Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32392e3230302e302f32312d3231203d3e2036353335.roa
File: 3230302e32392e3230302e302f32312d3231203d3e2036353335.roa (raw, json)
Hash identifier: dEyvUXDUT1Kneh++8d2GBnystXsvt9dsQpmcMj8neAM=
Subject key identifier: 65:9C:2B:C5:93:2F:17:CA:19:FA:F5:A6:9C:D6:F9:E3:FD:24:E4:90
Certificate issuer: /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial: 274A3F206214F2A7017151234BDD2B0B316DB0CC
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32392e3230302e302f32312d3231203d3e2036353335.roa
Signing time: Tue 04 Feb 2025 18:43:14 +0000
ROA not before: Tue 04 Feb 2025 18:38:14 +0000
ROA not after: Tue 03 Feb 2026 18:43:14 +0000
asID: 6535
IP address blocks: 200.29.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:4a:3f:20:62:14:f2:a7:01:71:51:23:4b:dd:2b:0b:31:6d:b0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Validity
Not Before: Feb 4 18:38:14 2025 GMT
Not After : Feb 3 18:43:14 2026 GMT
Subject: CN=659C2BC5932F17CA19FAF5A69CD6F9E3FD24E490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:48:9d:11:48:47:67:6b:48:5f:d9:c7:0b:
50:d5:55:b0:25:fa:49:6a:ef:b4:11:9e:70:50:f0:
27:70:04:32:49:2e:4d:13:bf:65:f4:64:22:ba:d7:
70:2a:bb:82:e5:0e:63:9d:ab:e3:42:0a:ac:f6:58:
df:5c:8a:a6:3e:64:25:98:8b:83:67:3a:cd:6f:3d:
e4:16:48:cb:d9:f6:9c:80:28:5b:f8:ff:d6:9a:50:
0c:26:58:8e:f4:a8:f5:40:a2:7b:50:0f:02:47:48:
43:13:a8:25:fc:b4:8f:6c:10:de:40:3c:9f:e7:80:
89:01:3d:56:71:66:b1:af:c2:76:95:35:35:32:16:
9e:1b:91:a5:2d:71:6a:d6:7b:98:a5:6b:2c:59:6d:
35:21:8f:e1:7e:82:0f:c6:58:a9:7e:5d:5a:64:0c:
c3:de:b2:e9:51:f1:59:43:af:62:54:4b:47:c0:06:
23:f0:13:82:04:79:b9:b2:9f:eb:6a:18:31:06:a2:
db:cc:c2:b7:84:ef:b4:5c:e5:1f:4e:3d:e1:1c:81:
b7:cf:97:f3:9f:e2:87:6b:1c:63:52:ee:d8:66:b1:
a8:17:38:e2:e9:cc:0a:f2:f1:ca:a1:14:3a:ee:11:
de:d8:d7:18:f5:0c:dc:f4:62:15:46:ff:c3:60:2d:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9C:2B:C5:93:2F:17:CA:19:FA:F5:A6:9C:D6:F9:E3:FD:24:E4:90
X509v3 Authority Key Identifier:
keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32392e3230302e302f32312d3231203d3e2036353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.200.0/21
Signature Algorithm: sha256WithRSAEncryption
28:07:21:ad:1b:74:56:45:71:5c:df:34:ff:b1:08:8a:86:7a:
be:4b:27:7d:f5:a7:2c:d3:91:2f:69:0c:f1:f3:30:c1:fe:ba:
4e:2b:2c:1f:ae:c1:d7:e0:5f:d5:6b:29:1d:49:57:a0:88:40:
b1:1b:ac:b7:2f:ef:09:74:06:d1:e2:47:7b:f2:48:47:7a:74:
29:e7:62:40:8c:72:e0:0e:2f:1d:d1:9f:74:40:8b:4c:7d:47:
4f:63:9a:f0:86:a4:d2:66:24:d1:fc:9c:06:44:36:61:63:55:
48:64:3c:95:28:46:eb:99:cb:09:69:14:de:a4:f5:b3:27:3e:
f0:47:f2:d0:cc:ba:33:63:ef:86:d3:d1:bb:fc:2a:5c:b4:bd:
8e:8c:46:ae:44:53:13:1f:56:f9:86:f9:7a:3a:13:4f:3c:39:
bd:98:53:2f:ae:67:27:64:3f:02:7e:5e:20:2b:6d:db:b7:10:
7d:ea:8a:b9:fe:cf:e8:3e:bf:47:e8:0b:a1:1e:29:8b:f5:9d:
54:f0:dd:9f:91:c9:51:38:7d:0e:4a:6b:1d:6e:6a:dc:ff:59:
ef:ce:80:14:ef:12:72:ae:e8:7c:51:a9:a8:e8:e4:ea:f8:c4:
07:a8:1e:6b:a2:d0:d7:50:bd:58:ea:e1:3b:81:78:e2:49:ea:
44:40:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:15 2025 by rpki-client