Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e392e3135312e302f32342d3234203d3e2036343239.roa
File: 3230302e392e3135312e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier: ZiZudV3Hd75WWTBrGSon2jBy3xluhN8GzuHoQrvv3gE=
Subject key identifier: 49:F1:CF:B6:7D:3C:7A:26:38:62:97:8C:18:E3:EA:CD:87:77:B9:66
Certificate issuer: /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial: 2DEADDD4D9BEDD9B150C3538C3976D620371691D
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e392e3135312e302f32342d3234203d3e2036343239.roa
Signing time: Tue 04 Feb 2025 20:03:20 +0000
ROA not before: Tue 04 Feb 2025 19:58:20 +0000
ROA not after: Tue 03 Feb 2026 20:03:20 +0000
asID: 6429
IP address blocks: 200.9.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ea:dd:d4:d9:be:dd:9b:15:0c:35:38:c3:97:6d:62:03:71:69:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Validity
Not Before: Feb 4 19:58:20 2025 GMT
Not After : Feb 3 20:03:20 2026 GMT
Subject: CN=49F1CFB67D3C7A263862978C18E3EACD8777B966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:90:6c:ae:ab:6c:32:5b:08:0a:5e:a4:9a:
c8:e5:1f:0c:49:15:a0:9f:4f:99:24:92:1c:e7:d5:
ba:55:d9:7b:6f:dc:87:0c:fe:61:f2:e6:97:da:a9:
c9:0f:a1:5c:59:f3:61:4f:fd:f3:4a:69:2b:ed:88:
6b:ef:3f:bf:79:f4:97:ee:05:47:2a:90:05:bb:5a:
47:48:a6:9a:ad:d6:00:4a:3b:31:f9:3a:a6:73:90:
66:9c:74:7c:1e:5e:6c:73:d0:fc:0f:ff:db:ac:21:
b5:e4:0b:6b:92:fb:79:68:b0:fa:f5:56:96:b2:88:
bb:c6:46:06:31:73:8b:e3:68:aa:4c:5f:60:1f:94:
5d:32:3b:af:1d:85:76:71:ee:a1:30:46:1a:84:41:
66:b2:a4:01:b7:7d:d3:7b:5c:d8:f5:38:db:85:67:
18:14:3c:6b:bd:55:1a:bf:11:d2:ce:0f:e3:6b:c3:
41:47:9a:93:47:56:45:5b:97:cd:bd:c2:49:a6:42:
2a:47:f8:6c:35:d2:d5:bb:b0:05:79:cb:7f:97:1a:
f6:e8:a4:11:2c:9a:1c:36:9d:a7:11:4f:27:d0:36:
38:b5:ae:42:df:81:d7:60:d2:66:1b:bb:35:9c:82:
1f:54:b3:ac:05:39:46:80:1a:77:fc:90:11:2f:a4:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F1:CF:B6:7D:3C:7A:26:38:62:97:8C:18:E3:EA:CD:87:77:B9:66
X509v3 Authority Key Identifier:
keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e392e3135312e302f32342d3234203d3e2036343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.151.0/24
Signature Algorithm: sha256WithRSAEncryption
05:51:d0:96:be:06:b2:8e:d7:97:31:fb:62:6f:a5:fa:14:a8:
7a:12:8d:c8:f4:57:00:b9:bb:ae:b5:7c:ed:51:ea:b9:58:6d:
98:b9:7e:e8:e8:37:d7:8a:37:1b:ed:cd:12:e8:e9:ba:00:36:
ef:c7:f3:33:84:52:5d:54:33:a0:8f:d1:b6:d9:33:fb:08:d3:
ac:c6:22:10:02:d3:5e:da:55:e1:cc:04:22:9a:62:bb:d1:f8:
51:07:d4:21:15:f9:95:1d:b4:fb:f1:b3:59:6f:d2:fc:6a:26:
72:d5:24:61:77:2d:18:28:3b:d7:84:47:24:b8:39:57:b9:74:
e3:5d:dd:c2:58:e7:34:3c:a0:ec:7b:04:f1:a3:85:3a:65:6e:
ef:db:53:ec:5f:51:8a:19:9c:53:75:d5:b5:0e:19:45:71:7b:
80:08:9f:2a:78:4a:7c:2e:58:34:36:53:9b:48:77:10:36:8b:
73:59:77:f1:56:57:28:c2:9c:c7:e3:a9:d1:f5:d2:f0:4f:c5:
d1:d1:99:d2:fa:c9:2b:e6:1d:72:95:ec:14:e8:79:3d:57:80:
7b:ab:34:dd:0e:e7:7e:1a:16:29:48:b2:2a:ea:15:d5:a7:01:
4d:8c:a8:c8:15:e1:5e:5d:76:51:f5:53:7f:62:9b:f3:8c:40:
0c:70:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:55 2025 by rpki-client