Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36382e302f32332d3234203d3e203237393437.roa
File: 3139302e3130372e36382e302f32332d3234203d3e203237393437.roa (raw, json)
Hash identifier: im75sBID3lTQ3oQdOmDeR+qqv14EnAvupxR1ERTHjn0=
Subject key identifier: AB:5A:B3:E0:86:01:05:47:33:C5:9E:5D:1C:60:21:C5:28:CC:55:40
Certificate issuer: /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial: 68397C00FDA19C57258287DCAD16306B6AC2E9CE
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36382e302f32332d3234203d3e203237393437.roa
Signing time: Tue 05 Mar 2024 17:57:01 +0000
ROA not before: Tue 05 Mar 2024 17:52:01 +0000
ROA not after: Tue 04 Mar 2025 17:57:01 +0000
asID: 27947
IP address blocks: 190.107.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:39:7c:00:fd:a1:9c:57:25:82:87:dc:ad:16:30:6b:6a:c2:e9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Validity
Not Before: Mar 5 17:52:01 2024 GMT
Not After : Mar 4 17:57:01 2025 GMT
Subject: CN=AB5AB3E08601054733C59E5D1C6021C528CC5540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:0a:5f:48:71:3e:6d:c4:1a:08:57:51:ca:
be:04:1e:22:1a:16:ae:59:16:f7:82:89:6e:08:06:
17:84:09:72:bd:ba:e3:23:f7:01:11:d3:b1:7c:d8:
f2:10:18:c7:7a:4f:37:4e:db:73:8c:91:03:8f:10:
d8:f9:0b:7b:37:6f:01:26:ae:46:ab:99:23:5e:22:
40:63:27:b7:5d:16:90:76:fa:9a:1a:23:10:c6:46:
e9:2e:8f:21:d5:53:3b:4e:aa:67:3a:5b:7a:c4:f2:
a3:36:71:8e:b6:82:9e:65:5f:a7:01:f3:05:ad:3e:
4b:b7:b3:14:e7:16:99:4e:0e:21:73:69:7d:83:38:
d3:5b:83:ae:8c:a8:64:89:5c:29:b4:8c:26:ce:24:
be:46:1e:24:a5:c4:5f:66:44:44:a1:43:f9:ae:0c:
b3:b2:70:bd:3a:59:95:e7:39:ef:10:27:0d:fb:84:
1e:0e:38:68:6c:d0:8f:77:2d:e4:38:2b:9f:8f:d9:
84:85:2f:01:49:67:c0:c8:32:36:74:f4:0c:ea:ce:
81:40:51:c9:74:10:07:2b:e8:af:23:a1:18:5d:9e:
bb:d8:32:42:5a:e0:e6:3a:1f:44:5d:2c:be:de:30:
44:cc:40:fe:46:ba:64:34:12:27:0e:0d:7c:f4:8c:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5A:B3:E0:86:01:05:47:33:C5:9E:5D:1C:60:21:C5:28:CC:55:40
X509v3 Authority Key Identifier:
keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36382e302f32332d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.68.0/23
Signature Algorithm: sha256WithRSAEncryption
02:32:1d:77:3b:69:9a:e1:28:4f:62:41:cf:0a:c1:f0:ba:b6:
3a:68:3b:b0:65:3c:77:38:87:a8:2c:b9:2c:bd:0a:ca:ec:18:
94:f8:89:99:34:3e:e9:04:ed:f9:25:17:a0:ce:7a:6b:19:19:
6f:a7:44:14:7a:06:c3:6c:f6:29:7d:2a:19:c0:f8:e5:8f:9e:
28:c6:00:ef:39:5b:7a:8d:06:c8:f0:14:84:e5:12:0f:34:70:
92:31:63:7e:b2:13:21:dc:34:8b:45:f9:2c:68:94:2b:5a:33:
2c:c8:20:37:14:b7:29:d4:23:6c:4c:ab:08:f1:21:d0:2a:db:
76:99:8c:a8:75:41:09:d4:6a:42:9d:5b:3d:8e:df:b8:b8:be:
79:87:10:07:83:26:10:c0:58:34:2a:be:dd:8b:a7:60:28:88:
87:26:61:84:0c:68:b0:bd:47:2c:1d:7b:f2:77:65:9c:62:ee:
f3:77:49:e8:d3:b9:63:37:b4:29:d4:0f:98:f4:ac:7e:c4:f3:
a3:5f:56:d7:70:a5:72:b7:eb:bf:ee:55:46:cc:cf:68:fe:f8:
af:08:23:49:16:ee:39:6b:6b:23:d8:c1:19:dd:42:4a:da:f3:
56:78:de:61:68:99:f7:23:12:7b:c8:cd:62:fa:3e:d6:6f:ad:
80:c7:3e:0f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaDl8AP2hnFclgofcrRYwa2rC6c4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGMzhDNkNCODNBMzMwQ0M2RDVBODczODNDNjEyMzE5
RUE2MjY3MzAeFw0yNDAzMDUxNzUyMDFaFw0yNTAzMDQxNzU3MDFaMDMxMTAvBgNV
BAMTKEFCNUFCM0UwODYwMTA1NDczM0M1OUU1RDFDNjAyMUM1MjhDQzU1NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pQpfSHE+bcQaCFdRyr4EHiIa
Fq5ZFveCiW4IBheECXK9uuMj9wER07F82PIQGMd6TzdO23OMkQOPENj5C3s3bwEm
rkarmSNeIkBjJ7ddFpB2+poaIxDGRukujyHVUztOqmc6W3rE8qM2cY62gp5lX6cB
8wWtPku3sxTnFplODiFzaX2DONNbg66MqGSJXCm0jCbOJL5GHiSlxF9mREShQ/mu
DLOycL06WZXnOe8QJw37hB4OOGhs0I93LeQ4K5+P2YSFLwFJZ8DIMjZ09AzqzoFA
Ucl0EAcr6K8joRhdnrvYMkJa4OY6H0RdLL7eMETMQP5GumQ0EicODXz0jPjtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUq1qz4IYBBUczxZ5dHGAhxSjMVUAwHwYDVR0j
BBgwFoAU/vOMbLg6MwzG1ahzg8YSMZ6mJnMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENzM2MTc4OTI1MEJBOTlGRjYzNjRGQkNGRDlDQkZGREY4
MDBCNDlDNkQxQTFCNDJDNTFFNEE3MDE2QkUxOTAyLzAvRkVGMzhDNkNCODNBMzMw
Q0M2RDVBODczODNDNjEyMzE5RUE2MjY3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRUYzOEM2Q0I4M0EzMzBDQzZE
NUE4NzM4M0M2MTIzMTlFQTYyNjczLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDczNjE3ODkyNTBCQTk5RkY2MzY0RkJDRkQ5Q0JGRkRGODAwQjQ5QzZE
MUExQjQyQzUxRTRBNzAxNkJFMTkwMi8wLzMxMzkzMDJlMzEzMDM3MmUzNjM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5rRDAN
BgkqhkiG9w0BAQsFAAOCAQEAAjIddztpmuEoT2JBzwrB8Lq2Omg7sGU8dziHqCy5
LL0KyuwYlPiJmTQ+6QTt+SUXoM56axkZb6dEFHoGw2z2KX0qGcD45Y+eKMYA7zlb
eo0GyPAUhOUSDzRwkjFjfrITIdw0i0X5LGiUK1ozLMggNxS3KdQjbEyrCPEh0Crb
dpmMqHVBCdRqQp1bPY7fuLi+eYcQB4MmEMBYNCq+3YunYCiIhyZhhAxosL1HLB17
8ndlnGLu83dJ6NO5Yze0KdQPmPSsfsTzo19W13Clcrfrv+5VRszPaP74rwgjSRbu
OWtrI9jBGd1CStrzVnjeYWiZ9yMSe8jNYvo+1m+tgMc+Dw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:39:27 2025 by rpki-client