Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3137322e302f32332d3234203d3e203237373733.roa
File: 3230302e31332e3137322e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier: Dvy6oLH+ozQgy4hjdKFUCUOlCf9wofFqHKS96kcNnS0=
Subject key identifier: ED:86:B9:17:60:0D:EE:C0:54:39:D9:79:26:5D:1A:07:78:D7:19:87
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 18E1C2329DCE4C1C92C0384A028AB4560A8B421A
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3137322e302f32332d3234203d3e203237373733.roa
Signing time: Tue 04 Feb 2025 20:02:28 +0000
ROA not before: Tue 04 Feb 2025 19:57:28 +0000
ROA not after: Tue 03 Feb 2026 20:02:28 +0000
asID: 27773
IP address blocks: 200.13.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e1:c2:32:9d:ce:4c:1c:92:c0:38:4a:02:8a:b4:56:0a:8b:42:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Feb 4 19:57:28 2025 GMT
Not After : Feb 3 20:02:28 2026 GMT
Subject: CN=ED86B917600DEEC05439D979265D1A0778D71987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:d0:13:3e:30:1d:20:0f:30:01:e3:b4:ae:
73:f2:c1:89:07:24:42:66:56:fc:e7:15:3d:6a:11:
f0:39:71:84:97:96:aa:63:80:9a:75:e6:a5:e3:46:
85:d1:99:93:39:85:f1:a3:5d:0c:c9:f5:5b:3e:6d:
4b:98:0f:6c:cf:0f:c1:74:d8:a9:02:74:b6:e9:c0:
8b:0f:cd:6f:2c:4f:c4:e8:ec:1f:e2:0d:de:5e:6c:
b3:90:08:55:24:e0:83:10:a0:b0:85:56:64:69:a7:
85:68:a1:9d:44:6e:9e:04:e9:a9:fd:4c:bd:14:46:
3f:0c:84:1f:e4:7b:7f:1b:0d:3e:7e:63:ee:d2:a6:
5d:9d:8b:f2:f1:c3:e3:76:39:e5:7b:2a:ba:f1:f7:
8a:1c:b4:70:c6:bf:77:9f:f6:26:f6:83:dc:aa:19:
e2:6d:ea:b3:c7:0b:8e:3f:c0:cb:27:66:61:f6:24:
6e:79:63:db:7b:74:2a:1c:d5:98:49:bd:ca:f6:55:
2b:71:8e:fc:52:2f:0f:36:3e:b4:80:cd:2e:8b:7a:
42:bf:05:2f:26:a0:a7:b0:28:4a:11:f8:c8:90:59:
f2:6f:73:a3:40:95:30:a0:1d:84:bc:0e:c5:c3:54:
39:75:e5:6d:58:32:41:ee:e6:a5:52:15:45:96:f7:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:86:B9:17:60:0D:EE:C0:54:39:D9:79:26:5D:1A:07:78:D7:19:87
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3137322e302f32332d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.172.0/23
Signature Algorithm: sha256WithRSAEncryption
58:18:40:c5:03:18:5f:9c:d2:a1:4c:9b:b4:78:88:61:67:8c:
99:6b:4f:2d:25:e6:75:1f:1d:4c:b1:8f:c4:d9:d9:16:63:e8:
f7:e8:44:79:b0:d2:f3:0b:dc:7e:79:f6:33:56:f1:88:70:2b:
57:51:2b:bf:be:99:76:66:98:71:3c:ac:dd:6c:38:2b:8c:fd:
32:ba:49:b5:98:4b:32:ed:32:a0:e4:0a:81:45:6b:be:fd:cb:
14:86:72:8d:c7:6d:64:e2:cf:e8:38:c6:4d:fa:da:35:a6:a9:
15:d0:28:3c:3b:29:08:a4:70:c2:6d:f4:29:34:2c:59:63:c8:
73:e0:e7:53:1a:a7:fc:ae:fb:01:8a:cd:bc:0d:87:2c:74:7a:
52:5b:a1:33:2f:c7:6b:1b:aa:49:06:d5:86:c8:3f:17:9f:bf:
88:9d:00:6c:35:98:54:7e:30:6a:85:ca:06:a2:7c:31:01:d5:
91:06:3b:62:6c:39:19:69:6b:56:69:f5:82:ec:df:3f:69:a7:
92:76:25:6c:5c:4f:4c:89:41:7c:b0:52:ca:12:4c:17:88:fa:
6f:14:ea:b4:76:01:75:2f:3a:78:30:c2:db:2e:fa:88:ed:38:
44:86:20:44:65:db:a9:10:e6:f3:10:fb:d2:15:24:b8:ef:8e:
ae:86:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:08 2025 by rpki-client