Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134312e302f32342d3234203d3e20323034363535.roa
File: 3230302e38352e3134312e302f32342d3234203d3e20323034363535.roa (raw, json)
Hash identifier: dUDEvYgqIStjcsBq3FTPdHt3r73uVqW2HXbPjP3qj9w=
Subject key identifier: 12:98:0C:A7:A5:16:97:45:FE:B0:A2:1E:37:B0:C1:E9:F9:C7:4D:F2
Certificate issuer: /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial: 53D0CF5258BFD3274F8098D0EFE4DD5EA2CBD5E8
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134312e302f32342d3234203d3e20323034363535.roa
Signing time: Tue 04 Feb 2025 18:40:02 +0000
ROA not before: Tue 04 Feb 2025 18:35:02 +0000
ROA not after: Tue 03 Feb 2026 18:40:02 +0000
asID: 204655
IP address blocks: 200.85.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d0:cf:52:58:bf:d3:27:4f:80:98:d0:ef:e4:dd:5e:a2:cb:d5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Validity
Not Before: Feb 4 18:35:02 2025 GMT
Not After : Feb 3 18:40:02 2026 GMT
Subject: CN=12980CA7A5169745FEB0A21E37B0C1E9F9C74DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:6b:b3:f7:48:fe:67:64:3e:13:b6:28:56:
19:ae:74:6e:66:ae:f3:54:9b:e0:64:1a:b6:d6:8a:
d0:4d:e5:c8:56:46:16:d9:76:ad:18:b8:ab:5b:93:
12:a9:39:cd:f7:7f:13:8e:13:34:77:c5:26:34:b5:
e8:ec:7c:f3:7f:e8:23:8e:56:e1:2e:9f:4f:07:50:
53:6a:7e:99:12:bd:77:42:d4:5b:91:ed:ac:e8:19:
24:1b:71:aa:c2:2e:a2:78:7e:e9:63:0e:9f:70:30:
ff:b3:7e:1b:10:da:4d:e1:56:f7:d6:da:64:e4:58:
93:9d:94:6f:13:ad:53:9c:04:c3:e6:55:e0:e2:8e:
3e:d0:46:71:cf:8a:63:08:ae:28:de:47:a0:d6:92:
75:2e:4b:00:ea:fd:b1:73:5b:a3:4e:3b:33:a0:ca:
e0:31:e5:9a:c5:01:62:6f:90:c3:0c:6f:99:c4:4d:
f4:1a:fe:b8:cd:f7:fb:49:ac:bf:28:33:a6:67:58:
1e:82:17:1f:6a:e5:f9:0a:ff:64:2c:24:e5:a8:58:
4b:7f:c5:38:6a:43:1b:00:25:e8:a2:7d:5d:e3:df:
e1:39:84:97:2e:bc:01:7f:5b:a2:64:26:21:6f:14:
70:d1:57:3b:f0:62:81:57:4e:ab:d3:c9:26:a9:05:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:98:0C:A7:A5:16:97:45:FE:B0:A2:1E:37:B0:C1:E9:F9:C7:4D:F2
X509v3 Authority Key Identifier:
keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134312e302f32342d3234203d3e20323034363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7e:b2:a6:5d:44:72:93:11:3f:0e:2f:8f:04:5a:cc:4e:0f:
90:ce:b4:f1:ed:b4:b0:da:fc:0d:d6:d4:08:ca:1e:3f:3f:75:
98:5b:ed:b8:a9:8a:ae:6c:7c:b4:5c:ad:b8:17:f6:6c:eb:1f:
51:1e:59:c3:45:82:55:ba:82:de:ed:5b:58:5d:b9:86:89:dd:
ff:95:ae:dd:15:7e:aa:49:eb:56:bf:52:37:e4:dd:ed:f8:ea:
72:64:e4:9f:57:83:3d:d7:05:37:e0:f8:87:8a:cc:4c:8b:b9:
c7:52:92:98:58:67:ba:97:33:bc:6a:9a:a6:60:53:ed:90:36:
75:76:ae:18:44:d6:5f:28:4a:98:c0:26:a2:46:d9:98:c6:9c:
51:5e:25:c0:c7:e7:4e:69:1e:a4:c8:ac:c1:cc:1c:b6:43:6e:
6c:a5:1c:1a:71:3d:80:ee:f8:16:d4:5e:e5:ba:7a:d3:0f:eb:
cb:08:fb:2b:5e:68:d4:39:02:02:db:91:e7:00:e4:f4:6e:dc:
cd:fb:41:32:a3:f2:a9:84:fa:90:5e:68:db:33:a8:73:3b:c6:
71:13:d3:5f:cd:fe:88:b8:9f:62:dd:98:84:ce:b9:1a:08:7b:
f8:c6:51:71:45:9d:4e:0a:2d:47:41:13:80:0e:96:db:8d:e4:
a0:ab:83:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:24 2025 by rpki-client