Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323033.roa
File: 3230302e39312e36342e302f31382d3234203d3e20323033.roa (raw, json)
Hash identifier: 40H+zRYDXP/5tnvWLmyMJD9/AEfQWCW5daYUjhwsQZA=
Subject key identifier: 45:3D:82:60:39:90:B5:3C:D5:45:0D:FC:D5:A6:AF:F4:2E:ED:47:55
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 303BBA2D1896BCDA574A40A8BDBAE3CC7320732D
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323033.roa
Signing time: Tue 04 Feb 2025 18:36:41 +0000
ROA not before: Tue 04 Feb 2025 18:31:41 +0000
ROA not after: Tue 03 Feb 2026 18:36:41 +0000
asID: 203
IP address blocks: 200.91.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3b:ba:2d:18:96:bc:da:57:4a:40:a8:bd:ba:e3:cc:73:20:73:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Feb 4 18:31:41 2025 GMT
Not After : Feb 3 18:36:41 2026 GMT
Subject: CN=453D82603990B53CD5450DFCD5A6AFF42EED4755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:8f:b3:0b:b5:7d:ee:51:ae:73:39:08:9a:
26:b1:bb:6a:6e:3f:9a:c5:a5:cf:69:35:f3:73:cd:
42:4b:9b:fc:c6:10:cd:6a:e7:f4:76:81:4c:c9:9a:
0b:b7:9d:9a:7b:30:69:73:36:59:a8:bc:11:51:86:
32:77:2c:f1:cf:91:05:0b:e8:6b:09:c7:a1:0c:34:
44:02:73:48:c4:17:1a:df:af:9a:1a:54:fb:12:4f:
a1:53:92:9d:b7:f4:b3:25:f5:87:ac:40:f4:44:fb:
a9:82:b3:54:a5:bd:a5:9e:e1:ce:bd:94:9e:84:e7:
da:ae:66:15:40:78:50:49:f1:34:6d:96:ed:45:1e:
7e:29:e6:2e:0a:d6:6f:b0:d5:86:0a:bc:70:3b:0f:
80:e6:a1:48:39:82:0f:d6:d3:0a:f3:28:15:fc:eb:
eb:b3:67:97:5b:1e:99:d3:3c:ae:c8:ec:60:33:d7:
bd:f4:00:7f:f5:75:8e:a9:20:bc:33:57:fb:fe:ec:
99:d1:4d:30:1b:e3:da:bf:b1:41:82:3e:e7:0b:2a:
04:6d:df:c0:07:8a:20:50:10:71:58:9e:3d:fe:01:
68:1d:db:2a:46:2e:97:4e:33:52:71:44:b9:5f:91:
5e:d3:db:92:ec:34:50:f5:17:a0:d4:4c:a6:a2:58:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3D:82:60:39:90:B5:3C:D5:45:0D:FC:D5:A6:AF:F4:2E:ED:47:55
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b3:04:f7:93:ff:92:5c:ce:97:6a:32:b3:2e:2d:19:d5:b7:57:
9c:24:d1:7e:5d:c5:78:b2:17:96:d0:10:59:fe:4b:bc:af:05:
4a:88:69:47:82:22:b1:cb:9a:09:33:ca:92:ff:bf:ff:22:33:
71:75:86:7b:7e:83:3f:9b:8f:06:5f:2e:46:bc:6a:b5:87:c2:
28:65:9a:c7:49:47:43:b4:45:0c:ce:1c:95:a9:89:81:d0:2a:
80:03:85:da:43:5a:2a:5c:06:a1:36:b5:d6:2f:b2:53:3c:08:
38:4d:a1:3c:9d:51:1e:2b:f7:2d:f2:8b:8c:a9:9c:16:5a:a3:
00:16:15:c0:44:7c:a9:c5:b1:a4:f3:46:98:83:8b:98:23:1d:
9c:47:96:1b:73:7d:47:97:52:bd:02:32:66:a2:65:00:65:2e:
c7:29:a8:d3:df:f6:85:7b:59:3e:e0:eb:fe:4d:93:5e:f5:92:
b3:80:12:cb:e3:02:ae:3d:0e:63:d6:4c:7c:a8:34:ec:60:07:
30:70:e6:e9:c2:43:91:ae:e6:b1:cf:18:41:bb:71:2e:3f:57:
12:ee:78:22:c4:9a:7f:43:1d:3a:d8:f7:52:14:78:3f:07:33:
47:d3:a3:a9:cf:aa:15:27:b0:dd:46:12:54:ba:58:62:72:e6:
42:d7:4c:7c
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUMDu6LRiWvNpXSkCovbrjzHMgcy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNTAyMDQxODMxNDFaFw0yNjAyMDMxODM2NDFaMDMxMTAvBgNV
BAMTKDQ1M0Q4MjYwMzk5MEI1M0NENTQ1MERGQ0Q1QTZBRkY0MkVFRDQ3NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRco+zC7V97lGuczkImiaxu2pu
P5rFpc9pNfNzzUJLm/zGEM1q5/R2gUzJmgu3nZp7MGlzNlmovBFRhjJ3LPHPkQUL
6GsJx6EMNEQCc0jEFxrfr5oaVPsST6FTkp239LMl9YesQPRE+6mCs1SlvaWe4c69
lJ6E59quZhVAeFBJ8TRtlu1FHn4p5i4K1m+w1YYKvHA7D4DmoUg5gg/W0wrzKBX8
6+uzZ5dbHpnTPK7I7GAz1730AH/1dY6pILwzV/v+7JnRTTAb49q/sUGCPucLKgRt
38AHiiBQEHFYnj3+AWgd2ypGLpdOM1JxRLlfkV7T25LsNFD1F6DUTKaiWKhrAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQURT2CYDmQtTzVRQ381aav9C7tR1UwHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzAzMDJlMzkzMTJlMzYzNDJlMzAy
ZjMxMzgyZDMyMzQyMDNkM2UyMDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBshbQDANBgkqhkiG
9w0BAQsFAAOCAQEAswT3k/+SXM6XajKzLi0Z1bdXnCTRfl3FeLIXltAQWf5LvK8F
SohpR4IiscuaCTPKkv+//yIzcXWGe36DP5uPBl8uRrxqtYfCKGWax0lHQ7RFDM4c
lamJgdAqgAOF2kNaKlwGoTa11i+yUzwIOE2hPJ1RHiv3LfKLjKmcFlqjABYVwER8
qcWxpPNGmIOLmCMdnEeWG3N9R5dSvQIyZqJlAGUuxymo09/2hXtZPuDr/k2TXvWS
s4ASy+MCrj0OY9ZMfKg07GAHMHDm6cJDka7msc8YQbtxLj9XEu54IsSaf0MdOtj3
UhR4PwczR9Ojqc+qFSew3UYSVLpYYnLmQtdMfA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:07:42 2025 by rpki-client