Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/3230302e33392e3134382e302f32332d3234203d3e20323730303132.roa
File: 3230302e33392e3134382e302f32332d3234203d3e20323730303132.roa (raw, json)
Hash identifier: jBzfwgn+GkczbZEwQ/zEHW85lXdQZqVoLEy1wJaVq4E=
Subject key identifier: 2B:9B:02:32:9B:E3:BD:5A:75:49:DF:93:68:80:0C:81:4E:A3:07:FF
Certificate issuer: /CN=C49792A535C3870BDA2A89A00898F9EA1F1F61F0
Certificate serial: 74EC26801B5596EE72CD21FB264A838F66CB2C18
Authority key identifier: C4:97:92:A5:35:C3:87:0B:DA:2A:89:A0:08:98:F9:EA:1F:1F:61:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/3230302e33392e3134382e302f32332d3234203d3e20323730303132.roa
Signing time: Tue 04 Feb 2025 18:09:47 +0000
ROA not before: Tue 04 Feb 2025 18:04:47 +0000
ROA not after: Tue 03 Feb 2026 18:09:47 +0000
asID: 270012
IP address blocks: 200.39.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ec:26:80:1b:55:96:ee:72:cd:21:fb:26:4a:83:8f:66:cb:2c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49792A535C3870BDA2A89A00898F9EA1F1F61F0
Validity
Not Before: Feb 4 18:04:47 2025 GMT
Not After : Feb 3 18:09:47 2026 GMT
Subject: CN=2B9B02329BE3BD5A7549DF9368800C814EA307FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:33:43:cd:84:40:66:b9:2e:28:51:48:32:
97:4b:fe:91:12:a5:82:5a:f5:aa:fd:3c:a3:ce:f3:
6b:4c:f4:5a:37:1b:e5:04:be:26:ab:39:bd:5f:45:
c7:1a:7b:c3:8f:15:47:4b:56:ef:0d:7a:fb:50:d2:
50:8f:40:67:31:1b:f9:cc:82:3c:2d:67:eb:5c:32:
2c:54:17:42:03:56:fc:7d:e1:25:0f:bc:d0:51:0e:
96:4d:30:29:b3:c7:29:02:2a:52:4c:f8:0e:b8:21:
1b:67:46:19:4a:b1:b3:8b:17:b8:ac:0f:4c:f9:00:
38:4b:8a:32:4c:57:35:a8:c3:41:a4:c6:dd:56:a3:
c6:51:8e:cd:e8:b6:d1:de:c6:61:44:0f:e4:ff:98:
38:97:81:e2:b3:1e:23:30:0b:74:af:a4:a8:7d:c6:
0f:8e:2a:3e:45:18:53:a5:d6:56:64:fa:7b:b0:4d:
e8:c6:a9:fa:da:0f:6e:7d:46:a6:a1:36:20:1f:06:
05:8f:9d:f0:ee:d4:59:2a:e6:a2:30:4f:95:ff:2c:
b7:e8:76:f3:24:c7:e7:c5:b1:de:fa:a9:b3:23:9d:
26:30:16:f5:71:74:5f:8f:63:3b:f2:e5:4f:cf:02:
d4:93:0c:d2:60:67:5b:42:98:66:20:e4:bb:53:14:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:02:32:9B:E3:BD:5A:75:49:DF:93:68:80:0C:81:4E:A3:07:FF
X509v3 Authority Key Identifier:
keyid:C4:97:92:A5:35:C3:87:0B:DA:2A:89:A0:08:98:F9:EA:1F:1F:61:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/3230302e33392e3134382e302f32332d3234203d3e20323730303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.39.148.0/23
Signature Algorithm: sha256WithRSAEncryption
08:aa:31:87:fc:50:67:6c:a7:9c:3e:99:3c:e4:fe:d7:39:3f:
4c:97:1d:1d:d0:ed:44:04:9f:53:f6:dc:ec:c5:aa:5e:b1:b6:
5f:44:ad:08:50:96:05:d7:2e:31:13:5a:8b:1e:0b:8f:ea:c4:
0f:46:fe:6d:11:bf:38:a2:ff:d1:1c:7d:f7:4f:bd:c1:f4:eb:
4b:9c:8a:7a:f5:15:02:c8:d9:fb:93:d6:11:ca:9b:1f:a4:80:
13:62:a1:ab:b1:b8:87:8f:4b:40:af:84:8e:25:ad:f5:94:02:
88:07:46:e0:95:3b:6d:76:20:f8:ca:ee:50:65:f6:0a:6b:8e:
89:4e:da:ca:ba:c8:b8:1a:5c:90:63:41:a1:9e:91:8e:25:93:
78:11:51:29:e6:8d:c2:6a:b4:73:e0:55:bd:9d:0e:06:cb:63:
c6:0f:03:fb:26:8d:15:5d:a6:44:94:c0:82:98:aa:d0:d8:8a:
4d:b4:09:9e:36:78:9a:3a:f9:b4:c5:7f:bc:e5:88:b6:de:c5:
f3:98:9a:17:da:25:fd:e1:b5:6f:92:e7:3e:bf:8c:d2:bb:37:
b2:cb:22:81:f3:05:14:d1:67:4c:bd:20:f0:28:ea:52:33:ce:
66:db:32:fc:e6:34:4e:14:4d:91:bc:a0:4c:f9:35:d6:8c:bc:
59:9e:47:d5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdOwmgBtVlu5yzSH7JkqDj2bLLBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ5NzkyQTUzNUMzODcwQkRBMkE4OUEwMDg5OEY5RUEx
RjFGNjFGMDAeFw0yNTAyMDQxODA0NDdaFw0yNjAyMDMxODA5NDdaMDMxMTAvBgNV
BAMTKDJCOUIwMjMyOUJFM0JENUE3NTQ5REY5MzY4ODAwQzgxNEVBMzA3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdzNDzYRAZrkuKFFIMpdL/pES
pYJa9ar9PKPO82tM9Fo3G+UEviarOb1fRccae8OPFUdLVu8NevtQ0lCPQGcxG/nM
gjwtZ+tcMixUF0IDVvx94SUPvNBRDpZNMCmzxykCKlJM+A64IRtnRhlKsbOLF7is
D0z5ADhLijJMVzWow0Gkxt1Wo8ZRjs3ottHexmFED+T/mDiXgeKzHiMwC3SvpKh9
xg+OKj5FGFOl1lZk+nuwTejGqfraD259RqahNiAfBgWPnfDu1Fkq5qIwT5X/LLfo
dvMkx+fFsd76qbMjnSYwFvVxdF+PYzvy5U/PAtSTDNJgZ1tCmGYg5LtTFKMBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUK5sCMpvjvVp1Sd+TaIAMgU6jB/8wHwYDVR0j
BBgwFoAUxJeSpTXDhwvaKomgCJj56h8fYfAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTVGREI1OTAwNkYxRjQyRUNEMTg3QkU3NjlFM0NGQTUw
N0UzNEZCNzNDMDQ5MkM1QkIwNDU0M0NENDMxMDlDLzAvQzQ5NzkyQTUzNUMzODcw
QkRBMkE4OUEwMDg5OEY5RUExRjFGNjFGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDk3OTJBNTM1QzM4NzBCREEy
QTg5QTAwODk4RjlFQTFGMUY2MUYwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUU1RkRCNTkwMDZGMUY0MkVDRDE4N0JFNzY5RTNDRkE1MDdFMzRGQjcz
QzA0OTJDNUJCMDQ1NDNDRDQzMTA5Qy8wLzMyMzAzMDJlMzMzOTJlMzEzNDM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzMTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByCeU
MA0GCSqGSIb3DQEBCwUAA4IBAQAIqjGH/FBnbKecPpk85P7XOT9Mlx0d0O1EBJ9T
9tzsxapesbZfRK0IUJYF1y4xE1qLHguP6sQPRv5tEb84ov/RHH33T73B9OtLnIp6
9RUCyNn7k9YRypsfpIATYqGrsbiHj0tAr4SOJa31lAKIB0bglTttdiD4yu5QZfYK
a46JTtrKusi4GlyQY0GhnpGOJZN4EVEp5o3CarRz4FW9nQ4Gy2PGDwP7Jo0VXaZE
lMCCmKrQ2IpNtAmeNniaOvm0xX+85Yi23sXzmJoX2iX94bVvkuc+v4zSuzeyyyKB
8wUU0WdMvSDwKOpSM85m2zL85jROFE2RvKBM+TXWjLxZnkfV
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:30 2025 by rpki-client