Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e20323032.roa
File: 3230312e3139312e302e302f31362d3234203d3e20323032.roa (raw, json)
Hash identifier: ome6HRlUdK+YOTkbWuarY/oqstTDDzDMBRIuq9yGgdI=
Subject key identifier: C8:BC:2A:EA:DF:E6:C5:DC:B0:40:C7:65:A3:29:7A:E1:57:99:9C:96
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 3921F31C2C57FF8C1A6D94BEA1B39F90AE33CFBC
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e20323032.roa
Signing time: Tue 04 Feb 2025 18:36:32 +0000
ROA not before: Tue 04 Feb 2025 18:31:32 +0000
ROA not after: Tue 03 Feb 2026 18:36:32 +0000
asID: 202
IP address blocks: 201.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:21:f3:1c:2c:57:ff:8c:1a:6d:94:be:a1:b3:9f:90:ae:33:cf:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Feb 4 18:31:32 2025 GMT
Not After : Feb 3 18:36:32 2026 GMT
Subject: CN=C8BC2AEADFE6C5DCB040C765A3297AE157999C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:2a:50:eb:12:c3:34:28:51:61:7b:ea:8f:
be:47:a6:a4:9e:03:6a:78:0d:f3:72:57:6a:a9:eb:
c1:b7:24:ee:c4:2e:67:f7:e7:79:91:4a:57:fc:21:
26:48:8a:63:aa:44:f3:86:9f:df:19:87:33:c0:01:
6c:b5:d4:da:0e:48:a1:6f:ae:e4:a2:07:3c:5f:b5:
7c:38:bc:ca:c0:04:dd:4f:cf:bc:d1:ca:f8:e1:6e:
78:1c:50:81:ac:5d:c5:f1:8a:b2:8c:e4:c4:f4:c9:
d8:4b:d4:c4:20:d0:cb:c8:e3:c9:1f:ad:25:fb:f2:
bf:4d:0d:12:ad:f7:c9:fa:de:32:43:d3:2d:a5:1d:
88:a8:d3:ad:e8:9f:10:aa:08:c8:54:98:bf:6f:1a:
d7:79:73:c8:bf:b6:14:96:f2:c2:3e:5a:19:87:9b:
ab:ca:be:67:f9:4f:de:b4:af:24:22:e6:7a:0d:9d:
c6:ea:bb:80:cb:e6:91:c7:e3:34:e3:b9:c2:ab:4f:
eb:50:28:2d:e3:ba:35:c5:07:ad:16:fc:46:1e:a8:
9d:36:6c:59:6e:0c:de:58:b0:13:ba:0f:b5:11:72:
f5:46:79:88:10:2c:5c:ea:1b:e7:47:1b:44:30:15:
89:5b:22:76:e8:86:e2:a9:24:22:f3:da:b2:e8:ab:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BC:2A:EA:DF:E6:C5:DC:B0:40:C7:65:A3:29:7A:E1:57:99:9C:96
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.191.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:84:9f:fc:3d:c8:7b:36:88:d9:37:26:e1:8e:53:d0:71:91:
80:c2:6c:71:f5:66:bf:2f:57:a9:cc:32:c4:51:6c:f0:fc:d2:
36:38:dc:81:0a:36:4f:b0:40:16:fa:58:dd:a9:0f:7a:32:e9:
77:98:69:67:45:86:cb:57:d8:b8:37:a2:b3:85:ec:87:dc:cf:
31:6d:23:ab:03:d4:00:58:ac:48:81:bf:b6:d9:d3:67:9f:9d:
49:2e:00:7f:a7:02:70:39:ce:d1:f8:28:a2:db:e2:38:56:a8:
8b:70:09:17:dc:6a:58:59:a8:47:11:b4:9a:bb:5c:b6:cb:e4:
45:6c:6d:b3:fe:1a:08:a5:bf:68:12:fd:20:21:3a:c5:37:43:
47:a1:5a:ce:12:6a:20:e1:37:61:50:da:f1:80:1c:2b:13:65:
f4:4a:db:48:88:f6:1a:d6:b5:0e:08:58:c5:4b:7a:0b:20:05:
38:61:4b:4b:d6:2d:b8:4f:4f:73:f7:75:cb:59:c7:a4:28:ba:
76:1a:15:6e:3f:6a:25:a7:ca:51:cb:d1:29:1c:cf:b0:8f:24:
ee:2b:75:f2:46:86:3e:01:4a:52:df:d2:0f:ad:09:7b:32:79:
4b:61:79:df:c5:34:2d:2f:cc:6e:1f:e9:50:34:9d:67:e0:9e:
ba:b6:a6:ed
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUOSHzHCxX/4wabZS+obOfkK4zz7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNTAyMDQxODMxMzJaFw0yNjAyMDMxODM2MzJaMDMxMTAvBgNV
BAMTKEM4QkMyQUVBREZFNkM1RENCMDQwQzc2NUEzMjk3QUUxNTc5OTlDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5SpQ6xLDNChRYXvqj75HpqSe
A2p4DfNyV2qp68G3JO7ELmf353mRSlf8ISZIimOqRPOGn98ZhzPAAWy11NoOSKFv
ruSiBzxftXw4vMrABN1Pz7zRyvjhbngcUIGsXcXxirKM5MT0ydhL1MQg0MvI48kf
rSX78r9NDRKt98n63jJD0y2lHYio063onxCqCMhUmL9vGtd5c8i/thSW8sI+WhmH
m6vKvmf5T960ryQi5noNncbqu4DL5pHH4zTjucKrT+tQKC3jujXFB60W/EYeqJ02
bFluDN5YsBO6D7URcvVGeYgQLFzqG+dHG0QwFYlbInbohuKpJCLz2rLoqwIPAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUyLwq6t/mxdywQMdloyl64VeZnJYwHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzAzMTJlMzEzOTMxMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMm/MA0GCSqGSIb3
DQEBCwUAA4IBAQCohJ/8Pch7NojZNybhjlPQcZGAwmxx9Wa/L1epzDLEUWzw/NI2
ONyBCjZPsEAW+ljdqQ96Mul3mGlnRYbLV9i4N6KzheyH3M8xbSOrA9QAWKxIgb+2
2dNnn51JLgB/pwJwOc7R+Cii2+I4VqiLcAkX3GpYWahHEbSau1y2y+RFbG2z/hoI
pb9oEv0gITrFN0NHoVrOEmog4TdhUNrxgBwrE2X0SttIiPYa1rUOCFjFS3oLIAU4
YUtL1i24T09z93XLWcekKLp2GhVuP2olp8pRy9EpHM+wjyTuK3XyRoY+AUpS39IP
rQl7MnlLYXnfxTQtL8xuH+lQNJ1n4J66tqbt
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:22:16 2025 by rpki-client