Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e20323032.roa
File: 3230312e3139322e302e302f31322d3234203d3e20323032.roa (raw, json)
Hash identifier: k/0oEVxi+HilewGqw01fuGvYA7bv2kbC9vPQU3B6+iA=
Subject key identifier: 86:02:5B:DE:A0:35:0B:04:C4:19:73:8A:40:D3:D0:8A:08:92:85:66
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 068589F6EE044A2B8835CAA013F747EBA75E75F5
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e20323032.roa
Signing time: Tue 04 Feb 2025 18:36:34 +0000
ROA not before: Tue 04 Feb 2025 18:31:34 +0000
ROA not after: Tue 03 Feb 2026 18:36:34 +0000
asID: 202
IP address blocks: 201.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:85:89:f6:ee:04:4a:2b:88:35:ca:a0:13:f7:47:eb:a7:5e:75:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Feb 4 18:31:34 2025 GMT
Not After : Feb 3 18:36:34 2026 GMT
Subject: CN=86025BDEA0350B04C419738A40D3D08A08928566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5e:6c:1b:b1:45:3e:e0:4b:d8:99:36:63:fd:
95:b4:37:96:d9:c1:5f:ee:ee:83:2e:74:34:15:d3:
4f:15:cc:21:14:22:ba:6f:e2:e8:b1:0a:3e:2a:32:
10:c9:58:09:48:68:35:6f:35:2e:c2:f1:9b:28:8f:
8d:62:53:d6:ac:58:1f:dc:77:54:31:49:0f:5b:e9:
f5:20:22:69:97:e2:6e:97:03:08:15:75:ba:77:b3:
a3:a0:41:61:65:24:cc:90:b6:37:13:f7:47:cd:3a:
b1:a3:8b:41:08:f2:36:1d:96:85:ff:65:4d:0c:ce:
cb:0e:da:9f:d6:16:34:ab:98:93:a0:89:6e:ca:81:
85:9b:10:4d:ac:07:93:fb:4c:6b:c3:c8:fe:80:f7:
e0:7f:40:44:95:3e:ed:69:7f:4b:b3:e3:17:c6:14:
4b:22:cc:88:b4:6b:cf:28:f0:1e:ee:dc:87:52:69:
6a:c3:4b:9c:33:94:bf:11:a3:72:44:a9:dd:23:6b:
ed:e7:d9:fe:da:d9:d8:a1:5d:9b:7e:d4:4d:72:21:
fb:cb:51:e9:4f:7a:a0:cb:91:17:29:32:fb:b5:37:
9b:66:7d:8c:b3:0d:13:08:d8:aa:3e:43:4d:bd:6e:
8d:a6:c2:8f:ca:2b:bf:ab:ef:20:16:53:57:a4:5d:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:02:5B:DE:A0:35:0B:04:C4:19:73:8A:40:D3:D0:8A:08:92:85:66
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139322e302e302f31322d3234203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.192.0.0/12
Signature Algorithm: sha256WithRSAEncryption
41:e2:a1:4a:3d:1d:a2:6a:81:1b:77:e4:8e:be:87:45:11:b5:
b5:5c:1c:7f:9e:b2:8b:f1:04:12:db:0e:23:68:c4:a0:4d:a6:
24:92:0d:8f:14:80:68:51:c1:02:13:e4:c5:61:c1:f7:f8:a8:
3d:3b:1b:de:51:72:ac:e8:fd:cf:ce:8a:51:90:6d:d6:37:4e:
40:7b:60:7e:c0:9f:09:c0:ad:e6:ed:98:23:46:12:7a:04:bd:
ea:4f:c0:de:e7:5b:8e:fd:e8:e9:eb:d7:6c:17:80:45:b9:d3:
c2:8e:1d:b1:b1:69:2c:71:fa:0b:98:4a:a7:22:6e:8b:68:81:
91:c2:2d:51:f3:f1:97:c6:6e:49:9e:44:a4:80:a9:f3:fc:bc:
85:5f:cb:0f:6f:85:89:3f:e6:c4:9a:dd:c8:aa:df:5e:27:0c:
70:6c:a6:51:9a:2d:59:e4:a5:a0:b0:a9:c0:f3:11:ed:78:c4:
36:d1:52:bb:d8:db:0a:c3:d3:94:9e:4a:75:9b:ad:a5:92:7e:
ce:64:04:7a:35:85:48:7a:1b:02:45:ad:b8:73:63:ca:6d:03:
21:2a:e6:4b:bc:b6:bb:3e:d6:b9:85:a3:17:b4:60:0b:d2:a2:
92:c4:d7:a7:f4:51:a5:09:3e:93:f6:e1:36:3b:0e:fd:72:1f:
e8:9c:db:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:13 2025 by rpki-client