Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33322e302f32332d3234203d3e20323732313134.roa
File: 3230302e3132332e33322e302f32332d3234203d3e20323732313134.roa (raw, json)
Hash identifier: 2LgNxyrjzH10c9dlmaA1Yq94Oi9dNQLYEXikqdrHczs=
Subject key identifier: 86:C4:9A:4C:D2:43:B6:8C:08:99:26:4D:6F:94:6F:91:E5:A4:9F:30
Certificate issuer: /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial: 6C9D2E767685C2A8D5EE4C32E1464899945EAC8D
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33322e302f32332d3234203d3e20323732313134.roa
Signing time: Tue 04 Feb 2025 20:08:13 +0000
ROA not before: Tue 04 Feb 2025 20:03:13 +0000
ROA not after: Tue 03 Feb 2026 20:08:13 +0000
asID: 272114
IP address blocks: 200.123.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:9d:2e:76:76:85:c2:a8:d5:ee:4c:32:e1:46:48:99:94:5e:ac:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Validity
Not Before: Feb 4 20:03:13 2025 GMT
Not After : Feb 3 20:08:13 2026 GMT
Subject: CN=86C49A4CD243B68C0899264D6F946F91E5A49F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:90:d4:07:68:cc:42:30:4c:8b:05:1d:fa:
30:36:b4:1a:0b:05:46:a8:31:ec:61:c7:14:27:9b:
52:39:26:1c:81:d8:29:9d:13:71:5f:3f:fd:32:75:
9e:24:28:a4:ba:c4:d5:4e:3b:78:0d:a6:de:1b:04:
06:c9:8a:c9:21:da:24:87:64:3c:1a:33:09:f0:52:
e1:2c:93:c2:75:76:f3:49:f8:3b:46:72:f5:ac:33:
3f:67:4e:cd:e9:00:13:26:1b:d3:56:5e:92:21:e3:
fc:26:cd:5e:7e:9f:b6:b2:34:8f:1a:54:7e:45:d1:
89:11:5e:28:01:01:f1:da:5d:88:ea:93:1f:8c:17:
69:33:ee:26:09:b3:4c:e2:6c:1a:cc:72:90:4b:f4:
32:d0:d5:07:6a:ad:6e:71:ed:14:34:4a:25:19:67:
33:c2:3a:3b:ff:c2:8b:b3:82:b2:3f:17:23:80:b5:
e5:3c:c7:b4:33:5c:2d:c8:69:1c:dd:da:bf:ec:c0:
56:55:96:f3:ac:a3:7c:e9:fd:54:e0:03:b5:60:72:
29:ed:d9:e9:46:02:ff:1b:c0:4c:d9:43:57:38:d8:
f8:60:bc:30:6e:93:44:e0:36:2c:98:96:5b:e5:4d:
31:93:24:3e:e0:52:3f:45:1b:ad:24:63:5d:c6:ce:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C4:9A:4C:D2:43:B6:8C:08:99:26:4D:6F:94:6F:91:E5:A4:9F:30
X509v3 Authority Key Identifier:
keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33322e302f32332d3234203d3e20323732313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.32.0/23
Signature Algorithm: sha256WithRSAEncryption
47:32:8a:04:18:2c:38:c3:36:e9:fd:05:33:69:33:b8:be:4d:
46:df:9f:75:f7:e9:e3:06:c9:9d:c7:0f:5f:e8:11:ef:7d:b8:
b1:18:bd:6b:91:c6:90:7a:ec:c4:83:13:2f:bd:26:15:f3:f6:
b8:94:c5:89:57:b7:b0:34:aa:e6:c9:1d:23:54:08:d0:9b:c2:
78:83:eb:4c:fd:ea:31:e9:7b:45:ed:c7:04:7b:84:90:a9:95:
63:de:b8:7d:7c:5d:98:a9:7c:19:87:01:25:27:e0:d3:8d:d8:
db:be:1e:f8:ea:61:23:5e:e2:32:42:1a:e0:2b:3f:f5:23:04:
03:ce:35:5b:29:11:0b:02:0b:95:d4:c3:f7:0a:39:80:75:2e:
d0:f3:6d:c9:f2:f9:98:9a:c7:91:26:28:8b:d5:b3:38:4a:35:
4b:7f:5a:c7:80:3c:76:cc:92:cf:f9:04:21:77:88:d6:43:a1:
ea:13:63:ae:3f:44:32:6c:88:31:17:36:26:87:f1:31:88:44:
a1:a1:9d:f1:aa:74:a0:3c:3a:0b:95:00:22:22:9c:de:84:b5:
38:c9:55:d2:2e:1b:7e:32:a7:f8:5d:92:ed:b2:54:cf:27:87:
04:cf:1e:e0:b4:c6:b0:1f:5b:b2:b4:6f:3f:15:d4:1c:0d:c2:
84:e2:a2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:51:54 2025 by rpki-client