Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230342e302f32342d3234203d3e2036353335.roa
File: 3230302e31342e3230342e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier: FuvSgfJyLBm8o8PCd7721NeFCJFIFmONDDSE+JZNGs8=
Subject key identifier: DD:6C:BD:71:46:6F:55:14:0F:A7:3D:9F:42:1E:9C:6C:79:64:8F:14
Certificate issuer: /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial: 3CD607C13C0810F513271F9A01E2156077463BFC
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230342e302f32342d3234203d3e2036353335.roa
Signing time: Tue 04 Feb 2025 18:43:14 +0000
ROA not before: Tue 04 Feb 2025 18:38:14 +0000
ROA not after: Tue 03 Feb 2026 18:43:14 +0000
asID: 6535
IP address blocks: 200.14.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d6:07:c1:3c:08:10:f5:13:27:1f:9a:01:e2:15:60:77:46:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Validity
Not Before: Feb 4 18:38:14 2025 GMT
Not After : Feb 3 18:43:14 2026 GMT
Subject: CN=DD6CBD71466F55140FA73D9F421E9C6C79648F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:73:b0:c6:10:e7:2e:47:7d:8e:d6:7f:ad:
cf:9f:5d:5e:bf:c3:24:0a:aa:e3:9c:8e:b4:0f:9d:
e4:15:3f:07:29:d7:02:fa:36:c6:ec:dd:db:a4:f6:
03:9c:a0:7d:31:bd:c4:c2:29:6f:17:c0:17:0e:a2:
10:94:45:98:e9:8d:2b:21:db:81:bb:de:e4:b7:51:
64:b5:57:69:b6:7b:8a:21:1f:46:31:d7:f9:79:01:
6f:04:94:20:36:21:fd:78:e4:97:b8:a4:ed:93:7b:
d5:7d:59:55:23:c6:7c:4d:59:9d:d2:be:15:e9:b3:
33:34:7c:b2:f8:7f:04:2b:82:d5:51:2d:48:02:63:
59:aa:92:05:4b:1c:62:15:66:15:f1:42:b6:4c:ed:
99:1a:e5:12:ec:bc:4d:e9:98:db:12:e3:0b:0e:ac:
13:88:e6:40:cc:81:f6:74:68:61:ae:f3:2c:4f:09:
64:f2:5f:d6:51:ea:e6:63:2e:64:6b:4c:a8:82:d4:
42:dc:df:63:35:12:c1:bb:5d:90:52:62:9c:2e:49:
ad:10:e5:ef:e0:5b:88:fb:f4:1b:d8:16:57:e9:73:
f6:1a:02:48:b2:53:4b:d9:9e:d6:2e:35:9e:be:da:
c3:f9:36:da:76:cc:16:6a:e9:0d:46:85:4b:cd:75:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:BD:71:46:6F:55:14:0F:A7:3D:9F:42:1E:9C:6C:79:64:8F:14
X509v3 Authority Key Identifier:
keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3230342e302f32342d3234203d3e2036353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.204.0/24
Signature Algorithm: sha256WithRSAEncryption
69:84:b3:53:a2:46:9c:64:d5:62:d0:c8:dc:30:32:60:a0:8a:
b3:ac:81:12:a2:41:e6:eb:28:da:cb:b5:0a:85:53:ef:7c:21:
8e:cd:d9:9d:36:a4:2d:0d:f7:ab:52:6b:1d:f5:63:03:c9:75:
60:fa:9b:1e:c6:4c:65:22:0a:86:d1:ac:e5:4c:b9:3f:49:9f:
25:0f:35:f9:d7:b6:4b:ef:22:cc:4e:4a:8c:33:15:c3:51:c6:
00:cc:4e:df:d7:88:11:ed:94:ca:fa:d6:1c:3f:cf:51:1b:df:
0a:75:51:bc:01:0a:7b:53:01:65:2d:ac:d5:5d:1f:4e:89:cb:
36:88:ea:76:16:02:a3:04:e3:92:9f:ff:3f:f4:64:09:67:8e:
7d:ec:59:66:d3:6b:5a:e4:87:a0:60:9b:c9:3b:10:80:bb:19:
cf:9c:e2:68:df:38:9a:11:36:9f:06:4f:f1:12:f6:d8:f4:3a:
98:87:94:b3:8e:15:b9:d1:f6:45:06:67:f5:6d:e7:4a:c7:f9:
2a:5b:10:c4:74:b7:e8:42:07:59:78:fe:28:bb:8c:c5:a0:8f:
44:9f:4e:0d:0d:37:7b:c0:a1:f0:0e:2e:be:7a:6b:78:8e:30:
53:91:4d:7e:93:1a:6d:66:57:7a:60:8e:51:be:f2:3f:20:87:
9e:a2:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:48 2025 by rpki-client