Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203230343534.roa
File: 3230302e33352e3135322e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier: 7Wg3xHixpD1QCg+9FUQzfEu4DRgcmK2Iao4bJ22+VmQ=
Subject key identifier: 0E:AE:31:C4:EB:C4:6A:39:50:D2:98:B3:EC:6A:CE:FF:D4:AA:6F:52
Certificate issuer: /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial: 2117715F4217142A72044C70E4055E536BB75835
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203230343534.roa
Signing time: Tue 04 Feb 2025 18:33:16 +0000
ROA not before: Tue 04 Feb 2025 18:28:16 +0000
ROA not after: Tue 03 Feb 2026 18:33:16 +0000
asID: 20454
IP address blocks: 200.35.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:17:71:5f:42:17:14:2a:72:04:4c:70:e4:05:5e:53:6b:b7:58:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Validity
Not Before: Feb 4 18:28:16 2025 GMT
Not After : Feb 3 18:33:16 2026 GMT
Subject: CN=0EAE31C4EBC46A3950D298B3EC6ACEFFD4AA6F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:0f:70:a6:5b:a0:7a:34:02:51:b5:e7:f5:
4e:8d:e8:6a:e8:1c:2e:f6:ca:dd:cd:80:36:44:75:
58:d6:94:96:45:13:96:ac:a6:13:93:7e:c4:f4:e4:
45:39:9b:fa:30:ef:f3:54:80:c3:1d:15:73:8f:73:
bf:f5:24:69:00:96:50:65:2c:a6:69:8e:af:71:c5:
08:5e:54:17:9a:d0:78:e7:11:89:66:d0:c2:a3:26:
bd:19:5e:0d:24:8e:4d:48:de:9d:82:fb:d1:e9:8f:
69:51:74:d5:28:95:ec:5f:7a:80:19:c6:f4:cc:2a:
88:cc:8e:61:aa:61:ae:59:78:ee:76:0b:b4:20:17:
af:b5:d8:19:64:6d:45:97:94:00:ab:76:89:c5:4a:
82:2b:65:63:79:52:6c:28:2a:9a:c2:06:65:1c:19:
9d:31:20:85:4c:ad:9c:47:5e:37:ba:92:00:73:ca:
73:8d:a8:f5:66:28:19:08:7a:db:15:bf:38:5d:9d:
20:ea:7f:d9:cf:82:89:9d:7e:c1:e8:55:f5:2e:16:
7c:8b:4d:66:82:e5:bb:d2:31:4b:52:2c:53:63:7c:
89:d0:b1:55:ec:d9:33:b8:e2:cf:4e:85:32:41:a9:
8c:0f:75:95:34:41:20:bd:1a:3d:0d:b7:43:af:d9:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AE:31:C4:EB:C4:6A:39:50:D2:98:B3:EC:6A:CE:FF:D4:AA:6F:52
X509v3 Authority Key Identifier:
keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203230343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.152.0/24
Signature Algorithm: sha256WithRSAEncryption
26:92:9f:1b:06:bb:b2:bb:b0:7b:1d:65:bf:a3:69:ff:55:a0:
06:c9:66:b4:77:d1:5f:3e:15:f5:66:ea:40:f4:03:5a:64:be:
84:ff:ba:63:ef:c2:69:c1:5f:97:ba:6e:b7:b9:78:e4:94:01:
54:f8:60:75:16:fe:4a:23:36:67:6c:c8:f4:39:9d:e5:fa:1a:
99:53:f3:dd:1e:d8:46:6f:24:dc:d9:44:76:1e:39:00:11:4d:
62:58:2d:e3:9d:30:cd:ce:32:86:6f:e4:6c:f4:13:ac:4a:a9:
21:4e:29:27:00:61:76:df:fd:2d:70:0d:24:58:fe:0a:03:cc:
ed:c1:95:42:2a:69:20:4c:15:8a:7b:d1:68:e0:31:c9:a9:b0:
7e:bb:34:5f:8b:f0:3f:94:4b:5d:d9:05:d4:01:f6:83:a0:74:
92:36:c2:3b:e7:f9:18:4e:7e:3d:6b:c4:ac:3e:5f:4f:17:2b:
70:67:14:f0:e4:0b:71:3e:ac:b3:38:52:06:7c:d4:8e:f2:ab:
c3:e3:21:11:70:16:4f:5f:eb:20:9c:d2:75:9c:a0:b4:23:f4:
64:43:ce:fa:cd:b7:8d:8e:69:33:5c:e9:0b:d8:a7:0c:f4:6e:
41:c0:33:fc:11:3a:ff:e6:22:0e:c8:8c:94:85:b7:b0:fd:e5:
35:75:e4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:29:57 2025 by rpki-client