Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/3230302e302e36372e302f32342d3234203d3e203139353832.roa
File: 3230302e302e36372e302f32342d3234203d3e203139353832.roa (raw, json)
Hash identifier: HwqgjwOainmZ3Vse34dSaQ+WUHcB37Bx9rsHywAmczQ=
Subject key identifier: 47:CF:AD:3F:B9:8F:99:2F:9D:4C:D4:76:C6:C2:F0:96:6C:D7:51:95
Certificate issuer: /CN=222B248A366BA61349BB5B105D7973A9661BE6AA
Certificate serial: 50C451F5CA8A05CD973D3141BFEDAEEEDB1B911C
Authority key identifier: 22:2B:24:8A:36:6B:A6:13:49:BB:5B:10:5D:79:73:A9:66:1B:E6:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B248A366BA61349BB5B105D7973A9661BE6AA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/3230302e302e36372e302f32342d3234203d3e203139353832.roa
Signing time: Tue 04 Feb 2025 18:05:29 +0000
ROA not before: Tue 04 Feb 2025 18:00:29 +0000
ROA not after: Tue 03 Feb 2026 18:05:29 +0000
asID: 19582
IP address blocks: 200.0.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c4:51:f5:ca:8a:05:cd:97:3d:31:41:bf:ed:ae:ee:db:1b:91:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222B248A366BA61349BB5B105D7973A9661BE6AA
Validity
Not Before: Feb 4 18:00:29 2025 GMT
Not After : Feb 3 18:05:29 2026 GMT
Subject: CN=47CFAD3FB98F992F9D4CD476C6C2F0966CD75195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:12:48:b3:b5:34:b5:63:30:62:e0:c8:f2:
84:a4:37:f7:71:85:06:4e:58:cc:dc:1a:70:49:48:
e4:db:8e:ef:65:84:cb:22:ad:9f:37:6c:45:f0:47:
d0:57:2e:74:73:77:db:24:0a:51:87:05:da:29:07:
df:a5:15:82:2d:d9:4c:f4:ee:c2:fd:c3:b9:bc:24:
70:2c:5a:fc:ed:09:c9:90:41:8d:c0:40:a0:e3:8f:
57:ce:95:a6:4b:f4:97:17:8d:9c:ed:aa:95:01:4b:
60:45:e4:57:2c:6b:a1:48:68:ed:4f:f0:82:90:c8:
32:85:94:b8:13:bf:d5:d3:44:4b:52:22:28:92:71:
1b:0a:31:8b:2e:8d:37:1e:37:aa:ff:ee:83:6f:dc:
93:c3:7d:33:c9:08:2d:74:af:f7:91:0c:56:bd:0f:
bc:47:b7:2e:8e:51:9c:a3:27:fb:a9:85:e5:63:6d:
35:19:9f:79:89:30:a0:cd:4c:af:c5:3f:fe:ff:12:
d4:76:de:f7:22:e5:5f:55:68:95:32:0d:1f:de:d5:
c9:88:4c:fa:96:17:36:b6:a0:e4:b1:37:98:6b:dd:
f2:b4:11:7c:cc:3d:26:5b:78:26:75:1e:c8:14:a3:
70:9d:88:6a:e5:e0:d3:a5:74:58:d6:52:34:30:41:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CF:AD:3F:B9:8F:99:2F:9D:4C:D4:76:C6:C2:F0:96:6C:D7:51:95
X509v3 Authority Key Identifier:
keyid:22:2B:24:8A:36:6B:A6:13:49:BB:5B:10:5D:79:73:A9:66:1B:E6:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/222B248A366BA61349BB5B105D7973A9661BE6AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B248A366BA61349BB5B105D7973A9661BE6AA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/3230302e302e36372e302f32342d3234203d3e203139353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.67.0/24
Signature Algorithm: sha256WithRSAEncryption
67:20:87:75:a2:75:dc:87:31:a0:b7:cb:83:15:77:8d:21:58:
44:c2:99:14:54:2d:58:db:42:9c:37:20:cf:30:9f:7f:52:67:
2a:66:7e:83:69:fe:d8:5c:65:b3:b8:cf:84:00:97:e5:9c:11:
13:5d:53:d5:a5:18:41:c2:ac:c2:be:73:d6:eb:10:12:09:c1:
6d:1d:ac:43:f7:33:11:82:fe:de:75:b8:fd:d9:f4:95:4b:f5:
be:b9:3d:5b:ec:71:18:19:0d:ab:d0:57:31:04:f4:02:42:75:
cf:10:45:a6:b4:e9:fa:8a:3e:f6:58:f0:86:40:80:fc:d8:7c:
af:74:94:97:6e:5d:45:d8:9a:4d:e6:1c:6e:b8:a6:8a:ab:08:
43:c5:ed:23:7b:36:33:17:ca:a8:32:f5:8c:02:6b:55:c8:8f:
a6:9b:26:cd:e4:2c:1d:9e:10:2e:d2:e8:82:0e:65:fd:e7:eb:
ee:91:9d:80:a3:97:f6:31:33:d6:d2:21:0f:ec:a2:e7:54:e4:
06:3f:32:ca:28:7f:e0:1a:59:a9:6b:22:7d:82:46:2e:2d:4a:
12:fe:0d:d3:2f:25:de:0e:da:83:48:52:7d:0a:18:d4:b0:37:
35:25:71:8c:90:33:3c:b6:4a:e2:30:de:b5:85:08:c8:3f:3b:
04:07:b8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:05:52 2025 by rpki-client