Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203136353039.roa
File: 3230302e33332e372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: qV1IPTbscr8Dz/N4yDWqERckBkXVtOIH2F9aSspcyXQ=
Subject key identifier: 54:1A:34:35:15:14:21:E2:98:35:B2:A4:21:16:25:20:4E:14:1F:78
Certificate issuer: /CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Certificate serial: 3086EFB5424A6A3EA20482D61AA74E5A8DB69E2A
Authority key identifier: B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203136353039.roa
Signing time: Tue 04 Feb 2025 18:21:18 +0000
ROA not before: Tue 04 Feb 2025 18:16:18 +0000
ROA not after: Tue 03 Feb 2026 18:21:18 +0000
asID: 16509
IP address blocks: 200.33.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:86:ef:b5:42:4a:6a:3e:a2:04:82:d6:1a:a7:4e:5a:8d:b6:9e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Validity
Not Before: Feb 4 18:16:18 2025 GMT
Not After : Feb 3 18:21:18 2026 GMT
Subject: CN=541A3435151421E29835B2A4211625204E141F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:05:62:68:9b:1d:bb:8e:e0:c0:49:46:79:
56:b8:aa:6c:88:18:41:24:1f:b0:58:7d:7d:38:d8:
ed:96:9b:f0:1b:75:bd:33:e2:74:2b:41:1c:a3:5e:
f3:82:d9:61:4d:1e:9a:ae:17:f1:dc:0b:14:d9:ed:
85:f5:b1:c5:4d:94:14:be:fa:42:a2:e9:4f:42:d2:
ed:9f:3a:00:68:16:67:e5:81:ba:1d:5d:2b:ae:fc:
8f:bb:25:b7:b5:b8:e0:44:fc:bf:94:f8:2d:78:bc:
ec:b1:b3:7a:bc:c5:44:2a:b6:e0:fe:ba:e5:e5:6a:
d2:d0:19:98:53:65:98:a3:09:1f:12:85:c5:72:19:
2d:37:8f:ea:ad:c5:87:1b:28:fe:74:f8:b9:d0:e5:
e4:6b:2d:42:79:8c:dd:86:67:41:c9:6a:9a:c5:3c:
70:14:50:74:d7:af:b1:21:b3:6c:92:a2:e7:68:6a:
a7:2b:b3:3d:ca:d8:a4:3a:65:b1:d9:13:15:d3:bc:
7f:c6:41:13:55:d7:d6:40:da:c2:83:93:43:bf:e1:
42:63:e1:d4:8a:80:2a:9a:c2:31:41:8f:6b:eb:4a:
5a:fe:68:8b:44:ec:e9:7d:6d:66:db:43:eb:50:28:
28:08:3b:63:ac:27:3a:31:90:af:26:6b:36:09:67:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1A:34:35:15:14:21:E2:98:35:B2:A4:21:16:25:20:4E:14:1F:78
X509v3 Authority Key Identifier:
keyid:B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.7.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5a:4c:82:06:d0:3c:d5:cd:23:73:d6:7a:00:ef:c6:ba:69:
63:db:b7:98:52:b3:de:17:6a:2c:33:9e:81:77:6a:43:75:07:
1f:32:c3:1c:49:6e:17:06:9d:41:2a:2b:75:f8:1f:f8:19:e3:
1d:80:2d:6d:4c:95:e8:9b:0b:9d:ee:ee:52:5f:f0:f4:8e:d8:
03:ec:ca:10:ea:e7:f5:4b:2d:6c:e9:a8:35:9b:72:e4:4a:f5:
89:f7:6d:80:77:80:cf:31:c0:ed:9b:03:e0:b2:39:ee:78:52:
94:46:4c:35:24:69:da:d4:5b:aa:43:f8:03:52:03:3c:bd:76:
75:f9:2e:03:ec:bd:4f:e8:75:94:19:01:41:39:d1:3d:e2:72:
d9:80:f5:7d:82:68:06:59:d9:3d:09:81:2a:95:81:de:7d:8d:
96:fe:db:58:a6:31:fc:23:89:b0:ea:43:22:f3:71:b7:c1:8b:
e0:4a:63:5e:d7:d6:66:b7:11:e0:01:07:83:4a:14:d5:51:e6:
f4:dc:0b:84:e3:7d:7d:1e:18:44:dc:ac:4c:95:3e:23:e0:a9:
1d:d7:80:a8:06:48:b7:bd:e2:1c:42:a4:9b:37:36:d4:26:d5:
89:e2:f0:29:98:25:8c:a5:3c:56:8c:8d:b0:c2:ed:c5:70:82:
05:70:bf:97
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUMIbvtUJKaj6iBILWGqdOWo22niowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZEMzhDRkRDOUNGREM0MUM2MTdFRjkyQUQ3NTEyMjU5
MEQ5M0U4NzAeFw0yNTAyMDQxODE2MThaFw0yNjAyMDMxODIxMThaMDMxMTAvBgNV
BAMTKDU0MUEzNDM1MTUxNDIxRTI5ODM1QjJBNDIxMTYyNTIwNEUxNDFGNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQwViaJsdu47gwElGeVa4qmyI
GEEkH7BYfX042O2Wm/Abdb0z4nQrQRyjXvOC2WFNHpquF/HcCxTZ7YX1scVNlBS+
+kKi6U9C0u2fOgBoFmflgbodXSuu/I+7Jbe1uOBE/L+U+C14vOyxs3q8xUQqtuD+
uuXlatLQGZhTZZijCR8ShcVyGS03j+qtxYcbKP50+LnQ5eRrLUJ5jN2GZ0HJaprF
PHAUUHTXr7Ehs2ySoudoaqcrsz3K2KQ6ZbHZExXTvH/GQRNV19ZA2sKDk0O/4UJj
4dSKgCqawjFBj2vrSlr+aItE7Ol9bWbbQ+tQKCgIO2OsJzoxkK8mazYJZ8LHAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUVBo0NRUUIeKYNbKkIRYlIE4UH3gwHwYDVR0j
BBgwFoAUttOM/cnP3EHGF++SrXUSJZDZPocwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDFBMDU1REJGMzZGQkIyRjhFNUFCNTFBMUUxOURGMjg2
MEY1ODAyRUYxRDRDQkRBOENFN0EyNTA2N0UxRjMzLzAvQjZEMzhDRkRDOUNGREM0
MUM2MTdFRjkyQUQ3NTEyMjU5MEQ5M0U4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkQzOENGREM5Q0ZEQzQxQzYx
N0VGOTJBRDc1MTIyNTkwRDkzRTg3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQxQTA1NURCRjM2RkJCMkY4RTVBQjUxQTFFMTlERjI4NjBGNTgwMkVG
MUQ0Q0JEQThDRTdBMjUwNjdFMUYzMy8wLzMyMzAzMDJlMzMzMzJlMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyCEHMA0GCSqG
SIb3DQEBCwUAA4IBAQAkWkyCBtA81c0jc9Z6AO/Gumlj27eYUrPeF2osM56Bd2pD
dQcfMsMcSW4XBp1BKit1+B/4GeMdgC1tTJXomwud7u5SX/D0jtgD7MoQ6uf1Sy1s
6ag1m3LkSvWJ922Ad4DPMcDtmwPgsjnueFKURkw1JGna1FuqQ/gDUgM8vXZ1+S4D
7L1P6HWUGQFBOdE94nLZgPV9gmgGWdk9CYEqlYHefY2W/ttYpjH8I4mw6kMi83G3
wYvgSmNe19ZmtxHgAQeDShTVUeb03AuE4319HhhE3KxMlT4j4Kkd14CoBki3veIc
QqSbNzbUJtWJ4vApmCWMpTxWjI2wwu3FcIIFcL+X
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:03 2025 by rpki-client