Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130342e302f32322d3234203d3e20323635363232.roa
File: 3230302e3131302e3130342e302f32322d3234203d3e20323635363232.roa (raw, json)
Hash identifier: wYjDb4nj0oHJIyEh0T8/fFqArBIw4SKspF3cj8R3CmY=
Subject key identifier: 9D:28:B6:FF:5F:B5:8A:DB:BE:81:3B:43:23:5F:92:B4:F5:3B:CF:EB
Certificate issuer: /CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Certificate serial: 3D997A2E7C43300C5463E17DC3FE872F3750047B
Authority key identifier: 5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130342e302f32322d3234203d3e20323635363232.roa
Signing time: Tue 04 Feb 2025 18:12:48 +0000
ROA not before: Tue 04 Feb 2025 18:07:48 +0000
ROA not after: Tue 03 Feb 2026 18:12:48 +0000
asID: 265622
IP address blocks: 200.110.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:99:7a:2e:7c:43:30:0c:54:63:e1:7d:c3:fe:87:2f:37:50:04:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5
Validity
Not Before: Feb 4 18:07:48 2025 GMT
Not After : Feb 3 18:12:48 2026 GMT
Subject: CN=9D28B6FF5FB58ADBBE813B43235F92B4F53BCFEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:dd:37:6f:41:f3:66:15:ca:ae:39:1f:c7:
b0:de:8a:4e:cc:32:0f:1b:4d:07:9a:0f:a4:96:43:
5a:11:c7:9e:e2:81:96:35:38:13:cf:54:9c:b9:33:
e5:d6:6c:b8:53:4d:91:85:12:cd:78:91:03:05:6d:
4e:2b:e9:93:48:28:03:53:68:e9:61:d1:ce:b6:b6:
1d:fb:d3:92:c2:ea:7b:e9:30:6b:1f:d6:e4:58:15:
49:9f:ee:c4:f9:f4:0f:dc:f9:45:fc:89:4e:19:99:
ad:df:d9:5d:96:2a:12:04:ae:4c:d0:7f:86:99:bf:
45:e3:2c:b1:fc:5f:c1:6c:7b:ac:46:ae:90:b2:3c:
94:dd:a6:c0:df:ba:e3:5d:1b:1d:60:c0:74:e7:0f:
7d:c4:48:89:5b:73:2c:0c:82:0d:3f:7e:20:3d:63:
69:27:9e:e4:25:57:66:f8:cc:e9:c4:38:06:29:36:
6a:19:ed:5c:9e:a8:22:f3:69:0d:90:85:0b:55:4f:
ca:59:71:39:6f:82:f0:57:04:7d:97:b1:27:e9:97:
ff:92:37:33:00:18:ef:34:d6:a5:36:ba:c6:9b:fe:
f9:c6:ae:0c:c4:a5:5e:26:0b:59:16:98:9a:94:43:
54:af:83:55:dc:23:b4:07:a2:e1:88:31:bc:4d:cd:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:28:B6:FF:5F:B5:8A:DB:BE:81:3B:43:23:5F:92:B4:F5:3B:CF:EB
X509v3 Authority Key Identifier:
keyid:5E:32:B5:9B:01:4C:3D:4C:3E:F5:FA:AD:4C:1E:7D:B8:82:04:18:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E32B59B014C3D4C3EF5FAAD4C1E7DB8820418F5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1645C2E40371F2AA201463ADBED2CD93ED59519CCA3979D1C9C0A5D97012E089/0/3230302e3131302e3130342e302f32322d3234203d3e20323635363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.110.104.0/22
Signature Algorithm: sha256WithRSAEncryption
20:51:e3:e7:b5:5a:60:37:b4:e4:73:ca:4f:66:9a:ed:08:ae:
72:0d:c6:e7:bf:51:d9:de:34:13:47:d1:7e:93:20:e2:b1:cf:
08:00:42:2b:26:67:25:e9:b5:b9:a3:06:66:71:6d:9a:87:46:
59:a6:0c:23:42:90:ed:94:ff:0b:ac:a7:b4:ff:6f:ee:12:27:
f9:4f:ef:53:c3:c1:02:35:c0:ea:82:10:dd:b6:74:03:71:f6:
a4:6b:1a:07:13:c8:43:c4:ce:87:ef:3e:f8:01:69:9f:b5:1e:
64:f5:10:0e:be:ce:88:9a:00:94:77:02:22:54:f6:06:05:34:
3e:fc:db:d1:84:29:ae:de:16:11:e7:c7:ec:1d:a8:7a:d0:d5:
68:45:97:7c:3d:12:b2:51:37:a6:3c:0a:56:df:04:85:99:8d:
25:62:15:a2:2a:20:bd:d2:6a:5f:ec:7f:d7:09:0d:b5:4f:9d:
79:b6:ab:a3:11:b2:3c:61:9f:c1:e4:4a:44:22:73:5e:91:c2:
17:b5:c7:c4:0a:aa:66:34:4b:6a:9a:bf:c8:83:c2:eb:32:ce:
e8:04:35:45:8e:85:3f:af:4e:91:be:45:ca:82:6f:2d:96:4c:
28:64:14:bd:01:16:27:d3:68:6b:25:d5:9e:0c:4b:fa:38:c2:
e9:2d:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:12 2025 by rpki-client