Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa
File: 3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa (raw, json)
Hash identifier: 4NohnYHKtXn9NdTidxB1oUWicV+8BmN/PPtBbfogRNc=
Subject key identifier: 83:77:BD:32:66:F6:23:1D:BB:C0:4B:67:41:D7:38:10:75:E8:A6:85
Certificate issuer: /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial: 31982041F8C29165A1F1EE05584EDD82F9B47497
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa
Signing time: Tue 05 Mar 2024 17:46:15 +0000
ROA not before: Tue 05 Mar 2024 17:41:15 +0000
ROA not after: Tue 04 Mar 2025 17:46:15 +0000
asID: 28073
IP address blocks: 190.123.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:98:20:41:f8:c2:91:65:a1:f1:ee:05:58:4e:dd:82:f9:b4:74:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Validity
Not Before: Mar 5 17:41:15 2024 GMT
Not After : Mar 4 17:46:15 2025 GMT
Subject: CN=8377BD3266F6231DBBC04B6741D7381075E8A685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:8d:09:26:ff:5f:f6:ed:42:d8:6f:b6:2f:
e7:7c:1f:9a:fe:e2:52:12:5b:ff:97:ee:8b:8b:46:
d0:9b:36:c3:b3:a4:4a:85:e4:b5:4b:66:e7:d5:e4:
df:a9:c6:a0:69:63:ec:b4:80:2a:e4:49:f1:f8:5a:
e9:b4:c3:91:ac:aa:f9:be:78:3c:0b:ec:e3:17:36:
8b:86:ef:46:8c:a3:d0:14:fb:26:e2:04:7a:8a:4c:
a8:0b:53:ec:53:b6:97:02:9f:69:1a:e7:5a:da:d9:
88:bd:f4:3b:06:00:6c:58:9a:f0:32:d3:68:06:27:
5f:9d:45:f8:d5:cb:81:6e:69:0b:ca:59:6f:fd:31:
53:27:de:0f:74:54:6f:27:15:81:36:0b:1a:f5:b2:
72:f4:c6:a5:be:5b:10:98:b4:11:1c:a1:91:3a:b7:
c8:29:ba:22:e5:f0:8f:92:82:47:ca:37:cf:1c:58:
4f:db:53:78:a6:66:bc:73:38:a9:c2:4d:c5:1c:19:
88:d5:64:d1:0f:75:06:6c:97:4d:9f:a9:26:05:81:
3a:f0:db:18:3d:02:4a:89:6e:f8:c6:be:df:a9:cd:
31:1d:77:c5:ef:1f:0a:1a:90:fd:8e:c1:e8:04:bb:
c0:2c:5b:a0:3a:eb:67:71:23:e3:c5:43:8e:48:8c:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:77:BD:32:66:F6:23:1D:BB:C0:4B:67:41:D7:38:10:75:E8:A6:85
X509v3 Authority Key Identifier:
keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e3132332e3134342e302f32302d3234203d3e203238303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:6d:ca:6e:e0:5b:a5:7f:36:2c:1b:8d:06:94:d3:8e:d5:1d:
70:20:46:31:ea:63:b1:01:f3:fe:09:ef:40:26:fd:b4:24:20:
2b:3f:e8:1a:7c:c4:15:a2:95:32:cb:f4:bc:7a:df:21:3b:9d:
30:95:47:c9:2c:87:be:6e:8f:10:51:ad:a9:dc:19:f2:c3:e2:
91:fd:7d:15:c1:47:d4:42:55:54:cb:ed:31:3e:fa:17:46:1f:
1e:44:0f:1b:4f:e8:e7:79:35:76:ae:72:e0:38:25:9f:91:d1:
f0:c3:b1:79:41:7e:65:94:35:23:4d:e6:9f:14:75:95:0a:ff:
02:43:d5:c1:fb:62:67:e0:a2:99:ca:c2:d6:a1:7b:c9:fc:68:
fe:c0:44:56:28:43:0b:61:08:57:dd:ed:6d:ab:dc:91:56:06:
96:1b:14:41:94:fe:7c:5d:8a:ed:29:9b:40:6f:11:e4:b2:68:
b9:5f:2a:62:6c:67:0a:fc:f3:85:2b:e9:88:32:df:0c:5a:da:
a7:de:7d:77:11:9a:44:96:9f:a6:71:0e:da:4f:4c:3d:26:33:
9b:74:cb:6d:48:c1:4a:b7:90:00:8d:39:74:86:f1:e1:05:1e:
4b:7b:05:e5:7a:5b:c3:89:36:a0:04:e5:bc:7d:79:da:39:5b:
e2:56:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:46:27 2025 by rpki-client