Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/969acf7c501b79d0cf6bc14c88cecba38856a7bd.roa
File: 969acf7c501b79d0cf6bc14c88cecba38856a7bd.roa (raw, json)
Hash identifier: t9uv8eYNg7buWBqE/qBGkjK6fMeUb61WKRZVW3elXDA=
Subject key identifier: C0:D0:3D:5A:B8:5A:DF:79:D5:E6:69:76:45:4F:D1:00:76:A0:50:B0
Certificate issuer: /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial: 290F41
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/969acf7c501b79d0cf6bc14c88cecba38856a7bd.roa
Signing time: Fri 05 Apr 2024 21:56:43 +0000
ROA not before: Fri 05 Apr 2024 21:56:42 +0000
ROA not after: Sun 05 Apr 2026 21:56:42 +0000
asID: 52468
IP address blocks: 190.60.4.0/22 maxlen: 22
190.60.112.104/30 maxlen: 30
190.60.113.36/30 maxlen: 30
190.60.113.48/29 maxlen: 29
190.60.116.92/30 maxlen: 30
190.60.193.216/30 maxlen: 30
190.60.200.24/29 maxlen: 29
190.60.203.136/29 maxlen: 29
190.60.243.96/28 maxlen: 28
190.60.243.128/28 maxlen: 28
190.60.243.144/29 maxlen: 29
200.91.204.148/30 maxlen: 30
200.91.204.152/29 maxlen: 29
200.91.204.168/29 maxlen: 29
200.91.204.180/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2690881 (0x290f41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
Validity
Not Before: Apr 5 21:56:42 2024 GMT
Not After : Apr 5 21:56:42 2026 GMT
Subject: CN=969acf7c501b79d0cf6bc14c88cecba38856a7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:bc:a7:8a:53:89:08:07:a7:ea:78:61:02:
46:43:38:ac:f4:ea:0c:2d:fd:40:62:6a:bf:2f:d2:
39:cf:b6:68:fd:66:75:2e:1f:32:7c:f6:45:bb:47:
80:a0:dc:af:0b:01:c6:54:d5:9a:a0:00:7b:b6:24:
7b:8c:4c:fa:e7:5f:3a:fb:f7:8c:7e:4a:36:37:ac:
45:ba:bb:57:36:d1:f4:de:9a:0b:cd:c8:d4:75:45:
0c:4e:b3:00:93:32:8a:9d:ee:da:02:62:ce:7b:0e:
4b:ab:89:45:09:6f:57:91:32:44:52:cd:0b:ff:58:
a5:78:95:83:35:30:dd:b1:0c:6c:0f:4b:35:ee:a2:
70:03:a2:24:cd:9c:e3:53:6f:46:1d:f0:56:8f:b2:
26:e0:aa:15:2b:0f:6c:83:d4:54:1f:9b:21:36:8d:
d6:6a:ea:b4:4b:67:e2:b1:b7:46:50:05:1d:3a:47:
e8:7c:8e:f4:4a:6c:63:22:7b:fa:1d:b1:45:6d:89:
fe:7e:59:3d:42:96:b8:ba:38:97:b9:33:00:3c:96:
bd:e5:0b:5d:27:88:d6:4e:ce:7f:8d:93:b7:27:ce:
90:61:87:26:54:9a:9e:0d:d8:ec:2c:a7:5a:60:2a:
fe:b4:c6:76:66:5e:76:4e:f2:b6:ed:d3:33:a4:ba:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D0:3D:5A:B8:5A:DF:79:D5:E6:69:76:45:4F:D1:00:76:A0:50:B0
X509v3 Authority Key Identifier:
keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/969acf7c501b79d0cf6bc14c88cecba38856a7bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.60.4.0/22
190.60.112.104/30
190.60.113.36/30
190.60.113.48/29
190.60.116.92/30
190.60.193.216/30
190.60.200.24/29
190.60.203.136/29
190.60.243.96/28
190.60.243.128-190.60.243.151
200.91.204.148-200.91.204.159
200.91.204.168/29
200.91.204.180/30
Signature Algorithm: sha256WithRSAEncryption
9b:40:6d:7a:92:ea:a8:67:a0:d7:ad:44:cc:9c:9a:8b:17:5a:
46:d9:b5:c9:0e:0f:8e:ca:33:ab:0e:27:9d:b8:36:36:4e:3b:
2f:0c:97:10:41:27:48:df:d3:4e:79:40:94:3b:fb:b1:0e:7d:
75:56:95:81:52:64:09:36:47:a0:61:bc:ca:8f:b8:81:1d:9b:
2a:3f:fa:bf:4e:b4:b5:d2:52:74:e3:94:73:87:c6:5d:52:1f:
74:8b:c4:f0:c3:74:fb:88:fb:29:6d:98:37:0a:10:41:fe:f2:
83:f8:dd:10:92:1b:c5:60:d0:82:58:bc:74:b6:43:01:3b:82:
7b:e3:95:5c:da:2e:58:d3:20:b8:56:5e:bf:ea:00:a3:09:e6:
30:8b:eb:58:ae:8c:b8:e4:04:66:f4:70:3d:9d:98:68:80:3e:
2d:f3:43:c3:55:c1:2f:a4:fb:8f:73:d6:57:fc:16:bd:a8:57:
7d:22:b0:b1:f3:14:b5:82:59:53:e4:7f:e2:f0:29:d2:c2:bd:
46:fc:16:e2:ef:26:7a:e2:76:0f:b1:d1:88:77:5e:e6:c2:5c:
1c:97:31:3a:d1:18:20:da:74:11:6a:0a:8c:19:f1:e2:63:bf:
fe:82:40:e0:a9:05:03:d3:cf:1c:7b:12:a5:45:ea:61:dd:f7:
3d:47:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:26:55 2025 by rpki-client