Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa
File: 3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa (raw, json)
Hash identifier: jVYFFmYw2NSSnW/A8mtOpO//DiX+aRe4KJo41WERxmk=
Subject key identifier: 20:0B:E0:AE:04:E3:3C:3D:A6:E2:2B:C2:0D:E2:13:89:D3:D9:48:73
Certificate issuer: /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial: 5709A755C2C802A01EB4D88D091692F1882BA411
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa
Signing time: Tue 04 Feb 2025 18:39:20 +0000
ROA not before: Tue 04 Feb 2025 18:34:20 +0000
ROA not after: Tue 03 Feb 2026 18:39:20 +0000
asID: 263821
IP address blocks: 200.189.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:09:a7:55:c2:c8:02:a0:1e:b4:d8:8d:09:16:92:f1:88:2b:a4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Validity
Not Before: Feb 4 18:34:20 2025 GMT
Not After : Feb 3 18:39:20 2026 GMT
Subject: CN=200BE0AE04E33C3DA6E22BC20DE21389D3D94873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:68:f4:49:7c:fe:9b:d3:fe:57:e2:7a:b9:
f8:50:39:7b:e3:0d:46:f7:cb:ac:4e:95:8d:17:1f:
a5:c7:ff:c6:a6:7a:e3:79:5f:ea:6e:4e:59:9c:11:
63:ad:aa:01:ca:b4:3e:42:d1:90:7b:c1:01:48:3d:
a5:61:b4:79:f5:61:92:03:90:a4:e1:9f:be:10:f7:
cf:75:16:7c:67:02:88:ce:b9:02:e5:6a:c8:1d:22:
b5:44:af:13:0b:5d:34:3c:cf:cf:82:e7:34:15:d4:
20:30:76:b9:05:3a:a7:84:19:0d:53:0d:96:c2:f5:
85:9b:61:5f:f3:d5:10:85:31:d3:dd:cd:00:4b:c5:
4c:a6:b2:71:8f:da:bb:64:9d:94:e0:86:5f:64:18:
34:8c:2c:dd:2d:7c:c5:33:5d:52:9f:b3:4a:81:26:
97:6d:09:77:53:bc:4c:e3:a6:7b:c5:ba:4e:53:71:
c3:e2:48:a0:11:50:fd:0b:19:87:fc:22:bf:72:00:
10:9f:a9:09:cd:64:30:e5:25:0e:9a:14:65:e7:ad:
0c:ff:fc:44:55:7a:83:20:a4:67:3f:3e:53:db:b1:
d9:af:2f:ba:b0:49:85:72:fd:75:44:6a:fd:59:f7:
68:4c:6d:6d:6c:08:18:06:e2:64:86:40:3a:01:37:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:E0:AE:04:E3:3C:3D:A6:E2:2B:C2:0D:E2:13:89:D3:D9:48:73
X509v3 Authority Key Identifier:
keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.189.44.0/22
Signature Algorithm: sha256WithRSAEncryption
04:77:44:5d:63:2b:fe:0c:36:4a:b9:2c:88:6e:1b:55:4c:38:
3c:0d:74:5d:af:0f:8d:8e:0d:5e:1f:98:58:f8:86:8a:ed:9b:
5e:ba:36:9c:74:65:5b:a8:fb:2e:de:6e:00:d3:ae:46:69:ec:
b9:e5:03:4a:c5:4e:3c:00:e2:3c:11:a7:39:d9:a1:6d:4c:6d:
69:4f:ed:63:ce:fb:92:20:6b:8e:6a:c2:b4:80:31:44:24:24:
f0:f6:2c:26:ab:95:23:fd:27:58:fb:36:3f:63:41:14:e0:b9:
f2:44:9c:72:54:42:2c:22:68:40:85:bd:51:2b:49:38:6d:60:
48:5e:14:a9:31:d5:d3:1d:ca:40:e2:80:9a:fe:f6:29:67:a0:
e3:7e:24:70:fc:71:f6:cc:4d:b2:9e:49:b7:6a:1e:b2:62:6f:
3a:52:71:e2:ac:6f:a3:39:51:20:da:52:e4:e9:46:6a:ef:87:
f4:19:2f:38:6e:f0:7e:58:b1:36:1b:4f:bf:b5:fa:f8:cc:a2:
1e:86:c7:e6:96:30:4d:f5:ac:67:5a:9b:0e:4e:16:82:f8:0a:
95:c2:70:70:d4:83:ff:13:ef:46:7e:4e:92:6f:c9:21:4a:26:
97:1a:f2:c1:da:27:1d:2d:86:ce:66:1a:5a:1e:7f:43:d7:36:
28:0b:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:49 2025 by rpki-client