Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3230332e302f32342d3234203d3e203130323639.roa
File: 3230302e33322e3230332e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier: 1wj7F6gqHQzPPI5AlZRoR1wnD1Zi3+o63OhUPJtd+r8=
Subject key identifier: 5A:91:06:62:3F:4F:B9:9A:02:7B:18:2F:04:EE:D7:4E:3F:04:79:4E
Certificate issuer: /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial: 51806AACBAC4C23B0CCA4AAEA3CAC291716CD3D2
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3230332e302f32342d3234203d3e203130323639.roa
Signing time: Tue 04 Feb 2025 18:12:26 +0000
ROA not before: Tue 04 Feb 2025 18:07:26 +0000
ROA not after: Tue 03 Feb 2026 18:12:26 +0000
asID: 10269
IP address blocks: 200.32.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:80:6a:ac:ba:c4:c2:3b:0c:ca:4a:ae:a3:ca:c2:91:71:6c:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
Validity
Not Before: Feb 4 18:07:26 2025 GMT
Not After : Feb 3 18:12:26 2026 GMT
Subject: CN=5A9106623F4FB99A027B182F04EED74E3F04794E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:66:eb:59:10:32:72:4b:3d:85:b8:ae:8d:31:
86:c8:76:a6:97:82:d8:4a:dd:94:49:3d:89:08:b9:
cd:13:a7:1f:6c:8a:01:86:5b:0d:57:98:b1:e7:c6:
1a:34:e1:84:5a:68:1d:ff:cf:a1:9d:36:af:4a:5d:
3e:22:6b:e4:8e:39:14:42:2c:38:b4:2b:fa:0c:d8:
89:72:bc:8f:1d:53:74:7b:34:07:e5:45:8c:36:32:
bc:93:0d:05:5c:32:9c:7b:39:8e:a0:77:d4:d4:c4:
70:15:4e:45:b8:d5:f4:89:a1:54:b8:16:33:df:87:
74:b6:f3:0e:84:42:17:2e:b3:09:06:5c:44:b6:55:
7e:b1:dc:cd:3d:0f:65:f6:4a:eb:55:f8:3a:36:fe:
04:5a:92:85:ce:3b:7f:86:27:78:c1:ab:e6:16:fe:
35:78:c5:e3:b9:ed:ac:6f:6a:bb:22:69:eb:e2:84:
bf:ed:ad:23:3b:05:dd:10:3e:2a:7a:0b:ff:7e:15:
46:1c:45:b5:04:cc:a8:72:88:7f:c5:23:e2:6a:0f:
11:77:b8:52:3b:10:ea:09:c4:fe:04:26:29:d9:c8:
85:1b:6a:fe:ca:48:12:47:01:d9:e0:a0:09:51:cf:
c0:c0:eb:fc:bc:ce:20:56:1c:56:5c:39:db:60:53:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:06:62:3F:4F:B9:9A:02:7B:18:2F:04:EE:D7:4E:3F:04:79:4E
X509v3 Authority Key Identifier:
keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3230332e302f32342d3234203d3e203130323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.32.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fa:4e:46:b9:82:ff:6b:d6:ca:59:2d:f7:47:1e:c4:7f:3b:
4e:99:9f:4b:4d:d6:87:b9:bc:d1:dd:c9:7b:62:1d:35:83:81:
7c:63:2a:a2:83:2f:82:a5:64:68:98:29:e8:0c:60:b1:3c:1b:
ef:07:aa:27:09:ca:41:8f:65:6c:fb:8d:9b:32:78:5c:ea:85:
5e:e9:a3:8c:d5:53:3a:00:be:ee:c0:ba:2d:17:ff:53:1b:8a:
99:a3:53:b5:85:44:9f:86:6d:24:6a:8b:dc:79:8a:81:cc:6e:
fb:0d:89:ee:87:7c:93:f3:73:7e:24:32:8d:56:ca:19:7e:6a:
64:60:2a:b7:46:dc:1f:43:21:3c:88:eb:67:b2:ed:d4:03:03:
aa:0d:9e:1a:37:e8:23:85:0d:22:b9:d7:04:04:d3:be:c9:ef:
55:1a:ad:d9:e0:2c:e2:d1:6b:05:83:67:2d:c6:3f:8c:c1:f3:
bf:a5:1c:00:44:30:d4:55:f9:7a:4f:04:17:07:14:03:19:60:
ae:62:49:1b:1d:47:a9:3e:cd:6c:96:4d:e9:24:85:6d:ca:90:
fe:1d:10:58:4f:7b:f5:c0:1c:be:0f:9d:da:3f:ee:52:d3:e7:
aa:77:1d:6b:0a:32:05:23:dc:02:b2:d9:f3:ba:46:7e:6d:c5:
6c:f5:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:01 2025 by rpki-client