Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230302e302f32332d3233203d3e203230343733.roa
File: 3139302e3131322e3230302e302f32332d3233203d3e203230343733.roa (raw, json)
Hash identifier: k4lWpCgFCkBONl23wkzMfZKcGDIPwoXk1m9TK1iBa/w=
Subject key identifier: 32:0B:07:91:8F:38:BC:E9:BC:93:A7:31:8D:19:56:8B:06:79:D1:42
Certificate issuer: /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial: 7F8A258A2B806E50A3BE9973E9E595B7B06599B6
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230302e302f32332d3233203d3e203230343733.roa
Signing time: Tue 29 Jul 2025 15:25:01 +0000
ROA not before: Tue 29 Jul 2025 15:20:01 +0000
ROA not after: Tue 28 Jul 2026 15:25:01 +0000
asID: 20473
IP address blocks: 190.112.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:8a:25:8a:2b:80:6e:50:a3:be:99:73:e9:e5:95:b7:b0:65:99:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Validity
Not Before: Jul 29 15:20:01 2025 GMT
Not After : Jul 28 15:25:01 2026 GMT
Subject: CN=320B07918F38BCE9BC93A7318D19568B0679D142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:68:22:02:e1:27:9a:ea:7f:5d:94:bd:d9:
14:b7:32:9e:d4:83:81:39:88:b2:08:3d:41:82:71:
60:3d:9b:03:32:90:99:cd:c9:bc:de:3e:55:62:02:
be:07:4d:1a:63:81:57:94:f3:d4:56:9f:5c:ce:8e:
7d:1b:8b:97:ad:1c:fd:6b:22:ae:1d:85:d4:c9:eb:
2e:f6:56:24:71:25:61:e9:57:81:83:a6:eb:d3:93:
e9:f4:5c:82:87:6d:e1:64:92:25:2b:b7:e7:79:38:
52:87:34:6d:79:de:54:f4:2d:dd:1f:42:5f:0b:e2:
c4:78:00:1f:a5:73:28:01:4d:63:ca:4e:21:30:ae:
d2:b8:eb:dc:1b:e6:74:08:06:fe:6b:ac:15:e1:d3:
5a:f0:f1:fe:aa:0c:b8:75:61:f6:a2:cf:4b:d9:f2:
45:c0:2f:ba:a3:da:f2:30:2c:96:b6:50:f2:b1:96:
25:fa:eb:7d:96:ee:d3:7f:17:63:fa:45:da:5f:bc:
68:85:e4:1d:ab:fd:38:36:0d:8d:b6:f7:9c:88:fe:
4b:8a:f5:56:1d:d5:2a:36:d8:fd:46:b6:11:6d:df:
a5:6c:e3:7e:02:06:a5:d7:0c:47:b3:68:8d:34:91:
f0:69:53:41:b5:9f:aa:17:ed:0f:ef:70:c6:b4:e0:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:07:91:8F:38:BC:E9:BC:93:A7:31:8D:19:56:8B:06:79:D1:42
X509v3 Authority Key Identifier:
keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230302e302f32332d3233203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.200.0/23
Signature Algorithm: sha256WithRSAEncryption
01:5b:27:bc:cc:f9:72:aa:fe:a0:d8:73:e9:62:9f:2b:b0:e1:
be:e8:f6:06:97:ea:4b:f9:6f:ec:40:d6:46:d0:af:c3:f3:5f:
80:84:b9:5a:c3:7c:cf:f0:55:78:4d:e7:12:8f:3f:ac:cc:e3:
10:12:15:91:9d:d2:8c:49:e6:4e:c8:50:bb:97:db:e5:18:5f:
3e:19:0c:3b:a8:0b:06:b1:ac:14:7a:fe:18:21:de:01:c4:f2:
76:21:03:f9:4a:35:e5:49:04:73:03:fe:be:b9:77:73:66:2e:
d2:34:d3:88:09:69:e6:81:b4:11:f2:3d:17:13:e3:9e:8d:e8:
e8:b3:c6:f3:33:5d:87:75:cb:5b:45:77:df:a4:83:e7:a7:f8:
66:fe:77:b7:33:e3:66:40:38:ef:7d:27:bb:63:9f:ce:31:2e:
bb:af:f9:cb:34:80:a8:e1:d4:82:33:af:56:b6:0b:ac:9c:ae:
22:bb:22:30:37:8b:96:1e:0c:85:43:ec:db:4b:9b:69:f2:a5:
99:ab:71:fa:76:e2:2c:d7:f7:6f:a6:df:ea:78:c2:06:f4:c0:
2b:93:55:2a:4f:f0:77:5f:9d:1c:c6:57:22:ba:10:4e:c9:e6:
df:cc:77:df:7a:1c:cb:e7:90:d9:b8:96:23:cd:9d:0e:03:48:
37:77:64:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:44:27 2025 by rpki-client