Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3230302e3138392e31362e302f32302d3234203d3e203134353933.roa
File: 3230302e3138392e31362e302f32302d3234203d3e203134353933.roa (raw, json)
Hash identifier: bLO/hWj+lM3j6SDVnyAn5ErIGMEr4S46wn55INhD0Ig=
Subject key identifier: 80:5E:7A:71:FF:37:3D:AE:DE:7B:0B:66:66:6B:04:30:2D:75:5A:0F
Certificate issuer: /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial: 1560F4478AE3100C79FEA79D3663D846548EE341
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3230302e3138392e31362e302f32302d3234203d3e203134353933.roa
Signing time: Tue 04 Mar 2025 05:11:16 +0000
ROA not before: Tue 04 Mar 2025 05:06:16 +0000
ROA not after: Tue 03 Mar 2026 05:11:16 +0000
asID: 14593
IP address blocks: 200.189.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:60:f4:47:8a:e3:10:0c:79:fe:a7:9d:36:63:d8:46:54:8e:e3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Validity
Not Before: Mar 4 05:06:16 2025 GMT
Not After : Mar 3 05:11:16 2026 GMT
Subject: CN=805E7A71FF373DAEDE7B0B66666B04302D755A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:55:91:6a:c3:e1:bf:a2:d1:5e:7e:91:bd:
c4:e4:c8:54:6f:3b:88:4f:68:a7:21:b3:4b:d7:40:
81:f9:63:4e:30:eb:8b:f7:d7:60:2d:21:82:86:b4:
03:d7:b9:d9:0e:c6:15:b9:5f:b7:f3:61:41:54:7a:
48:7c:0d:6e:05:1a:cd:bb:44:42:30:b3:7a:bd:29:
8c:1b:92:74:7d:05:46:0c:e8:f1:74:0d:24:73:1e:
c8:92:36:0b:80:14:bc:ef:06:82:46:f5:77:ac:e4:
ec:1b:30:44:a9:b6:93:70:d6:f7:72:c6:fd:b2:56:
80:f0:71:4d:3a:0f:38:87:39:17:f0:dc:24:f9:5a:
d2:0e:e0:3c:b7:ea:b2:9a:ab:7a:d3:48:e5:81:94:
a2:bf:39:47:53:6d:d7:95:e8:10:03:07:e4:0d:fe:
7f:30:73:1f:a7:94:b9:99:2c:66:97:69:80:f9:ba:
6c:d3:92:07:5c:c7:af:8d:f4:b5:2f:e4:3c:ad:3a:
2a:f2:47:4a:0b:f2:e0:9c:bd:b2:85:5c:2d:b6:3e:
45:c4:f4:a1:d8:cd:77:f9:7f:68:b7:59:1e:aa:3e:
13:5f:71:7c:82:51:9d:9b:52:49:80:74:c0:f6:dc:
1f:35:b5:ce:33:ea:15:bd:2f:0e:e4:dd:21:81:39:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5E:7A:71:FF:37:3D:AE:DE:7B:0B:66:66:6B:04:30:2D:75:5A:0F
X509v3 Authority Key Identifier:
keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3230302e3138392e31362e302f32302d3234203d3e203134353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.189.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:72:e6:41:e9:5a:d7:81:0d:52:83:52:f9:ff:8a:3c:d2:b4:
53:f2:5e:60:6e:7d:57:e8:bb:34:98:98:cd:aa:92:3b:4c:79:
c8:a3:fb:e3:04:13:96:f5:8d:90:7f:2d:d4:c4:0a:50:12:a1:
4c:a9:10:cd:a5:f3:b5:b8:ff:61:a6:ae:43:78:8c:3e:3c:ce:
11:f4:4f:cc:36:65:87:08:a5:e1:60:ca:25:f0:a1:07:03:46:
28:5a:47:67:a4:c9:e7:9f:ee:bb:d1:25:24:d7:66:ed:f3:51:
c0:30:0f:69:9b:40:b3:39:06:82:53:aa:8e:8d:79:ca:f0:cd:
6c:32:7b:f5:a6:da:be:58:1a:3f:97:99:01:df:52:a8:02:9e:
69:5e:37:38:f3:97:f0:09:29:ca:3e:f8:89:0c:da:ed:07:f9:
24:76:9d:22:77:39:f7:f1:09:d9:5f:58:6a:88:1b:7e:66:d1:
cf:a3:75:49:b6:a7:bc:9b:c2:07:60:03:de:ab:c8:f1:b5:f0:
28:20:6e:92:32:61:ec:3f:d9:f7:74:7e:9b:fe:57:0a:e5:66:
9d:1e:b1:ad:6f:12:3c:50:4c:12:75:c5:c3:b2:9e:99:fb:10:
b9:9d:10:b4:92:d7:6b:33:5a:17:ab:24:10:d4:da:78:a8:b8:
a4:02:c7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:17 2025 by rpki-client