Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35382e302f32342d3234203d3e203132313237.roa
File: 3139302e35372e35382e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier: 6dPEPeic1kfmlaIcDx7EJeFPR5WD/A6n40vRcWajASc=
Subject key identifier: FA:2A:1B:CF:E3:90:99:4E:4F:91:91:E0:2B:54:71:C0:30:87:F2:D7
Certificate issuer: /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial: 2281CF9BAA9636A142552A4DD40DF2FAA5FD4FC3
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35382e302f32342d3234203d3e203132313237.roa
Signing time: Tue 05 Mar 2024 18:07:01 +0000
ROA not before: Tue 05 Mar 2024 18:02:01 +0000
ROA not after: Tue 04 Mar 2025 18:07:01 +0000
asID: 12127
IP address blocks: 190.57.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:81:cf:9b:aa:96:36:a1:42:55:2a:4d:d4:0d:f2:fa:a5:fd:4f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Validity
Not Before: Mar 5 18:02:01 2024 GMT
Not After : Mar 4 18:07:01 2025 GMT
Subject: CN=FA2A1BCFE390994E4F9191E02B5471C03087F2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:52:f7:92:3f:df:69:0d:82:8b:22:cd:82:
73:ff:3b:f3:5b:65:38:28:0a:d3:6d:31:7e:88:3b:
4d:d5:dc:30:3f:b4:db:1f:1b:ff:9c:c4:99:81:41:
7d:87:d7:8f:8e:b5:48:b2:42:91:49:32:97:7f:a8:
14:5e:80:91:c4:29:1b:56:d1:07:0a:cf:c7:8e:2e:
7f:eb:fb:45:6e:7b:70:20:da:fb:fe:04:f4:89:13:
4c:c9:70:06:19:2b:c5:f4:b3:13:a1:7c:80:7c:7a:
fb:22:d5:dc:de:dc:0f:d1:7d:3a:86:81:5a:6c:0b:
ae:ff:e0:b6:c0:82:6f:65:dd:ce:d0:65:47:cf:f9:
2d:45:a2:01:6d:4b:63:7e:0c:cd:cb:e0:48:93:2f:
f7:45:ee:bd:54:bb:f2:ec:fe:43:f2:3e:27:be:88:
fb:46:a0:6f:b8:f2:ef:47:98:cf:9b:0a:63:e1:2a:
35:ba:fd:25:67:c5:06:79:23:82:f0:27:46:cd:9a:
8e:bf:09:5c:61:f4:34:a4:84:0b:33:a9:be:2d:a3:
d1:df:ed:7b:43:68:ac:6b:4d:cf:f0:7c:fa:22:54:
bc:3d:ec:71:ca:94:3d:66:f4:32:b4:da:87:fa:41:
5c:f5:0b:bf:b6:99:d2:0e:61:57:69:33:d0:ab:26:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:1B:CF:E3:90:99:4E:4F:91:91:E0:2B:54:71:C0:30:87:F2:D7
X509v3 Authority Key Identifier:
keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35382e302f32342d3234203d3e203132313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.57.58.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5f:68:b4:66:bc:4a:81:28:ee:44:93:ac:9f:27:15:df:c5:
60:0e:6b:f3:ad:08:ca:bd:dc:57:a5:e3:11:7c:d3:42:5a:4e:
5c:e4:10:ee:55:4a:98:e5:3b:f3:52:31:30:e4:3a:d8:58:14:
de:51:87:f8:80:49:fc:f4:35:e1:c8:69:26:99:a1:a9:5b:d1:
29:9f:5d:9d:5f:0e:9f:de:0f:de:1b:04:0c:ac:dd:5a:1d:df:
f3:6b:dd:a8:a4:9d:1d:45:be:22:f4:52:47:60:77:cb:9c:fc:
5b:48:d1:f6:a1:8b:f4:9f:6f:54:3a:c9:ae:51:34:1b:5a:3c:
98:d5:f9:24:ce:a0:fb:d0:59:52:ce:ce:b6:f2:d3:ed:bb:d5:
83:37:76:9f:ec:99:e4:60:5d:15:ce:6b:42:75:54:c4:d4:b5:
ab:73:6d:96:cb:27:9f:7f:ad:e4:60:2a:f6:7c:49:37:f7:7b:
3a:c1:2c:6d:03:5b:39:47:fb:1d:c5:94:ae:a0:8b:79:7d:1b:
71:42:54:c9:b8:bf:48:9d:15:81:36:7d:38:e5:59:3a:ce:b1:
56:27:c3:e5:ea:db:4c:d8:1a:45:99:af:bd:e4:3c:88:84:e2:
f0:21:fb:f5:9a:52:d5:16:c0:c5:aa:33:89:3d:ec:60:2a:32:
99:46:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:56:43 2025 by rpki-client