Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A5A758FECA96F213D1555CE28C06E214B08283AFCD45B000A155328585FB1B17/0/3139302e31342e33362e302f32322d3234203d3e203532343639.roa
File: 3139302e31342e33362e302f32322d3234203d3e203532343639.roa (raw, json)
Hash identifier: BRdLnKDJrSF+C6yN0LGG7XH0TlRhvXVvnzZ+Otp3Tug=
Subject key identifier: AE:D5:A1:3F:4A:18:5E:52:D9:81:EB:E1:6F:61:81:53:62:F3:B5:80
Certificate issuer: /CN=61372174C3CAB0AD27BBDFC0FD9FCE82FF71208C
Certificate serial: 73525E90F02025CB37639717B3317B0073D9F8A8
Authority key identifier: 61:37:21:74:C3:CA:B0:AD:27:BB:DF:C0:FD:9F:CE:82:FF:71:20:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61372174C3CAB0AD27BBDFC0FD9FCE82FF71208C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A5A758FECA96F213D1555CE28C06E214B08283AFCD45B000A155328585FB1B17/0/3139302e31342e33362e302f32322d3234203d3e203532343639.roa
Signing time: Mon 21 Apr 2025 17:50:00 +0000
ROA not before: Mon 21 Apr 2025 17:45:00 +0000
ROA not after: Mon 20 Apr 2026 17:50:00 +0000
asID: 52469
IP address blocks: 190.14.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:52:5e:90:f0:20:25:cb:37:63:97:17:b3:31:7b:00:73:d9:f8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61372174C3CAB0AD27BBDFC0FD9FCE82FF71208C
Validity
Not Before: Apr 21 17:45:00 2025 GMT
Not After : Apr 20 17:50:00 2026 GMT
Subject: CN=AED5A13F4A185E52D981EBE16F61815362F3B580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:e5:b3:5e:df:41:34:c8:79:3f:3d:46:59:
db:88:5a:f7:ec:8a:95:52:b6:e9:cf:f5:ba:43:f9:
13:79:33:2e:1d:e8:4d:c8:93:be:bd:f6:8a:70:b3:
28:04:11:0c:47:20:ca:e4:17:90:24:8a:98:d4:79:
c6:a3:4e:44:65:2f:95:81:a0:c5:c2:e0:31:11:12:
0d:5d:fe:0f:27:53:f6:09:75:9a:53:6a:91:ab:3f:
fa:7e:ca:7c:bc:bd:03:18:00:13:ac:29:eb:62:8e:
b5:d4:73:98:47:33:52:be:0d:30:0a:19:75:9e:e1:
41:cd:46:6d:a3:06:38:83:31:fa:f0:66:3b:09:ac:
f9:ab:b2:0e:dc:c1:19:c3:ff:73:06:3a:10:bf:a7:
02:d1:02:a2:ed:c0:dd:49:b8:d9:55:5f:68:64:62:
52:bb:c0:de:8a:c4:2a:b2:18:5b:99:e7:bf:c2:c9:
7a:27:2d:c0:56:09:b3:33:f9:ef:21:23:93:76:e9:
e2:81:2e:12:f3:84:d8:15:3c:0b:26:ce:53:58:7a:
9c:dc:3a:f5:23:69:a5:cc:50:b6:fa:26:0e:0c:ca:
98:1b:35:c1:65:9b:05:10:b4:ba:28:bd:09:a5:22:
4d:3c:af:72:ad:93:8d:8a:3e:68:ab:94:90:d1:c4:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D5:A1:3F:4A:18:5E:52:D9:81:EB:E1:6F:61:81:53:62:F3:B5:80
X509v3 Authority Key Identifier:
keyid:61:37:21:74:C3:CA:B0:AD:27:BB:DF:C0:FD:9F:CE:82:FF:71:20:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A5A758FECA96F213D1555CE28C06E214B08283AFCD45B000A155328585FB1B17/0/61372174C3CAB0AD27BBDFC0FD9FCE82FF71208C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61372174C3CAB0AD27BBDFC0FD9FCE82FF71208C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A5A758FECA96F213D1555CE28C06E214B08283AFCD45B000A155328585FB1B17/0/3139302e31342e33362e302f32322d3234203d3e203532343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.36.0/22
Signature Algorithm: sha256WithRSAEncryption
24:39:a1:48:d6:2d:12:62:5d:b5:c9:6a:87:7b:60:3a:6a:5e:
70:67:cf:f6:c1:26:7f:3f:d2:32:18:76:9a:a4:7d:91:a0:fb:
4c:e9:e1:ac:1e:58:08:05:a1:cf:af:f2:09:52:1b:9e:b1:61:
76:bf:85:c0:da:c2:3a:b2:33:03:17:f2:d9:50:e8:a7:16:20:
dd:fb:b1:cc:09:98:61:45:75:59:11:65:27:e7:33:33:6d:c8:
84:bf:d0:be:45:05:81:20:d6:d6:9b:ee:2e:14:78:50:5d:92:
65:3b:d6:02:46:46:ab:31:d6:64:d1:05:2e:55:b1:cc:ad:b2:
fd:35:7c:d7:3e:28:0a:18:1b:b4:ce:79:54:5b:bd:8f:aa:27:
2e:f7:f1:f9:99:a1:42:97:a2:b2:6d:13:f5:8b:14:b7:0f:bd:
b3:4f:95:45:e7:ed:5e:d1:92:8b:93:71:8a:a1:21:34:71:0d:
2d:db:06:ce:11:6a:99:d5:6b:6f:25:b0:07:31:17:a2:d9:e0:
62:b7:ad:48:10:db:9f:a6:0a:35:5c:4e:ae:0b:6c:1f:e4:d1:
86:36:29:62:be:8d:4c:84:9a:bd:ba:84:ab:e6:dd:a5:95:44:
43:bb:c1:42:ef:00:12:d2:f1:a2:ea:cf:54:14:f5:d7:09:d5:
39:bc:25:ad
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUc1JekPAgJcs3Y5cXszF7AHPZ+KgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEzNzIxNzRDM0NBQjBBRDI3QkJERkMwRkQ5RkNFODJG
RjcxMjA4QzAeFw0yNTA0MjExNzQ1MDBaFw0yNjA0MjAxNzUwMDBaMDMxMTAvBgNV
BAMTKEFFRDVBMTNGNEExODVFNTJEOTgxRUJFMTZGNjE4MTUzNjJGM0I1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4N+WzXt9BNMh5Pz1GWduIWvfs
ipVStunP9bpD+RN5My4d6E3Ik7699opwsygEEQxHIMrkF5AkipjUecajTkRlL5WB
oMXC4DEREg1d/g8nU/YJdZpTapGrP/p+yny8vQMYABOsKetijrXUc5hHM1K+DTAK
GXWe4UHNRm2jBjiDMfrwZjsJrPmrsg7cwRnD/3MGOhC/pwLRAqLtwN1JuNlVX2hk
YlK7wN6KxCqyGFuZ57/CyXonLcBWCbMz+e8hI5N26eKBLhLzhNgVPAsmzlNYepzc
OvUjaaXMULb6Jg4MypgbNcFlmwUQtLoovQmlIk08r3Ktk42KPmirlJDRxMptAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUrtWhP0oYXlLZgevhb2GBU2LztYAwHwYDVR0j
BBgwFoAUYTchdMPKsK0nu9/A/Z/Ogv9xIIwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNUE3NThGRUNBOTZGMjEzRDE1NTVDRTI4QzA2RTIxNEIw
ODI4M0FGQ0Q0NUIwMDBBMTU1MzI4NTg1RkIxQjE3LzAvNjEzNzIxNzRDM0NBQjBB
RDI3QkJERkMwRkQ5RkNFODJGRjcxMjA4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MTM3MjE3NEMzQ0FCMEFEMjdC
QkRGQzBGRDlGQ0U4MkZGNzEyMDhDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTVBNzU4RkVDQTk2RjIxM0QxNTU1Q0UyOEMwNkUyMTRCMDgyODNBRkNE
NDVCMDAwQTE1NTMyODU4NUZCMUIxNy8wLzMxMzkzMDJlMzEzNDJlMzMzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzNDM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+DiQwDQYJ
KoZIhvcNAQELBQADggEBACQ5oUjWLRJiXbXJaod7YDpqXnBnz/bBJn8/0jIYdpqk
fZGg+0zp4aweWAgFoc+v8glSG56xYXa/hcDawjqyMwMX8tlQ6KcWIN37scwJmGFF
dVkRZSfnMzNtyIS/0L5FBYEg1tab7i4UeFBdkmU71gJGRqsx1mTRBS5Vscytsv01
fNc+KAoYG7TOeVRbvY+qJy738fmZoUKXorJtE/WLFLcPvbNPlUXn7V7RkouTcYqh
ITRxDS3bBs4RapnVa28lsAcxF6LZ4GK3rUgQ25+mCjVcTq4LbB/k0YY2KWK+jUyE
mr26hKvm3aWVREO7wULvABLS8aLqz1QU9dcJ1Tm8Ja0=
-----END CERTIFICATE-----
Generated at Thu Apr 24 15:54:51 2025 by rpki-client on console.sobornost.net