Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234382e302f32322d3234203d3e2036343239.roa
File: 3230302e31342e3234382e302f32322d3234203d3e2036343239.roa (raw, json)
Hash identifier: CfaFrRunz7byy3ip4MuyvDRBFxl5eYost4mNHjFZ4hM=
Subject key identifier: B4:56:FE:49:E2:5D:9C:7C:21:D9:BF:97:05:2B:7D:9C:80:60:95:2D
Certificate issuer: /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial: 78B45618C7B9F07296F1D8F24B3B169295B75F2B
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234382e302f32322d3234203d3e2036343239.roa
Signing time: Tue 04 Feb 2025 18:43:16 +0000
ROA not before: Tue 04 Feb 2025 18:38:16 +0000
ROA not after: Tue 03 Feb 2026 18:43:16 +0000
asID: 6429
IP address blocks: 200.14.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b4:56:18:c7:b9:f0:72:96:f1:d8:f2:4b:3b:16:92:95:b7:5f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Validity
Not Before: Feb 4 18:38:16 2025 GMT
Not After : Feb 3 18:43:16 2026 GMT
Subject: CN=B456FE49E25D9C7C21D9BF97052B7D9C8060952D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:1e:5b:9f:52:82:73:fd:5d:b1:b8:ee:6b:
08:6e:90:75:f7:3d:61:14:24:b0:40:12:f2:00:36:
6b:1c:fc:d1:8a:db:8b:39:4d:39:1a:70:63:55:8b:
77:24:4a:4d:d5:84:64:8c:b2:a6:e0:1f:79:17:87:
a5:69:96:b0:2c:6d:bb:a0:6a:79:95:ef:a4:a3:33:
02:22:2a:90:06:a5:53:21:9c:1f:39:08:b2:dd:1b:
78:e5:dc:a2:48:bd:80:39:5d:84:f4:15:87:fc:03:
7c:f6:9d:b2:cd:40:bf:d2:94:4d:3a:5d:05:ab:d6:
86:d8:6e:ba:ce:4a:8c:b5:e0:6f:30:1f:47:1c:ed:
60:ea:9a:af:73:2a:5a:a4:7e:ef:cb:6f:ef:08:09:
93:85:2f:2b:7a:f1:d6:46:ae:78:16:04:2f:81:c6:
c0:e1:1d:ab:e0:54:7a:9e:31:d8:e2:60:96:21:0c:
bd:48:75:d5:fc:fc:d9:37:53:66:8f:c4:b0:94:60:
95:a6:0a:c6:08:0a:eb:28:b8:42:3a:a5:9c:ba:ed:
73:85:c4:cd:95:0e:34:cd:1e:78:e3:9a:39:82:5e:
ab:7d:36:e9:bb:50:2a:be:92:80:b4:83:5c:be:0e:
58:a4:46:c2:c5:a6:8e:34:c8:2c:74:f1:d4:ca:cf:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:56:FE:49:E2:5D:9C:7C:21:D9:BF:97:05:2B:7D:9C:80:60:95:2D
X509v3 Authority Key Identifier:
keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234382e302f32322d3234203d3e2036343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.248.0/22
Signature Algorithm: sha256WithRSAEncryption
04:38:f5:2c:5c:a9:a1:46:27:a3:b9:bd:4f:24:55:11:5e:09:
d4:de:20:05:be:f5:06:7b:e3:f6:94:e7:bc:63:b3:d4:64:8d:
df:cb:e5:dc:a8:29:21:27:7c:de:88:0d:13:a3:85:10:a8:40:
48:8b:b7:43:7a:dc:44:43:43:3b:42:fd:6a:11:4f:89:8b:4a:
50:76:cb:ac:37:0a:3a:0c:e2:00:b6:6b:9b:3f:a7:35:fe:11:
85:39:79:fb:c1:76:9d:de:47:04:15:42:e1:f7:29:fb:bf:58:
b7:8d:fc:9e:e2:7b:71:a4:41:f4:ed:92:54:8a:e7:2d:5c:5e:
c1:f1:7b:aa:b5:5b:fe:1f:60:71:d5:a2:07:26:8e:e0:ee:09:
59:9d:58:e5:fb:c8:51:17:b7:b8:58:fc:14:04:a6:d5:da:ef:
37:43:29:5d:3e:2a:28:75:8e:58:77:09:3e:08:fd:be:ac:b8:
d6:0d:88:20:9b:7b:0c:a3:12:ff:73:07:8d:3f:d8:b6:a1:18:
57:11:04:b2:19:6d:f3:c0:2d:93:18:ae:4e:76:ee:1f:c8:5e:
88:d5:61:93:35:3a:6d:5f:21:f8:cd:51:62:3e:32:a4:95:4a:
f7:de:d8:e9:10:c8:bc:7b:4c:29:e0:68:e7:68:1f:ad:ed:ef:
2f:1b:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:07 2025 by rpki-client