Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3230302e34392e3132302e302f32312d3233203d3e203237393630.roa
File: 3230302e34392e3132302e302f32312d3233203d3e203237393630.roa (raw, json)
Hash identifier: W7LAUu3wfkRTgywmh6NmotLz3v/9RrGhmDfHqlviA/o=
Subject key identifier: B5:30:20:98:C4:C2:C4:8F:EE:3F:B5:33:95:CD:7B:F4:59:73:09:10
Certificate issuer: /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial: 500C123F3A53C45A5090A3D76A2C552177769B9D
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3230302e34392e3132302e302f32312d3233203d3e203237393630.roa
Signing time: Tue 04 Feb 2025 18:31:04 +0000
ROA not before: Tue 04 Feb 2025 18:26:04 +0000
ROA not after: Tue 03 Feb 2026 18:31:04 +0000
asID: 27960
IP address blocks: 200.49.120.0/21 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0c:12:3f:3a:53:c4:5a:50:90:a3:d7:6a:2c:55:21:77:76:9b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Validity
Not Before: Feb 4 18:26:04 2025 GMT
Not After : Feb 3 18:31:04 2026 GMT
Subject: CN=B5302098C4C2C48FEE3FB53395CD7BF459730910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:2e:45:7a:fe:47:5f:2e:24:1d:63:6f:fe:
f7:2f:f5:18:02:fb:a2:0a:91:f7:3f:df:4a:59:65:
ff:d6:8a:cf:15:9f:32:5d:a0:ff:a4:5e:c3:74:8b:
21:5d:62:83:bf:d2:0a:d5:d9:ee:0e:c0:c4:2d:01:
1a:0a:1d:df:2d:63:fe:1e:ed:af:88:db:ab:6a:b7:
4f:4e:bc:de:44:ad:11:c6:dc:c9:c2:f2:13:1c:2c:
8b:3f:61:c2:d0:34:80:8e:f3:9b:f4:25:98:24:18:
76:24:5d:1a:5d:ec:ce:49:7e:61:eb:ed:83:93:9d:
ed:26:b1:c6:51:0b:f0:97:c4:e2:db:bd:32:74:32:
29:94:5d:46:77:ed:df:cc:de:84:1e:21:e0:e1:fa:
08:58:11:ae:99:93:ee:42:da:32:4a:57:17:24:5b:
b3:14:89:ec:6e:5e:0e:01:b2:46:79:34:a6:e5:41:
47:87:d7:df:95:7f:bb:2d:4c:11:eb:5b:6b:38:4c:
f3:00:ea:25:88:58:c2:d3:d7:2e:47:7d:02:69:9d:
4c:b2:a0:52:1b:97:43:b5:f1:18:cb:54:46:57:e7:
85:d3:84:c7:7e:05:d9:81:37:3b:2d:00:7e:a8:0e:
85:48:ca:56:ee:29:bf:2e:79:22:46:e8:3f:1a:2b:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:30:20:98:C4:C2:C4:8F:EE:3F:B5:33:95:CD:7B:F4:59:73:09:10
X509v3 Authority Key Identifier:
keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3230302e34392e3132302e302f32312d3233203d3e203237393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.49.120.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:ae:f2:58:55:5b:18:20:70:f9:28:2e:b6:8d:b5:1a:89:66:
a7:ce:72:c4:5f:ee:99:94:33:de:c2:df:53:6b:b4:35:7e:4a:
6d:3a:0d:84:f9:fe:f0:77:3f:e0:3d:fb:06:8b:c3:21:09:79:
2f:07:e3:ae:3a:b5:b3:7e:b9:41:cf:2f:8f:ff:8d:47:ce:ed:
94:a2:37:69:af:b3:db:99:e6:7b:86:26:08:42:c2:f0:75:88:
be:ed:17:2f:19:22:a8:93:56:e8:55:42:08:af:33:98:b4:6a:
0c:f5:d1:ab:d7:b0:58:ab:e5:2a:58:95:53:8a:2a:46:0e:74:
8b:8b:a0:82:e6:a1:2e:e0:62:fe:9d:4d:2e:c7:66:e0:9d:8b:
7f:c7:35:32:71:e9:d0:d6:92:e3:ef:9f:02:16:94:f8:76:63:
5a:24:97:2d:90:09:26:30:6a:39:94:8f:d2:f1:10:c2:cd:a4:
c6:91:bb:fa:02:08:d0:e7:6a:2b:10:94:d1:00:15:41:c6:51:
ec:88:0f:c1:3e:35:d5:a0:d7:b5:2d:3d:ed:6b:ac:ad:73:a5:
4d:bd:df:89:3b:e5:b2:50:0f:c9:03:67:e9:06:ae:fb:a1:06:
bf:63:51:2b:08:c3:8d:c2:0a:6a:71:a8:96:a0:4d:d6:82:02:
5a:d3:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:18:26 2025 by rpki-client