Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e2033333536.roa
File: 3230312e3233372e302e302f31362d3234203d3e2033333536.roa (raw, json)
Hash identifier: BmGhkacoZII8sLfnbE/oPb4Jy29curhUdoFA9IZy8ow=
Subject key identifier: 1D:65:AC:CB:25:08:4E:49:25:41:88:27:5A:06:63:6C:6F:56:76:4F
Certificate issuer: /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial: 3FB169B3327B0B35ED6E5069738D1B676093E743
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e2033333536.roa
Signing time: Tue 04 Feb 2025 18:36:31 +0000
ROA not before: Tue 04 Feb 2025 18:31:31 +0000
ROA not after: Tue 03 Feb 2026 18:36:31 +0000
asID: 3356
IP address blocks: 201.237.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b1:69:b3:32:7b:0b:35:ed:6e:50:69:73:8d:1b:67:60:93:e7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Validity
Not Before: Feb 4 18:31:31 2025 GMT
Not After : Feb 3 18:36:31 2026 GMT
Subject: CN=1D65ACCB25084E49254188275A06636C6F56764F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:14:3b:52:1c:c1:7c:ab:4b:40:60:4d:4e:
5e:a6:48:88:87:ab:6b:56:04:66:67:2d:9a:b0:00:
c7:1e:2e:1d:81:f7:35:ae:e9:18:9e:3a:cd:0b:a1:
d7:15:75:64:da:83:a7:bf:22:ac:c6:71:77:ab:e9:
e1:67:e0:93:53:9a:b2:0d:93:8b:ba:2c:82:68:34:
42:6c:50:86:98:61:43:a6:91:1a:1c:b7:2c:89:20:
6c:d8:12:11:e4:19:f3:74:ea:cc:46:75:7c:44:24:
bf:b0:40:44:fb:8c:7a:54:89:40:99:6a:45:e7:65:
2e:a1:0a:65:64:ef:a5:e8:ac:3e:93:a3:c1:d0:a1:
c0:40:36:5f:43:ab:93:a2:8b:bd:70:50:e9:b3:6d:
81:50:68:83:dd:1e:0d:d4:18:cc:36:cd:ce:08:89:
34:aa:10:4b:5f:24:89:0c:37:77:99:40:77:49:67:
f0:90:d4:28:a6:ac:aa:a8:76:0a:c9:64:95:52:ed:
53:7e:7a:53:23:48:4a:88:0f:c2:6c:7b:2c:3a:84:
7e:e6:12:34:4f:5b:9f:18:e8:07:47:75:ab:ea:c3:
b5:ee:1f:90:ed:ff:84:31:50:3e:1a:d2:c5:55:99:
f3:f2:f0:11:96:1a:a7:c6:16:53:4f:e2:76:64:45:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:65:AC:CB:25:08:4E:49:25:41:88:27:5A:06:63:6C:6F:56:76:4F
X509v3 Authority Key Identifier:
keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.237.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:8c:81:4f:2b:fe:51:65:95:cc:a2:80:b3:b4:65:8f:f3:10:
6e:0b:bd:c5:04:f6:d7:32:77:83:ed:32:f3:6b:f5:a9:4f:de:
7b:1f:01:8b:52:bd:cf:10:a8:76:e1:d0:21:91:7c:99:51:04:
92:ff:65:6d:88:e9:eb:cd:8c:1b:d1:af:71:ec:fc:2b:fa:5a:
c5:2e:97:3e:c8:ad:5a:f5:34:d3:78:8c:6a:b9:5d:9d:f0:a8:
be:e6:78:9e:29:0c:4b:de:2b:5e:3a:26:34:3b:e0:61:98:cb:
60:3d:b7:f5:47:cd:1a:59:69:29:a4:34:99:1d:1d:d1:d2:01:
9f:2c:b8:9f:ca:5a:11:06:7e:ba:7f:17:5b:84:b5:d0:31:3b:
a9:25:03:c1:6c:5c:16:8d:53:db:7e:af:f4:fe:07:a2:24:f9:
99:ab:d2:c7:35:06:e5:b1:84:80:6f:11:04:9d:37:70:2c:15:
3d:91:6a:2d:8c:79:79:ac:5d:ca:49:c6:ae:68:fe:9f:b7:b4:
68:da:95:59:c1:78:d3:fa:1b:e3:00:71:dd:a1:d8:52:57:3f:
a3:1c:0b:dd:84:79:cb:c0:6c:c0:c9:b7:88:cd:3f:9d:18:8f:
bc:aa:f2:2f:51:f1:bc:d6:04:88:3d:70:bb:b7:03:21:3d:4a:
d7:8b:d3:d3
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUP7FpszJ7CzXtblBpc40bZ2CT50MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVEOUREQjZFMDVEMjZEOTNGNzZENDQzNEMwNjBDN0Ux
RDI2RTZDMjAeFw0yNTAyMDQxODMxMzFaFw0yNjAyMDMxODM2MzFaMDMxMTAvBgNV
BAMTKDFENjVBQ0NCMjUwODRFNDkyNTQxODgyNzVBMDY2MzZDNkY1Njc2NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/RQ7UhzBfKtLQGBNTl6mSIiH
q2tWBGZnLZqwAMceLh2B9zWu6RieOs0LodcVdWTag6e/IqzGcXer6eFn4JNTmrIN
k4u6LIJoNEJsUIaYYUOmkRoctyyJIGzYEhHkGfN06sxGdXxEJL+wQET7jHpUiUCZ
akXnZS6hCmVk76XorD6To8HQocBANl9Dq5Oii71wUOmzbYFQaIPdHg3UGMw2zc4I
iTSqEEtfJIkMN3eZQHdJZ/CQ1CimrKqodgrJZJVS7VN+elMjSEqID8Jseyw6hH7m
EjRPW58Y6AdHdavqw7XuH5Dt/4QxUD4a0sVVmfPy8BGWGqfGFlNP4nZkRcS/AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUHWWsyyUITkklQYgnWgZjbG9Wdk8wHwYDVR0j
BBgwFoAU3tndtuBdJtk/dtRDTAYMfh0m5sIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0M3NUM5MTFCMzUyREYwQkM5NjkxRDRGRkVBMDExODI5
MEEyOTZCNDg2MThGOTVBMEQ3QkJGNDJDMjFCQjQzLzAvREVEOUREQjZFMDVEMjZE
OTNGNzZENDQzNEMwNjBDN0UxRDI2RTZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUQ5RERCNkUwNUQyNkQ5M0Y3
NkQ0NDM0QzA2MEM3RTFEMjZFNkMyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNDNzVDOTExQjM1MkRGMEJDOTY5MUQ0RkZFQTAxMTgyOTBBMjk2QjQ4
NjE4Rjk1QTBEN0JCRjQyQzIxQkI0My8wLzMyMzAzMTJlMzIzMzM3MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAye0wDQYJKoZI
hvcNAQELBQADggEBAGWMgU8r/lFllcyigLO0ZY/zEG4LvcUE9tcyd4PtMvNr9alP
3nsfAYtSvc8QqHbh0CGRfJlRBJL/ZW2I6evNjBvRr3Hs/Cv6WsUulz7IrVr1NNN4
jGq5XZ3wqL7meJ4pDEveK146JjQ74GGYy2A9t/VHzRpZaSmkNJkdHdHSAZ8suJ/K
WhEGfrp/F1uEtdAxO6klA8FsXBaNU9t+r/T+B6Ik+Zmr0sc1BuWxhIBvEQSdN3As
FT2Rai2MeXmsXcpJxq5o/p+3tGjalVnBeNP6G+MAcd2h2FJXP6McC92EecvAbMDJ
t4jNP50Yj7yq8i9R8bzWBIg9cLu3AyE9SteL09M=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:55 2025 by rpki-client