Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139372e302f32342d3234203d3e2034393935.roa
File: 3230302e322e3139372e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier: ZpvR+SrQk/qYc0qB5xac8bcZo/Y+s9hoq3w5DNEuzPI=
Subject key identifier: 6B:67:7A:BC:87:8D:1D:F4:CA:FB:27:56:01:9E:DE:22:CE:AF:45:3A
Certificate issuer: /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial: 11E2DB46DF9DED003C9B96FC018887BE6AC81A41
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139372e302f32342d3234203d3e2034393935.roa
Signing time: Tue 04 Feb 2025 20:03:35 +0000
ROA not before: Tue 04 Feb 2025 19:58:35 +0000
ROA not after: Tue 03 Feb 2026 20:03:35 +0000
asID: 4995
IP address blocks: 200.2.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e2:db:46:df:9d:ed:00:3c:9b:96:fc:01:88:87:be:6a:c8:1a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
Validity
Not Before: Feb 4 19:58:35 2025 GMT
Not After : Feb 3 20:03:35 2026 GMT
Subject: CN=6B677ABC878D1DF4CAFB2756019EDE22CEAF453A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:54:e3:76:7a:45:e1:fc:49:eb:e3:32:87:
3f:6e:ac:be:57:18:a6:43:72:16:95:6d:bc:f4:d4:
14:68:8f:f1:06:ac:23:18:03:3c:1a:82:90:80:17:
77:27:63:b4:72:cd:ad:68:cd:d1:b2:84:72:3d:5d:
c0:b8:e5:b7:b5:89:e8:4f:90:0c:26:21:7b:e9:98:
17:84:b8:5a:e1:c3:12:d7:84:aa:d5:53:08:2e:93:
e9:69:3e:6f:51:48:d1:54:bb:47:61:0f:58:c6:5a:
1f:6e:93:af:92:e9:77:cc:1a:f4:4c:f4:d4:1d:7a:
97:32:49:9f:7b:50:f3:70:36:87:20:01:55:a3:60:
3e:9c:e9:ea:82:ee:7b:c5:69:d2:26:de:9c:7e:97:
bc:c9:a7:be:9c:70:78:97:6d:91:d6:e5:ae:e9:3e:
8d:44:b2:b1:aa:e0:79:80:ff:87:a1:04:e8:4b:22:
a3:9e:c8:20:4b:ef:7a:a4:ec:7c:e8:9c:fb:10:53:
43:d3:95:39:66:17:1a:66:c6:72:0f:96:64:f4:20:
26:b3:8d:41:d2:5b:1e:6d:e3:24:30:59:f9:77:f1:
f2:f5:9d:d0:70:f0:ee:bc:fe:c4:8f:67:74:1c:b4:
ae:c0:96:e7:33:ca:50:ae:db:59:33:05:cb:cc:cd:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:67:7A:BC:87:8D:1D:F4:CA:FB:27:56:01:9E:DE:22:CE:AF:45:3A
X509v3 Authority Key Identifier:
keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139372e302f32342d3234203d3e2034393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.2.197.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:e8:ce:d8:7f:e8:d7:88:64:2c:f8:da:ee:84:1b:66:17:9c:
df:19:3e:eb:4c:ec:37:dd:97:b8:4a:9e:51:3a:ac:4e:72:8c:
c2:26:bb:4a:d3:c3:9d:c6:fe:39:5a:39:d5:4b:24:63:3c:22:
68:d5:61:cf:9d:e0:4a:fd:bb:bd:ca:8f:17:a8:a1:c5:e6:b1:
dc:b8:5a:85:f0:0a:02:7d:33:8e:5a:7a:a7:84:48:45:1e:c1:
4b:90:35:49:73:28:89:dc:e7:52:ca:58:98:c9:c6:04:18:2e:
5e:e9:59:88:b9:c0:60:0b:1a:6b:90:92:db:48:f1:f1:b0:72:
42:72:c0:1a:a6:10:70:01:27:17:96:fc:8f:5e:fe:83:43:49:
c0:91:ec:e6:21:51:ae:b3:5b:6a:50:1d:9d:7d:71:7b:95:e5:
84:e7:ea:f2:2d:d2:84:66:ff:ea:05:a6:d2:ba:b2:c5:a2:60:
1f:7b:db:ac:5d:5a:f5:85:71:31:ec:67:e3:bd:60:62:fb:9a:
6a:51:37:e0:dd:f3:90:c9:77:d7:d0:dc:40:d9:3a:9f:7b:78:
4f:e9:f8:d7:cc:5c:ce:05:91:ad:6f:c1:f2:ad:6c:28:58:a2:
7e:f3:ca:05:95:f9:2a:3b:95:3a:51:64:6c:37:60:9b:ca:d6:
c9:0d:af:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:14 2025 by rpki-client