Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa
File: 3139302e35372e37322e302f32322d3234203d3e203132313237.roa (raw, json)
Hash identifier: K72Jpe5griWpK18J09cvC9mowcTxm6tOaGxb6H73K+I=
Subject key identifier: 86:97:36:86:4E:E1:2C:50:88:D0:74:89:06:6F:DA:1B:2B:D8:DA:27
Certificate issuer: /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial: 16B37EC9438182E73119FA31CA6A85DD8E957F73
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa
Signing time: Tue 05 Mar 2024 18:06:57 +0000
ROA not before: Tue 05 Mar 2024 18:01:57 +0000
ROA not after: Tue 04 Mar 2025 18:06:57 +0000
asID: 12127
IP address blocks: 190.57.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b3:7e:c9:43:81:82:e7:31:19:fa:31:ca:6a:85:dd:8e:95:7f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Validity
Not Before: Mar 5 18:01:57 2024 GMT
Not After : Mar 4 18:06:57 2025 GMT
Subject: CN=869736864EE12C5088D07489066FDA1B2BD8DA27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e9:2c:87:a9:4c:6e:cc:24:e9:17:a8:00:52:
4e:44:0b:2f:c8:a9:e0:d2:23:38:6d:59:6a:60:9c:
80:f8:1a:2d:20:3e:7f:0b:95:e2:e6:81:00:8a:39:
bb:ed:8b:65:b1:bd:29:a6:be:95:88:fd:3c:a6:9c:
0e:c5:42:ea:f5:51:ea:a5:bf:69:e4:78:32:85:e6:
44:c6:f7:90:07:95:65:1c:a9:6f:6a:8b:3f:1c:df:
c7:87:2b:57:44:d8:e5:8e:8c:5f:6d:19:fd:ec:9c:
6d:bc:ac:31:27:00:55:af:c4:25:a0:74:ad:9e:e7:
5b:e6:61:7d:97:1e:a5:65:f5:3e:b2:b2:42:d5:b5:
c8:65:ff:80:dd:aa:4d:75:77:f6:9a:b6:5f:08:cd:
65:7c:ca:73:86:24:f8:78:a8:8e:c3:9c:02:a6:3b:
8a:08:d0:0b:9f:f3:39:e8:f4:98:c9:f1:f5:64:34:
4f:95:5f:ae:1c:a2:b4:6c:47:b8:20:8c:74:73:1a:
8f:f0:bf:84:ed:1c:9a:02:2e:0b:4a:f7:d8:22:38:
76:94:a6:c0:b8:2c:c4:d6:17:95:f4:5b:8e:5b:b7:
2c:dc:03:83:bc:83:bf:b3:a4:39:a0:6e:a8:6d:b1:
b1:65:0b:cc:71:22:73:d6:94:bd:bc:f2:79:3e:69:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:97:36:86:4E:E1:2C:50:88:D0:74:89:06:6F:DA:1B:2B:D8:DA:27
X509v3 Authority Key Identifier:
keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e37322e302f32322d3234203d3e203132313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.57.72.0/22
Signature Algorithm: sha256WithRSAEncryption
92:54:01:66:5c:a0:fe:ff:ec:b3:12:9d:a5:86:d8:70:a2:ad:
ae:6d:0b:d9:d2:ef:08:0f:6b:a7:e6:82:d5:a2:d4:03:21:06:
24:36:c2:45:a6:7e:d7:91:e1:27:79:19:2e:6c:cf:31:cb:5f:
e8:63:1c:45:6b:bf:ed:38:ec:db:62:be:75:b3:ed:6d:79:86:
2c:26:6c:89:01:74:78:62:84:0c:89:80:06:8b:68:a1:43:f0:
95:02:9b:a9:46:d0:1b:28:29:9e:a9:75:38:76:68:cd:83:ef:
9e:8d:96:cc:8b:f1:66:f5:f3:67:61:12:28:aa:8b:fb:1c:66:
74:2c:21:7f:14:77:24:d2:5a:33:38:5e:83:80:c3:ea:d0:60:
51:7f:0f:2f:49:d1:9a:e7:0e:d3:7a:13:bf:f4:a4:64:47:81:
0e:8e:bd:e5:8b:66:1f:43:78:45:b0:aa:91:41:f2:34:09:ac:
3c:68:6f:99:48:18:48:f7:81:bf:46:46:20:4a:c8:ff:12:92:
dc:50:73:ee:4f:e7:45:31:30:a8:2f:9c:16:bf:c7:ea:84:d4:
24:ec:ce:65:7f:fa:22:27:d0:2a:5f:88:5c:21:48:5b:ed:83:
d0:59:4f:e6:65:bc:61:77:90:5b:a7:29:90:f1:73:c3:3a:88:
57:52:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:32:04 2025 by rpki-client