Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa
File: 3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier: /45RtdChXS+sMD+m976K8FEbpAfOu4JBO33VPA47p+U=
Subject key identifier: 47:CD:F8:05:20:4A:FC:0D:8C:54:1A:98:DE:1C:41:CC:18:66:12:1A
Certificate issuer: /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial: 275FA3AE1E5E2217A41F6049E56E79BF79B6F779
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa
Signing time: Tue 04 Feb 2025 18:02:51 +0000
ROA not before: Tue 04 Feb 2025 17:57:51 +0000
ROA not after: Tue 03 Feb 2026 18:02:51 +0000
asID: 269931
IP address blocks: 200.125.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5f:a3:ae:1e:5e:22:17:a4:1f:60:49:e5:6e:79:bf:79:b6:f7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
Validity
Not Before: Feb 4 17:57:51 2025 GMT
Not After : Feb 3 18:02:51 2026 GMT
Subject: CN=47CDF805204AFC0D8C541A98DE1C41CC1866121A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:b6:8b:18:be:8b:3e:83:48:a8:e9:71:8d:
96:fd:4f:70:fe:1f:20:90:5b:85:22:39:98:bd:e7:
60:ce:f3:cf:e4:78:ee:d5:52:a7:60:a8:ed:f6:01:
73:0e:c7:1c:da:af:a9:54:31:eb:65:4a:1d:43:08:
c1:4e:a8:f1:eb:4c:dc:fd:38:79:cd:76:48:99:da:
0d:1c:ac:69:fd:80:e4:53:7a:b1:83:9e:f2:3f:85:
93:00:cb:59:99:31:3b:f6:ce:bb:84:60:41:65:63:
0b:24:8a:b7:3b:91:6f:d5:36:61:f1:ca:c9:50:9a:
76:67:15:b1:32:8b:1d:89:ba:a7:1c:5f:0a:d2:ed:
15:ed:66:c6:81:3f:db:f7:8f:3f:18:33:ce:db:db:
a9:06:a9:38:04:e5:28:13:2c:85:72:fa:7e:a6:e7:
f1:df:19:89:89:51:6a:d9:dd:a7:12:2e:15:22:75:
70:ed:11:ce:e8:6f:d0:8e:04:e1:13:b8:f7:83:9e:
c3:ca:3f:b9:b7:00:d7:cd:12:3c:c8:e4:95:45:ce:
18:ea:2f:06:fc:9e:a9:6c:e9:b3:44:9e:bd:d8:1b:
0c:d6:e0:54:93:ba:10:89:c8:18:13:ab:b9:ad:e6:
fd:63:1a:7b:83:25:cf:99:90:3c:09:64:a5:74:b6:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CD:F8:05:20:4A:FC:0D:8C:54:1A:98:DE:1C:41:CC:18:66:12:1A
X509v3 Authority Key Identifier:
keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
51:21:ab:81:e7:75:88:94:45:e4:d0:f1:8d:ea:dd:e1:22:09:
9a:16:05:1b:17:c5:73:c6:6d:8b:26:77:e5:87:c3:2a:95:3d:
d8:15:be:0a:87:26:1f:ad:21:ae:1e:72:10:fe:ff:79:68:26:
1b:81:15:0a:2c:11:42:36:45:85:26:db:39:91:59:76:a1:d2:
00:1b:e0:1e:7d:7d:cc:25:90:fb:77:6e:47:b0:54:ce:21:1e:
dd:e8:cd:6f:1e:e8:26:66:5c:95:4d:37:39:26:35:3b:0d:b7:
bf:b3:02:34:f8:fb:13:da:68:df:95:e9:d0:5f:13:50:36:03:
bb:7c:33:89:9c:c2:a6:5e:7e:35:0e:d4:14:7e:97:12:31:03:
2b:8a:91:44:67:27:59:eb:3b:db:04:20:03:3a:10:76:7f:78:
1a:63:f0:80:05:0e:06:e6:3d:16:e8:a2:4f:a1:42:83:1e:50:
54:b2:f7:ee:54:a6:e8:dc:bc:ea:fe:95:89:33:69:88:78:71:
b1:c3:ae:98:49:5d:75:02:8f:86:2f:f1:5c:f2:2e:b6:47:0f:
18:c0:85:6a:8d:1b:1f:7d:ae:1f:7e:23:e7:93:a0:0a:8e:8a:
ba:b5:ba:9f:57:97:50:a9:b8:90:07:17:94:cf:de:9f:26:8f:
2f:1f:65:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:14:10 2025 by rpki-client