Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139322e302f32302d3234203d3e2036373632.roa
File: 3230302e3132332e3139322e302f32302d3234203d3e2036373632.roa (raw, json)
Hash identifier: AoSQVdKSIeDEUGTzqX7FX+yJc6qZeO83nLjQjkNBTDY=
Subject key identifier: F1:12:B4:89:23:2D:F9:8A:C9:72:9C:A6:B0:6B:04:88:19:44:17:5E
Certificate issuer: /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial: 169277597F991CDF10182A6C6495116526118F36
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139322e302f32302d3234203d3e2036373632.roa
Signing time: Fri 27 Dec 2024 19:35:00 +0000
ROA not before: Fri 27 Dec 2024 19:30:00 +0000
ROA not after: Fri 26 Dec 2025 19:35:00 +0000
asID: 6762
IP address blocks: 200.123.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:92:77:59:7f:99:1c:df:10:18:2a:6c:64:95:11:65:26:11:8f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Validity
Not Before: Dec 27 19:30:00 2024 GMT
Not After : Dec 26 19:35:00 2025 GMT
Subject: CN=F112B489232DF98AC9729CA6B06B04881944175E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:c2:50:a9:09:33:33:cf:3e:76:94:ba:e1:
5e:cb:77:70:42:a4:4c:e9:91:35:2d:c1:51:4a:40:
1c:a2:7c:0a:69:49:07:7f:a1:76:14:02:8c:32:a4:
35:1c:ca:8f:02:d9:b3:5f:9b:65:76:2d:af:6f:31:
5d:b7:cd:6d:6a:75:2c:10:3c:57:2b:ab:57:67:cd:
5a:d9:b5:c1:84:c7:db:91:02:5c:62:37:b5:80:ec:
0f:8a:36:bd:40:55:d6:d6:5c:c5:98:d7:2f:8c:c6:
dd:a6:1d:b3:89:09:ba:4b:0f:77:c8:f8:6b:88:4d:
0f:29:22:5d:a4:f4:bb:f6:e3:e5:53:68:95:cd:39:
8c:c3:b5:0d:f9:a0:0e:2a:23:05:d0:5e:5f:3a:4f:
3c:7e:94:08:b3:81:35:c3:89:0c:f8:b8:4c:89:df:
7a:56:d0:b1:50:2c:53:1a:19:09:2a:dc:4c:4c:e1:
30:09:49:4b:cf:2a:5f:dd:ea:ff:9c:b2:50:d7:b5:
5f:3f:44:4e:6f:45:47:32:a8:58:96:a6:71:ad:73:
29:5e:7e:cb:53:ae:01:19:29:6e:8e:5e:2d:18:ec:
c7:91:5d:51:f2:53:b8:94:e0:1e:df:72:32:34:b0:
d5:ef:c1:0c:eb:ca:e1:8f:08:4e:03:ad:5b:45:9f:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:12:B4:89:23:2D:F9:8A:C9:72:9C:A6:B0:6B:04:88:19:44:17:5E
X509v3 Authority Key Identifier:
keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139322e302f32302d3234203d3e2036373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.192.0/20
Signature Algorithm: sha256WithRSAEncryption
76:ad:8b:7b:24:2b:f8:09:c0:18:03:2c:74:4c:2a:c1:4a:34:
57:3f:82:91:64:eb:c7:8e:9b:e2:fc:f1:38:16:d7:d1:40:74:
26:ba:1f:df:69:76:9e:f2:55:1e:51:dd:a1:c2:3e:96:fa:ce:
c4:74:95:d5:40:bf:c7:96:9b:b0:a8:ea:d7:0e:ea:63:b8:21:
af:8b:e3:56:e5:9c:b1:f5:1e:df:1a:52:b0:8a:84:be:39:4f:
b9:3a:bf:1b:ff:5e:3b:cc:65:ef:20:ec:0f:71:82:3b:6d:a2:
14:6e:61:55:8e:7f:df:d1:8c:a6:cb:4a:56:34:b3:da:88:38:
14:e6:c9:f6:52:a6:4f:c3:e2:cb:09:db:17:57:a4:f7:d2:74:
b8:a5:7a:ff:54:0c:fb:90:70:e3:f7:78:6e:f5:4b:69:43:90:
3c:86:56:0b:42:b4:2b:ec:fa:a4:ee:52:88:79:22:f9:e7:50:
3e:b7:db:5e:24:82:43:e3:83:c1:7e:5f:08:0a:87:fd:2c:31:
76:0f:66:86:5c:78:8f:47:98:b8:b7:b4:bc:8c:43:d2:a5:ed:
30:e5:2a:d4:1a:51:d7:ca:2c:e8:62:5a:5a:f1:06:cb:19:85:
54:d8:8d:50:5c:c2:0a:11:c6:23:df:11:2d:26:af:27:67:37:
44:15:2f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:00 2025 by rpki-client