Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130362e302f32342d3234203d3e203237373636.roa
File: 3230302e31342e3130362e302f32342d3234203d3e203237373636.roa (raw, json)
Hash identifier: AcmNPkWr9Qev3zyg05eUs/YDc3XngHIlAFNEkZUnynM=
Subject key identifier: 93:D0:40:A5:FB:45:EA:B5:79:7A:DB:17:16:53:CA:F3:E6:02:F8:D5
Certificate issuer: /CN=A9B097CDB61153249E534B2DD5C17C6D093C68E1
Certificate serial: 4491AB46440EEF18B589EEE7DF3F846DF4199F28
Authority key identifier: A9:B0:97:CD:B6:11:53:24:9E:53:4B:2D:D5:C1:7C:6D:09:3C:68:E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130362e302f32342d3234203d3e203237373636.roa
Signing time: Tue 04 Feb 2025 19:59:38 +0000
ROA not before: Tue 04 Feb 2025 19:54:38 +0000
ROA not after: Tue 03 Feb 2026 19:59:38 +0000
asID: 27766
IP address blocks: 200.14.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:91:ab:46:44:0e:ef:18:b5:89:ee:e7:df:3f:84:6d:f4:19:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9B097CDB61153249E534B2DD5C17C6D093C68E1
Validity
Not Before: Feb 4 19:54:38 2025 GMT
Not After : Feb 3 19:59:38 2026 GMT
Subject: CN=93D040A5FB45EAB5797ADB171653CAF3E602F8D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:43:47:4d:80:02:2a:bb:92:84:ee:56:6e:
94:2a:a7:c8:3e:e1:a6:51:6d:9e:12:5d:f1:55:8f:
52:00:0d:2a:ab:75:35:cb:66:12:c8:cb:4b:35:e9:
30:00:d4:b2:ab:92:3a:8a:ab:62:c9:f0:94:29:32:
4c:23:8a:30:86:f7:12:24:9f:e6:1b:a5:69:6b:4a:
db:a6:74:23:d4:18:b4:9f:f5:5a:53:02:8f:fb:90:
d8:11:3c:5a:ad:2b:57:b8:72:05:97:36:c0:eb:bd:
b8:26:ef:a9:97:e5:74:d4:54:23:26:09:5c:a3:1e:
61:66:d1:35:da:af:f8:6e:04:d9:03:03:3b:91:9f:
38:c5:24:ec:5b:c1:cd:ec:87:f3:7e:b0:9a:22:6f:
7c:82:b3:54:e9:bd:05:62:ee:83:fc:2e:16:1b:5a:
f6:ee:0a:27:31:53:bc:cb:bf:d0:e2:18:27:69:e5:
df:ae:b8:0f:43:d3:50:fd:ff:d5:ef:78:88:aa:fd:
44:26:ae:5c:9e:45:93:68:33:69:3f:da:9f:e4:95:
f9:61:fe:f5:ad:d8:34:33:c8:fd:c3:91:62:83:6c:
32:59:97:00:e7:05:74:08:fe:17:2b:59:79:b6:d3:
4b:af:b7:5b:4f:6a:a6:ba:7b:a4:52:51:6c:b9:6c:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:40:A5:FB:45:EA:B5:79:7A:DB:17:16:53:CA:F3:E6:02:F8:D5
X509v3 Authority Key Identifier:
keyid:A9:B0:97:CD:B6:11:53:24:9E:53:4B:2D:D5:C1:7C:6D:09:3C:68:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130362e302f32342d3234203d3e203237373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.106.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d9:f9:3d:4b:59:22:d1:80:e1:d0:59:74:3b:e9:99:2c:2b:
71:fa:33:f3:3d:d0:51:2a:76:ae:58:80:ea:5b:b4:18:ef:5f:
ba:d1:a7:62:2c:b1:95:e0:8c:aa:28:e2:e9:ef:98:7a:df:13:
8b:c6:0e:dc:79:57:33:6c:83:7d:6f:2c:11:68:f0:f9:0e:37:
09:e0:bb:81:6f:ee:1a:fb:d5:26:ea:20:67:00:66:3d:ba:12:
ff:88:7d:0d:6f:21:49:5d:ac:d7:8c:fc:b4:6c:90:68:df:a1:
ef:88:77:6c:03:e7:31:96:97:e6:7d:0f:f6:a9:6f:44:b1:22:
95:fd:d1:79:db:c0:d7:06:05:9d:7f:fb:8a:1f:87:11:41:ce:
50:6e:a2:80:78:5e:9e:e4:81:7e:a8:49:c6:7e:f7:fa:c6:34:
0f:98:c8:ac:6f:d4:cc:8f:11:2e:85:ee:13:89:4d:5f:9d:c3:
46:55:6e:93:c7:d3:9c:53:0f:89:5c:50:cb:b3:b7:e8:67:43:
86:3c:4e:93:d0:8a:9e:fd:8b:0a:99:a1:fd:a5:cd:17:93:98:
c4:89:a9:d2:9c:2f:84:0c:2f:6e:c9:29:53:62:dc:34:80:ae:
6c:af:ca:7a:69:d1:cd:a7:6a:a3:b0:c6:bc:87:23:a1:1d:3c:
35:e6:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:26:36 2025 by rpki-client