Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e32382e302f32342d3234203d3e2034393935.roa
File: 3230302e32392e32382e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier: RF7+pvz9czo35IzUnLCMxXtHOKnc2BAyaSWuMvflNIk=
Subject key identifier: 18:C0:30:62:02:D6:09:DC:64:1A:2D:0E:48:91:86:14:C2:4D:26:96
Certificate issuer: /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial: 75F77647DCD41509953D1E3A41192DAA518AFF8F
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e32382e302f32342d3234203d3e2034393935.roa
Signing time: Tue 04 Feb 2025 20:03:39 +0000
ROA not before: Tue 04 Feb 2025 19:58:39 +0000
ROA not after: Tue 03 Feb 2026 20:03:39 +0000
asID: 4995
IP address blocks: 200.29.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f7:76:47:dc:d4:15:09:95:3d:1e:3a:41:19:2d:aa:51:8a:ff:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
Validity
Not Before: Feb 4 19:58:39 2025 GMT
Not After : Feb 3 20:03:39 2026 GMT
Subject: CN=18C0306202D609DC641A2D0E48918614C24D2696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f3:2f:56:2c:4e:0f:1b:70:52:21:fa:09:f4:
71:28:2a:12:be:89:9a:12:05:d7:43:e3:44:6e:b0:
da:82:94:b9:32:de:64:38:45:56:7e:e7:37:6c:06:
f7:12:ba:78:47:aa:c0:e0:07:7a:dd:ec:c6:eb:26:
25:be:11:9f:93:5d:1b:f4:87:a3:f6:9f:26:f5:f0:
58:32:6a:fc:55:59:9b:31:a5:77:f2:f1:06:5f:3a:
a7:2e:a3:5c:02:a0:15:e1:38:ac:bd:8a:35:60:c8:
d7:51:50:ff:b1:d9:a6:4c:a4:67:1c:2b:0c:f8:a3:
95:43:d0:ec:95:e9:73:2f:67:24:1f:f3:e0:39:28:
d3:4f:e3:67:21:61:0b:05:f6:a0:4d:5c:bd:7e:f6:
95:11:51:0d:e4:e7:d9:f2:af:f9:90:87:da:1b:da:
26:f3:4e:61:87:60:0a:2a:98:ef:54:25:85:08:35:
bb:05:b5:36:fb:82:bf:4e:f6:51:88:52:f7:9d:e7:
b9:9a:d6:de:26:db:8b:26:e8:74:a5:19:c1:53:54:
ae:d5:ac:a9:b8:88:0c:26:fe:c0:0d:fe:1b:7a:9c:
f5:e6:d6:c9:8a:37:28:e0:5c:ac:aa:19:fe:97:c2:
c0:9f:39:f1:29:69:0a:22:a4:6b:92:3d:0e:ce:99:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C0:30:62:02:D6:09:DC:64:1A:2D:0E:48:91:86:14:C2:4D:26:96
X509v3 Authority Key Identifier:
keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e32382e302f32342d3234203d3e2034393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.28.0/24
Signature Algorithm: sha256WithRSAEncryption
89:83:9d:9a:76:03:52:cf:43:1b:98:c2:2c:f0:ac:9c:77:84:
01:9a:08:07:ad:b2:1e:63:61:f4:9c:79:e1:f4:48:6a:62:1c:
b4:e7:8c:07:9f:42:a4:78:65:49:4d:cf:85:d1:85:a5:16:88:
42:d7:0c:4b:c6:15:c5:3a:d0:5b:aa:4e:aa:de:84:e1:4d:2f:
e6:8d:f8:5d:cb:b0:6a:3b:8b:ce:27:01:80:de:48:c3:1e:9e:
b6:24:fa:90:ed:a6:2c:69:86:cd:3a:8b:cc:7f:7c:03:64:1b:
63:c2:c5:6a:73:54:65:be:6c:ae:82:68:8c:5c:02:44:e9:19:
fc:39:ef:94:5e:7f:7f:e1:30:97:17:4c:fd:cd:67:18:2a:f3:
9e:2a:57:ff:08:ca:a0:bc:97:53:91:35:2c:e2:dd:52:b8:55:
c7:6e:f4:75:ee:06:85:9e:85:77:61:44:61:74:8d:ed:40:2b:
3b:29:aa:21:c5:47:66:79:24:91:55:51:bc:5f:23:7b:ae:0e:
ae:9f:7e:df:5b:18:cd:c4:e7:48:e9:ee:a3:f0:ab:42:20:a6:
f6:ea:f6:6b:d0:d2:bb:9b:2c:a3:a7:a1:00:0c:38:7b:ec:bf:
b4:60:b4:ee:ee:2d:a7:d0:a2:8c:1e:9a:1a:64:28:22:3d:1c:
d2:10:8f:c9
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUdfd2R9zUFQmVPR46QRktqlGK/48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNTAyMDQxOTU4MzlaFw0yNjAyMDMyMDAzMzlaMDMxMTAvBgNV
BAMTKDE4QzAzMDYyMDJENjA5REM2NDFBMkQwRTQ4OTE4NjE0QzI0RDI2OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo8y9WLE4PG3BSIfoJ9HEoKhK+
iZoSBddD40RusNqClLky3mQ4RVZ+5zdsBvcSunhHqsDgB3rd7MbrJiW+EZ+TXRv0
h6P2nyb18FgyavxVWZsxpXfy8QZfOqcuo1wCoBXhOKy9ijVgyNdRUP+x2aZMpGcc
Kwz4o5VD0OyV6XMvZyQf8+A5KNNP42chYQsF9qBNXL1+9pURUQ3k59nyr/mQh9ob
2ibzTmGHYAoqmO9UJYUINbsFtTb7gr9O9lGIUved57ma1t4m24sm6HSlGcFTVK7V
rKm4iAwm/sAN/ht6nPXm1smKNyjgXKyqGf6XwsCfOfEpaQoipGuSPQ7OmZ5fAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUGMAwYgLWCdxkGi0OSJGGFMJNJpYwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIzOTJlMzIzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB0cMA0GCSqG
SIb3DQEBCwUAA4IBAQCJg52adgNSz0MbmMIs8Kycd4QBmggHrbIeY2H0nHnh9Ehq
Yhy054wHn0KkeGVJTc+F0YWlFohC1wxLxhXFOtBbqk6q3oThTS/mjfhdy7BqO4vO
JwGA3kjDHp62JPqQ7aYsaYbNOovMf3wDZBtjwsVqc1RlvmyugmiMXAJE6Rn8Oe+U
Xn9/4TCXF0z9zWcYKvOeKlf/CMqgvJdTkTUs4t1SuFXHbvR17gaFnoV3YURhdI3t
QCs7KaohxUdmeSSRVVG8XyN7rg6un37fWxjNxOdI6e6j8KtCIKb26vZr0NK7myyj
p6EADDh77L+0YLTu7i2n0KKMHpoaZCgiPRzSEI/J
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:50 2025 by rpki-client