Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139392e302f32342d3234203d3e2034393935.roa
File: 3230302e322e3139392e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier: 2cs9h8bUuxtvlyomIviQYSQOryNfsQz+bLD4zowz1Wg=
Subject key identifier: 13:D3:79:6B:40:CD:A1:09:F7:09:D9:2E:66:4A:32:8C:83:C9:BA:DF
Certificate issuer: /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial: 613812FB441D0F55884D5357CF69AA696FA426B8
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139392e302f32342d3234203d3e2034393935.roa
Signing time: Tue 04 Feb 2025 20:03:40 +0000
ROA not before: Tue 04 Feb 2025 19:58:40 +0000
ROA not after: Tue 03 Feb 2026 20:03:40 +0000
asID: 4995
IP address blocks: 200.2.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:38:12:fb:44:1d:0f:55:88:4d:53:57:cf:69:aa:69:6f:a4:26:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
Validity
Not Before: Feb 4 19:58:40 2025 GMT
Not After : Feb 3 20:03:40 2026 GMT
Subject: CN=13D3796B40CDA109F709D92E664A328C83C9BADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:de:de:1a:7e:38:74:19:e7:ec:ac:b6:db:
f0:07:e3:7a:41:10:fe:5b:2a:d7:08:e5:c3:19:93:
64:87:43:7a:20:4a:a8:e4:cb:33:b0:c2:12:32:67:
20:79:a9:b0:70:8e:e2:e9:99:3d:48:74:04:6e:63:
2b:33:ff:9d:d4:4a:db:ab:f3:1a:71:58:78:66:60:
e6:02:8a:d8:fb:d1:5a:08:d2:b1:8b:bb:d9:4a:fe:
ff:01:ac:84:76:0e:9f:cb:f4:cc:26:af:ce:82:8a:
d6:00:5d:2e:69:84:0a:12:86:f8:1b:79:f9:f1:06:
12:02:79:40:65:51:a1:3e:51:1e:52:fd:7d:0a:c7:
b6:a5:26:ab:9f:2a:11:6e:5c:f6:98:e4:b0:83:af:
63:a1:38:74:18:5d:64:60:45:7a:87:bd:9e:82:28:
a0:f7:72:76:e7:b6:04:68:7a:22:cf:df:fc:c3:57:
42:a7:f5:ca:09:c5:0e:bb:79:42:8f:4a:45:9b:69:
d8:84:c5:24:b5:f4:de:b7:71:78:ed:01:21:91:de:
90:0f:64:1e:26:3d:3c:3e:d2:e5:28:db:df:5a:7d:
cc:58:03:f9:d1:11:33:27:4d:4e:d4:e3:38:c4:4b:
e0:d8:01:16:1a:1f:8e:fb:74:b5:42:59:19:97:f7:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D3:79:6B:40:CD:A1:09:F7:09:D9:2E:66:4A:32:8C:83:C9:BA:DF
X509v3 Authority Key Identifier:
keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3139392e302f32342d3234203d3e2034393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.2.199.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d0:16:3a:10:67:1c:8e:c8:fc:7f:c2:b1:ad:17:79:7c:d9:
78:94:9e:d6:2c:d5:22:f8:19:65:cf:5b:69:2e:8f:bb:ea:3e:
d0:5b:b0:93:ed:4f:f5:bd:3e:f7:9e:04:82:fb:ae:b5:c8:89:
0d:1a:46:cd:3d:e5:08:de:f2:81:d6:fe:71:31:03:75:55:de:
89:fd:1a:68:93:a0:68:f1:13:12:38:7c:57:4e:1d:e8:25:3c:
9c:22:fc:87:17:3a:50:3c:02:c7:6f:31:a7:66:5b:fa:cf:51:
b9:a4:8e:fa:8b:ac:ee:66:7a:38:3b:0d:93:05:3a:ce:29:c8:
01:48:40:9f:a3:cd:f0:44:83:1a:ed:f5:58:65:ff:04:ed:8c:
2f:01:39:1a:f1:11:d8:05:f6:0c:71:44:0a:b5:92:6b:e3:35:
df:27:82:45:d7:0f:94:e5:4b:86:84:0d:cb:ed:fb:19:fb:ea:
f8:24:ef:1d:1f:47:c3:8b:cc:cd:a0:7f:6a:ea:4a:70:1d:3e:
7e:86:13:53:9c:72:84:7a:7e:f3:bf:bf:68:d7:9a:ab:04:0b:
08:74:f3:c4:4e:18:dc:92:db:04:92:65:82:c0:a7:81:ae:54:
c4:07:d6:79:aa:b2:bd:83:60:d9:e2:3d:99:d1:6e:9f:b6:8e:
84:22:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:15 2025 by rpki-client