3d:ec:13:
e3:e0:ec:1b:4b:fd:a4:be:7c:7d:0a:46:90:9f:36:d5:d8:6b:
31:a2:6e:89:21:77:a7:86:ff:f5:91:10:c5:4a:2a:ac:3a:b8:
be:bc:80:b5:a1:44:43:aa:70:37:92:87:d8:c0:4a:99:ba:a2:
df:82:e1:a4:1c:6a:db:c8:01:e3:8b:03:6b:ca:85:5e:60:52:
52:cb:a0:19:d3:01:9a:81:3e:ca:78:86:6d:a4:a2:e7:35:f3:
4a:da:ee:2d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHHzBfdYsoCo1J3TKzrHmY5X6IFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkzNzA5N0UxNEI4NjlBOTNFNDIxRkY0QkYwNzg3OEY3
RkUxREIxMjAeFw0yNDAzMDUxNzU2NDJaFw0yNTAzMDQxODAxNDJaMDMxMTAvBgNV
BAMTKDkwMTYwRkZDNzNEQjU0NURFQTVCOEMyQzkyRDA4MkMzOTE4REM5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLKtSPf5exhelJmjeJTdGmlmV
AeWwG+JKxa9G1xQOpacwCHmPJ/GbFD9AqxpNYb2T75WOGVvaFg629l5Qv5iDW+Dn
8Ng6O7bWjrt2DOAsqlTj2G1V+OLTQCdau2oaO9f+dSGctqaUaZHlXRCDsC6oId0h
uct3gLf50ieIb7j5wRRTInSI65cBFP+NlgtCxHrAyp+I2EsihKP8B0wFVxsgy+pv
NlUhE5NXk3vflFFK/vur9ZBEB4Hn4+bYC+8ge3gZKYkm1KV1x1rNRliNGQwA0YDf
iut7lM1yUJ4gu77xQ9laTHhXDjEvmfP0SEZ5TlHlI3xMZeXYTGC5PbYRgbJHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkBYP/HPbVF3qW4wsktCCw5GNyU4wHwYDVR0j
BBgwFoAUSTcJfhS4aak+Qh/0vweHj3/h2xIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDRBMkRGMzRFNEYyMzJFNEI4OUQzODZCQ0M4Mzc0MzYw
QzQyQkI5NDBFNzdEREQ4QjM1ODAwQjYzNTVDQkIzLzAvNDkzNzA5N0UxNEI4NjlB
OTNFNDIxRkY0QkYwNzg3OEY3RkUxREIxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OTM3MDk3RTE0Qjg2OUE5M0U0
MjFGRjRCRjA3ODc4RjdGRTFEQjEyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA0QTJERjM0RTRGMjMyRTRCODlEMzg2QkNDODM3NDM2MEM0MkJCOTQw
RTc3REREOEIzNTgwMEI2MzU1Q0JCMy8wLzMxMzYzODJlMzEzOTM0MmUzMTM5Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzAzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMLH
MA0GCSqGSIb3DQEBCwUAA4IBAQB5oF+u3d29fIiTItShqx0Rhd4UxmMPucD6VJ7R
Cso1MvwhQET+OIKk3P/L+uV8IF7Bw4HONirWZTN+ANr5TYmIt96W97n17Lfjksit
xw2G+YObeda6DnWCyKaVNpsW/caC+qxtxrfSPqRwBCEj4a4RvgemSa8yLNnA5ihw
I1c3YnX+Ov571vF0N6o1ne6wErYSxw6mviDWZLxDPThgOIo97BPj4OwbS/2kvnx9
CkaQnzbV2Gsxom6JIXenhv/1kRDFSiqsOri+vIC1oURDqnA3kofYwEqZuqLfguGk
HGrbyAHjiwNryoVeYFJSy6AZ0wGagT7KeIZtpKLnNfNK2u4t
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:32:05 2025 by rpki-client