Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136392e302f32342d3234203d3e20323639393331.roa
File: 3230302e3132352e3136392e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier: KMNs9lGjwiAJeiF+MLGfm8p5K7tocxaoo6mXlykeLsg=
Subject key identifier: 06:08:7B:D8:44:9D:5F:64:23:A2:6C:82:82:80:D5:25:EF:AD:4B:CC
Certificate issuer: /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial: 1CDF9C0A47F2717CD35FA8A6951D2F42BC362D45
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136392e302f32342d3234203d3e20323639393331.roa
Signing time: Tue 04 Feb 2025 18:02:51 +0000
ROA not before: Tue 04 Feb 2025 17:57:51 +0000
ROA not after: Tue 03 Feb 2026 18:02:51 +0000
asID: 269931
IP address blocks: 200.125.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:df:9c:0a:47:f2:71:7c:d3:5f:a8:a6:95:1d:2f:42:bc:36:2d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
Validity
Not Before: Feb 4 17:57:51 2025 GMT
Not After : Feb 3 18:02:51 2026 GMT
Subject: CN=06087BD8449D5F6423A26C828280D525EFAD4BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:93:1e:8d:54:b3:cc:07:e8:a5:a8:7d:e9:
40:7e:93:21:c0:c1:8f:36:ec:a2:63:ed:47:3d:9c:
17:a9:65:f2:47:b6:de:c4:f8:4f:9f:48:9c:32:f1:
96:02:eb:00:ba:29:bf:85:63:85:d4:10:d0:24:37:
3f:96:99:27:4e:34:72:06:a8:fe:79:16:69:d9:5a:
9a:0e:cb:d9:8a:af:7d:a0:34:da:43:c0:a7:58:00:
67:c1:2b:ae:c3:a0:65:94:b8:25:40:e3:af:36:2b:
c6:f1:84:39:fd:41:05:05:30:5f:5b:d0:96:a9:cf:
4d:03:51:64:c3:c9:b0:bf:8e:ca:5d:c6:cc:a5:c9:
18:7a:65:39:cb:e9:80:e3:78:72:61:9d:d8:09:c6:
cb:7d:0f:5f:1d:72:c8:0c:e9:4e:5e:87:4e:97:f1:
04:5e:33:7a:a4:a2:20:14:82:17:9d:b0:66:bf:70:
0f:59:e2:95:85:2d:80:70:07:eb:98:ad:6c:d8:f6:
03:a5:62:78:a7:cb:07:07:10:65:a4:0d:e9:8d:ad:
c0:45:31:99:9e:6d:f9:c8:a0:8c:a5:fc:04:03:ef:
2c:2e:e7:85:af:76:e5:77:ca:2f:e5:f7:dd:24:70:
c7:4d:0a:38:ca:5b:37:59:f5:d7:55:8e:f7:8e:ad:
7e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:7B:D8:44:9D:5F:64:23:A2:6C:82:82:80:D5:25:EF:AD:4B:CC
X509v3 Authority Key Identifier:
keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3136392e302f32342d3234203d3e20323639393331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.169.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e6:a2:fc:13:bf:18:ea:27:e7:6d:de:bf:f5:49:7b:36:20:
e3:21:ad:6f:b3:0b:3e:6c:1b:82:76:64:2f:5a:17:e9:d0:4d:
7b:20:c6:de:e2:14:1d:47:ae:69:88:18:f6:b8:9d:e6:e5:53:
47:bc:c6:17:b8:51:0c:ca:37:65:64:64:e5:09:cf:06:1a:aa:
83:09:a3:fb:e6:95:8e:fc:5b:98:df:4b:67:0d:bc:b8:c4:15:
00:77:83:c2:37:0a:40:a3:33:78:89:66:7c:07:8e:eb:fa:a7:
d3:4f:ae:e9:3c:55:f9:a7:27:4e:96:2d:c5:98:d2:06:e4:7c:
44:9a:dd:d1:31:1b:9e:51:7c:c6:3c:0a:20:8b:bf:e8:cb:fc:
b1:06:54:73:73:fc:89:1e:9b:a5:21:0e:e5:45:39:0b:69:63:
37:c4:37:8d:c2:dd:9f:55:76:b2:66:30:06:74:76:f9:f8:2a:
a1:e7:5a:6f:74:83:34:f6:01:42:5e:b4:c0:64:da:ee:b4:be:
f1:03:fb:2e:12:c9:3b:bf:dd:ba:39:77:02:42:a9:0a:84:d6:
71:f1:80:8b:72:95:9a:8c:81:0b:5f:5e:97:04:80:87:9f:1b:
45:b2:7c:c7:c0:9c:d5:28:ba:41:2d:19:ef:67:ee:14:64:47:
50:6a:b0:5e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUHN+cCkfycXzTX6imlR0vQrw2LUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MUFBRTkyRjc5OEQyRUU1RDk5RkU2NDVGQzAzODA1
MTY5ODQ3MzAeFw0yNTAyMDQxNzU3NTFaFw0yNjAyMDMxODAyNTFaMDMxMTAvBgNV
BAMTKDA2MDg3QkQ4NDQ5RDVGNjQyM0EyNkM4MjgyODBENTI1RUZBRDRCQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDon5MejVSzzAfopah96UB+kyHA
wY827KJj7Uc9nBepZfJHtt7E+E+fSJwy8ZYC6wC6Kb+FY4XUENAkNz+WmSdONHIG
qP55FmnZWpoOy9mKr32gNNpDwKdYAGfBK67DoGWUuCVA4682K8bxhDn9QQUFMF9b
0Japz00DUWTDybC/jspdxsylyRh6ZTnL6YDjeHJhndgJxst9D18dcsgM6U5eh06X
8QReM3qkoiAUghedsGa/cA9Z4pWFLYBwB+uYrWzY9gOlYninywcHEGWkDemNrcBF
MZmebfnIoIyl/AQD7ywu54WvduV3yi/l990kcMdNCjjKWzdZ9ddVjveOrX5VAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUBgh72ESdX2QjomyCgoDVJe+tS8wwHwYDVR0j
BBgwFoAU1oGq6S95jS7l2Z/mRfwDgFFphHMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjUxNTU0RDE0MkNDQzlDMTczMjg2MkJCNTBFNDNGQTE2
MTVFNzlBNDZERDYxMEM1NEEwRjM4MzAxQzc1NTE5LzAvRDY4MUFBRTkyRjc5OEQy
RUU1RDk5RkU2NDVGQzAzODA1MTY5ODQ3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjgxQUFFOTJGNzk4RDJFRTVE
OTlGRTY0NUZDMDM4MDUxNjk4NDczLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUI1MTU1NEQxNDJDQ0M5QzE3MzI4NjJCQjUwRTQzRkExNjE1RTc5QTQ2
REQ2MTBDNTRBMEYzODMwMUM3NTUxOS8wLzMyMzAzMDJlMzEzMjM1MmUzMTM2Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzOTMzMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADI
fakwDQYJKoZIhvcNAQELBQADggEBAGPmovwTvxjqJ+dt3r/1SXs2IOMhrW+zCz5s
G4J2ZC9aF+nQTXsgxt7iFB1HrmmIGPa4neblU0e8xhe4UQzKN2VkZOUJzwYaqoMJ
o/vmlY78W5jfS2cNvLjEFQB3g8I3CkCjM3iJZnwHjuv6p9NPruk8VfmnJ06WLcWY
0gbkfESa3dExG55RfMY8CiCLv+jL/LEGVHNz/Ikem6UhDuVFOQtpYzfEN43C3Z9V
drJmMAZ0dvn4KqHnWm90gzT2AUJetMBk2u60vvED+y4SyTu/3bo5dwJCqQqE1nHx
gItylZqMgQtfXpcEgIefG0WyfMfAnNUoukEtGe9n7hRkR1BqsF4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:11:38 2025 by rpki-client