Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e302e302f31362d3234203d3e2036343239.roa
File: 3230302e32372e302e302f31362d3234203d3e2036343239.roa (raw, json)
Hash identifier: iYHkH6RuQbL39fnHu7Un9DGEzRkZmMjkug1pzqXHw4s=
Subject key identifier: FE:A8:36:02:43:10:85:CF:9C:42:CD:00:25:A7:42:91:C3:B2:0C:02
Certificate issuer: /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial: 5611EF3511EB3F4555501FA12F54CB8C16E9DE92
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e302e302f31362d3234203d3e2036343239.roa
Signing time: Tue 04 Feb 2025 18:43:15 +0000
ROA not before: Tue 04 Feb 2025 18:38:15 +0000
ROA not after: Tue 03 Feb 2026 18:43:15 +0000
asID: 6429
IP address blocks: 200.27.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:11:ef:35:11:eb:3f:45:55:50:1f:a1:2f:54:cb:8c:16:e9:de:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Validity
Not Before: Feb 4 18:38:15 2025 GMT
Not After : Feb 3 18:43:15 2026 GMT
Subject: CN=FEA83602431085CF9C42CD0025A74291C3B20C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:a0:e3:5c:31:43:8b:5f:47:5c:01:18:7d:
65:17:45:0b:2a:82:01:de:00:cf:c0:79:5e:18:f5:
b3:b7:ba:df:f6:a7:5e:61:fd:4b:71:4d:37:42:28:
d5:9c:7d:7b:c5:57:aa:fc:93:2f:5b:52:60:57:c1:
b4:14:13:5e:0d:7e:f6:b7:2e:7c:ab:25:74:59:f9:
11:4b:10:f2:e8:b4:12:ff:6a:9b:27:d2:21:7d:b7:
37:2c:de:52:63:98:cd:ff:d8:67:d3:37:ef:80:3a:
85:e4:c5:36:25:b0:2f:1a:b2:6c:88:b8:1a:9a:9d:
c8:2b:97:e6:45:eb:80:61:d2:81:ec:30:e7:d5:fc:
3f:59:a1:19:85:36:9c:b0:03:18:41:a3:11:6c:36:
b6:95:db:6d:e7:4e:af:9b:b4:2c:f1:b2:09:93:a4:
e7:f7:d8:e3:a6:a6:36:0f:4f:e7:9b:2d:17:40:71:
8e:b8:74:63:5d:4c:cd:3a:2f:14:6b:ef:ad:ce:e1:
a2:e2:0b:82:85:cc:c8:da:94:19:1c:b2:37:e6:9b:
1e:97:f0:d0:61:c0:90:83:93:38:a1:83:38:fe:07:
10:9d:16:f3:76:06:5a:06:0d:40:10:16:3d:0f:49:
32:75:40:1e:ff:7a:bb:34:98:85:a4:cd:3c:85:9f:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:36:02:43:10:85:CF:9C:42:CD:00:25:A7:42:91:C3:B2:0C:02
X509v3 Authority Key Identifier:
keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e302e302f31362d3234203d3e2036343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:af:88:db:b2:fa:18:fe:a1:9f:9a:1c:a8:68:08:b9:c2:bb:
60:01:75:4d:f2:b0:71:c3:c9:0c:fb:84:95:e5:0e:2d:ae:c1:
04:a1:6e:8e:14:a6:b6:b8:28:a5:42:5a:89:63:58:0b:e3:c4:
8b:d8:ca:8f:29:96:e1:74:ea:7e:f9:fd:9c:a9:a7:4d:c2:3f:
e5:99:72:06:4a:f1:06:05:a7:ca:af:e0:e7:7d:9f:58:53:2b:
f9:42:94:88:c9:c5:75:4a:4a:6f:2c:a5:55:8d:83:70:1c:52:
dc:fe:8b:8f:9c:81:2a:a6:17:e8:4e:cf:58:99:4a:1f:1d:fa:
7c:0b:8e:b5:d0:30:6c:e3:73:43:14:01:ec:2c:77:56:96:78:
b2:28:f9:75:82:68:8d:4a:fd:2b:45:68:04:8f:1f:bb:9e:91:
68:b1:6a:59:6c:4e:d1:cb:f7:75:7b:04:64:7c:ff:7a:c7:07:
66:1d:57:45:a3:f7:6d:e2:ae:2d:32:f1:93:19:f5:f8:4f:0c:
c7:05:79:5a:b3:7b:28:ea:e1:12:bb:f9:25:77:72:67:a2:33:
b3:f6:bc:6f:71:37:cd:e2:70:ca:ad:e4:1c:7c:05:75:87:c6:
5b:1f:88:b8:0e:4a:90:1d:30:db:7e:1d:53:f4:3b:2f:6b:08:
e5:95:b2:5a
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUVhHvNRHrP0VVUB+hL1TLjBbp3pIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MzODI2RUM5MzEzMjA5REFDNjEyQkM1RjI2MTBDQjMz
RDMzRDBFNjAeFw0yNTAyMDQxODM4MTVaFw0yNjAyMDMxODQzMTVaMDMxMTAvBgNV
BAMTKEZFQTgzNjAyNDMxMDg1Q0Y5QzQyQ0QwMDI1QTc0MjkxQzNCMjBDMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOvqDjXDFDi19HXAEYfWUXRQsq
ggHeAM/AeV4Y9bO3ut/2p15h/UtxTTdCKNWcfXvFV6r8ky9bUmBXwbQUE14Nfva3
LnyrJXRZ+RFLEPLotBL/apsn0iF9tzcs3lJjmM3/2GfTN++AOoXkxTYlsC8asmyI
uBqancgrl+ZF64Bh0oHsMOfV/D9ZoRmFNpywAxhBoxFsNraV223nTq+btCzxsgmT
pOf32OOmpjYPT+ebLRdAcY64dGNdTM06LxRr763O4aLiC4KFzMjalBkcsjfmmx6X
8NBhwJCDkzihgzj+BxCdFvN2BloGDUAQFj0PSTJ1QB7/ers0mIWkzTyFn2SRAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQU/qg2AkMQhc+cQs0AJadCkcOyDAIwHwYDVR0j
BBgwFoAUzDgm7JMTIJ2sYSvF8mEMsz0z0OYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDQ2Q0FERTZBRTRBNzFCQzY1NjFBN0ZDQTRGQjQxMkRB
N0M0Rjg1NkUxOEU1QzY2REQzMjQyQzk4RjE5NkIzLzAvQ0MzODI2RUM5MzEzMjA5
REFDNjEyQkM1RjI2MTBDQjMzRDMzRDBFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQzM4MjZFQzkzMTMyMDlEQUM2
MTJCQzVGMjYxMENCMzNEMzNEMEU2LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQ0NkNBREU2QUU0QTcxQkM2NTYxQTdGQ0E0RkI0MTJEQTdDNEY4NTZF
MThFNUM2NkREMzI0MkM5OEYxOTZCMy8wLzMyMzAzMDJlMzIzNzJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzNjM0MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMgbMA0GCSqGSIb3
DQEBCwUAA4IBAQAYr4jbsvoY/qGfmhyoaAi5wrtgAXVN8rBxw8kM+4SV5Q4trsEE
oW6OFKa2uCilQlqJY1gL48SL2MqPKZbhdOp++f2cqadNwj/lmXIGSvEGBafKr+Dn
fZ9YUyv5QpSIycV1SkpvLKVVjYNwHFLc/ouPnIEqphfoTs9YmUofHfp8C4610DBs
43NDFAHsLHdWlniyKPl1gmiNSv0rRWgEjx+7npFosWpZbE7Ry/d1ewRkfP96xwdm
HVdFo/dt4q4tMvGTGfX4TwzHBXlas3so6uESu/kld3JnojOz9rxvcTfN4nDKreQc
fAV1h8ZbH4i4DkqQHTDbfh1T9DsvawjllbJa
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:25 2025 by rpki-client