Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3235342e302f32332d3233203d3e2036343239.roa
File: 3230302e31342e3235342e302f32332d3233203d3e2036343239.roa (raw, json)
Hash identifier: uDglnk7REnUGfcjx4IJpQXt+YjJ11hC9qDFMYngpYCw=
Subject key identifier: 15:4B:D8:2A:3F:37:03:0C:7D:B7:0E:46:56:31:96:97:CE:F1:14:97
Certificate issuer: /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial: 0D4806C5829FEF4E359D6922D8161BA5B08E3E90
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3235342e302f32332d3233203d3e2036343239.roa
Signing time: Tue 04 Feb 2025 18:43:09 +0000
ROA not before: Tue 04 Feb 2025 18:38:09 +0000
ROA not after: Tue 03 Feb 2026 18:43:09 +0000
asID: 6429
IP address blocks: 200.14.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:48:06:c5:82:9f:ef:4e:35:9d:69:22:d8:16:1b:a5:b0:8e:3e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Validity
Not Before: Feb 4 18:38:09 2025 GMT
Not After : Feb 3 18:43:09 2026 GMT
Subject: CN=154BD82A3F37030C7DB70E4656319697CEF11497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:60:ee:29:1e:4c:69:ea:ac:b9:7f:8c:d9:
45:dd:81:d6:fd:5b:44:60:5f:94:0a:ab:2d:14:26:
ac:86:64:f5:41:9b:2f:1f:7b:77:b8:46:35:04:f3:
15:f0:93:bf:66:d1:74:40:d2:73:19:c7:ef:24:b2:
e7:09:fb:25:4f:87:a0:e4:60:cf:14:fc:d3:c0:4d:
ec:df:8b:29:e7:72:f9:26:df:9e:51:6b:ee:0b:97:
34:61:e0:d2:bd:c6:f4:a1:7d:25:7c:64:ad:9c:3b:
ea:5b:63:ee:93:9c:1f:2b:e7:7b:3d:e1:e3:97:85:
a9:61:20:fa:89:5f:93:8d:02:3b:64:24:29:15:a2:
56:cf:7b:f2:1f:a2:13:af:d4:39:e4:7a:e5:f3:dc:
20:b8:9b:ef:95:6b:87:d4:1d:e9:60:a8:0a:5c:a9:
ab:98:d1:cb:49:26:89:85:44:09:a3:61:bf:df:00:
71:6a:1f:fe:df:65:1d:a4:57:54:6f:2b:f4:68:ee:
83:6d:b4:3b:c2:eb:3f:fa:aa:09:58:26:02:1f:13:
52:30:b6:5e:20:a3:9e:ed:b8:2d:5e:8d:cf:bf:e5:
da:bb:31:f7:ee:c9:5f:51:68:5c:df:d6:80:bd:4d:
7a:e4:11:16:84:90:cd:6f:ae:81:fd:1e:6d:f8:2c:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4B:D8:2A:3F:37:03:0C:7D:B7:0E:46:56:31:96:97:CE:F1:14:97
X509v3 Authority Key Identifier:
keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3235342e302f32332d3233203d3e2036343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:7e:8c:50:3a:0e:73:66:71:4e:11:f2:c0:bc:3f:5f:53:66:
d3:fb:58:e2:3e:fa:f4:7f:1b:a8:99:00:57:d4:45:a1:99:97:
6c:7e:10:7b:31:24:95:74:13:7a:a9:5d:f5:8b:45:f3:11:71:
54:fc:90:09:2a:62:05:42:85:33:62:8b:c7:9b:4f:6e:b0:c8:
44:83:b0:a1:c1:e8:36:9d:b9:65:af:82:14:51:d2:1f:5d:e3:
f2:ff:59:61:dd:d5:e4:2f:42:8d:75:20:aa:34:48:26:29:f6:
ed:db:cd:df:07:11:03:94:82:92:d2:c7:d1:2d:73:91:ea:c1:
70:39:04:8d:2b:d6:80:f7:e4:07:12:e1:38:73:b8:b1:e8:70:
7b:83:cc:62:2d:e4:0a:cf:e9:87:32:7b:e3:47:47:e4:9f:75:
90:d0:28:0a:5d:db:d0:e3:06:2b:22:da:c4:82:9e:28:b0:b3:
d9:5d:10:80:4b:ad:c4:5b:f9:cf:e5:7b:14:0e:03:ee:52:fe:
cb:93:fc:55:e8:8b:26:d2:86:db:ed:a7:7d:b3:2c:2c:23:4f:
8b:c8:62:2b:f5:01:c4:89:9b:0f:1b:2c:22:29:8c:53:a9:c9:
98:49:ee:08:b2:8a:87:46:ba:6d:8c:1a:3c:b5:cd:fe:89:84:
5e:91:1b:e4
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUDUgGxYKf7041nWki2BYbpbCOPpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MzODI2RUM5MzEzMjA5REFDNjEyQkM1RjI2MTBDQjMz
RDMzRDBFNjAeFw0yNTAyMDQxODM4MDlaFw0yNjAyMDMxODQzMDlaMDMxMTAvBgNV
BAMTKDE1NEJEODJBM0YzNzAzMEM3REI3MEU0NjU2MzE5Njk3Q0VGMTE0OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOGDuKR5MaeqsuX+M2UXdgdb9
W0RgX5QKqy0UJqyGZPVBmy8fe3e4RjUE8xXwk79m0XRA0nMZx+8ksucJ+yVPh6Dk
YM8U/NPATezfiynncvkm355Ra+4LlzRh4NK9xvShfSV8ZK2cO+pbY+6TnB8r53s9
4eOXhalhIPqJX5ONAjtkJCkVolbPe/IfohOv1DnkeuXz3CC4m++Va4fUHelgqApc
qauY0ctJJomFRAmjYb/fAHFqH/7fZR2kV1RvK/Ro7oNttDvC6z/6qglYJgIfE1Iw
tl4go57tuC1ejc+/5dq7MffuyV9RaFzf1oC9TXrkERaEkM1vroH9Hm34LHsnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUFUvYKj83Awx9tw5GVjGWl87xFJcwHwYDVR0j
BBgwFoAUzDgm7JMTIJ2sYSvF8mEMsz0z0OYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDQ2Q0FERTZBRTRBNzFCQzY1NjFBN0ZDQTRGQjQxMkRB
N0M0Rjg1NkUxOEU1QzY2REQzMjQyQzk4RjE5NkIzLzAvQ0MzODI2RUM5MzEzMjA5
REFDNjEyQkM1RjI2MTBDQjMzRDMzRDBFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzM4MjZFQzkzMTMyMDlEQUM2
MTJCQzVGMjYxMENCMzNEMzNEMEU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ0NkNBREU2QUU0QTcxQkM2NTYxQTdGQ0E0RkI0MTJEQTdDNEY4NTZF
MThFNUM2NkREMzI0MkM5OEYxOTZCMy8wLzMyMzAzMDJlMzEzNDJlMzIzNTM0MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIDv4wDQYJ
KoZIhvcNAQELBQADggEBACp+jFA6DnNmcU4R8sC8P19TZtP7WOI++vR/G6iZAFfU
RaGZl2x+EHsxJJV0E3qpXfWLRfMRcVT8kAkqYgVChTNii8ebT26wyESDsKHB6Dad
uWWvghRR0h9d4/L/WWHd1eQvQo11IKo0SCYp9u3bzd8HEQOUgpLSx9Etc5HqwXA5
BI0r1oD35AcS4ThzuLHocHuDzGIt5ArP6Ycye+NHR+SfdZDQKApd29DjBisi2sSC
niiws9ldEIBLrcRb+c/lexQOA+5S/suT/FXoiybShtvtp32zLCwjT4vIYiv1AcSJ
mw8bLCIpjFOpyZhJ7giyiodGum2MGjy1zf6JhF6RG+Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:52 2025 by rpki-client