Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/bf34b456390eb0e22796f02768ab1b78ef233492.roa
File: bf34b456390eb0e22796f02768ab1b78ef233492.roa (raw, json)
Hash identifier: 45Arka+QROs3w+eEXqrY4NPUHK+00QXBGSa83xnvPJ4=
Subject key identifier: BB:44:5D:1F:33:36:54:B5:79:97:12:A6:10:59:BF:21:02:93:AE:9A
Certificate issuer: /CN=a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f
Certificate serial: 210601
Authority key identifier: DB:EE:7B:EC:56:4F:90:5D:60:8E:8A:D7:C2:54:C5:D8:32:57:10:50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/bf34b456390eb0e22796f02768ab1b78ef233492.roa
Signing time: Wed 06 Dec 2023 18:06:17 +0000
ROA not before: Wed 06 Dec 2023 18:06:17 +0000
ROA not after: Sat 06 Dec 2025 18:06:17 +0000
asID: 264688
IP address blocks: 190.107.240.0/21 maxlen: 24
190.196.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164225 (0x210601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f
Validity
Not Before: Dec 6 18:06:17 2023 GMT
Not After : Dec 6 18:06:17 2025 GMT
Subject: CN=bf34b456390eb0e22796f02768ab1b78ef233492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:70:09:ca:46:43:71:60:9b:d2:b3:d0:6c:a3:
24:e1:c9:95:c0:b8:25:50:31:be:f3:d5:cd:42:bb:
1e:69:3a:8b:87:0e:4d:3a:3b:15:c8:9c:24:6f:8a:
3f:ad:bd:5b:67:3e:9e:a5:30:0a:35:ef:44:01:66:
c6:10:7a:ab:cb:73:03:7a:aa:2c:af:48:da:1b:39:
ca:c0:21:d5:26:29:53:a5:ae:4d:2d:2d:42:a4:33:
91:5a:76:c4:10:29:df:38:79:f6:60:cd:65:5a:c5:
4a:13:c4:6a:45:b6:56:47:0a:16:90:a8:19:3e:b7:
23:d5:45:6b:b7:62:7e:c7:bf:1c:da:11:a7:d5:50:
a9:c7:4a:3e:d2:8c:be:b4:36:58:92:9d:02:bd:2e:
e0:fc:cf:ea:66:83:9a:fd:95:71:f9:62:db:ad:44:
27:1f:20:0c:f3:05:09:27:57:b6:d5:cc:88:9b:6f:
97:0a:ae:c1:8c:e7:c9:3e:39:56:aa:8e:bc:f7:1d:
a8:28:6a:51:b4:49:78:1a:1e:bd:5f:8c:50:aa:04:
df:0a:e1:33:7a:86:61:e6:98:fc:f5:16:ce:16:e2:
fc:18:0e:e0:ab:28:fa:1c:75:ba:dc:4a:0a:d9:48:
9f:a8:06:2b:f3:e8:3d:2c:7f:2e:ca:cd:82:6d:af:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:5D:1F:33:36:54:B5:79:97:12:A6:10:59:BF:21:02:93:AE:9A
X509v3 Authority Key Identifier:
keyid:DB:EE:7B:EC:56:4F:90:5D:60:8E:8A:D7:C2:54:C5:D8:32:57:10:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/bf34b456390eb0e22796f02768ab1b78ef233492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.240.0/21
190.196.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:97:c0:3d:97:05:a7:dc:ef:7f:3f:50:1a:79:25:83:61:f5:
81:b9:af:14:ff:09:8e:01:b1:33:21:cc:9c:c7:82:70:ba:ad:
76:6e:4a:eb:2d:55:54:4d:ff:22:e5:3f:b2:e4:90:ff:95:07:
0d:ed:17:51:47:0a:b4:33:9f:db:da:4a:40:39:41:56:be:d5:
7c:4e:1e:19:45:e2:1b:ca:87:50:69:d6:20:bc:02:fc:21:68:
a0:7b:6e:89:b2:34:26:d3:a1:af:84:ec:30:e9:25:00:66:fe:
b9:6e:d1:fd:3f:9d:29:54:ca:86:9c:78:18:8b:fb:6c:e0:7e:
8e:dc:cb:14:c7:2f:a7:7e:42:36:e0:02:44:5e:f6:d8:75:d1:
be:a5:af:1d:29:a0:fd:10:6d:62:b6:a2:ff:70:fe:e6:d5:90:
a9:76:07:c6:5d:7e:cf:5e:62:d6:05:1b:57:83:ce:5c:70:56:
2d:7d:87:f4:70:ef:34:3e:05:12:f4:ff:78:be:70:90:23:78:
a3:15:c7:7b:30:ed:9f:c5:95:7b:8a:6a:2b:86:bc:7b:04:e7:
90:f8:2c:55:44:ba:1c:fe:0d:c4:ef:83:b8:38:4b:8c:0d:00:
1a:db:83:85:7c:e3:77:01:08:e9:cf:d6:a4:84:68:8b:69:07:
6a:7a:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:28 2025 by rpki-client