Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3139302e302f32342d3234203d3e203237373733.roa
File: 3230302e31332e3139302e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier: gjfLd1w2CKHdMqfyKkBXGvTY6QqLVzGVQwCZHdhycRA=
Subject key identifier: 29:F5:4D:64:52:52:88:61:62:45:18:40:78:63:BC:0C:83:DC:2F:18
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 1E5C7E606C73A76E7B80C5F453BF8F7415C649
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3139302e302f32342d3234203d3e203237373733.roa
Signing time: Tue 04 Feb 2025 20:02:13 +0000
ROA not before: Tue 04 Feb 2025 19:57:13 +0000
ROA not after: Tue 03 Feb 2026 20:02:13 +0000
asID: 27773
IP address blocks: 200.13.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5c:7e:60:6c:73:a7:6e:7b:80:c5:f4:53:bf:8f:74:15:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Feb 4 19:57:13 2025 GMT
Not After : Feb 3 20:02:13 2026 GMT
Subject: CN=29F54D6452528861624518407863BC0C83DC2F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:d0:d8:6b:0a:22:7f:4d:49:aa:f5:05:a1:
c8:85:09:64:ab:9c:23:52:3d:b4:cc:42:c3:82:95:
99:37:16:fe:12:cb:f4:19:d2:fc:cf:92:30:1f:a2:
aa:ce:44:a0:83:b9:d3:04:af:dc:fe:b8:ba:15:d5:
4a:14:30:14:e0:1b:cd:f7:b8:f7:9c:a6:46:ef:97:
a8:fd:f1:0d:bc:9a:44:32:cb:24:bd:61:e7:65:c6:
9c:16:31:1b:99:cb:96:24:13:d6:1e:40:51:3c:24:
2b:35:af:b2:b2:d2:09:65:5b:85:09:3d:e0:49:66:
d3:cc:ab:b2:05:e6:88:3f:15:f3:62:69:bc:d4:fa:
ad:69:55:e4:66:4d:0b:3b:b1:2d:71:84:1a:0a:56:
f4:00:fb:54:b7:59:6a:06:fb:cd:03:5a:49:2e:46:
12:c0:f1:29:0c:71:70:c4:a4:e0:aa:a7:f6:cb:39:
f2:44:c5:ae:4e:2c:a1:13:8b:65:96:20:cc:97:f4:
99:04:0f:0a:f0:bf:2b:b9:48:37:70:3c:ff:d5:cc:
0d:f1:23:0f:da:6a:ab:e9:8f:cf:13:7a:72:b2:d1:
00:ca:ab:4a:0f:5b:8e:a0:07:7a:da:34:a5:f7:e2:
8b:7e:9b:3e:dd:77:8e:cd:cd:92:ef:04:cb:cb:25:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F5:4D:64:52:52:88:61:62:45:18:40:78:63:BC:0C:83:DC:2F:18
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3139302e302f32342d3234203d3e203237373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:30:56:f1:8d:22:8b:88:0f:b3:23:cf:bc:20:09:e2:27:10:
bd:81:91:d3:17:e1:17:91:9e:ad:ea:82:8c:16:cd:00:e4:6e:
f1:1d:79:15:bd:4c:74:19:13:83:78:97:fb:d7:26:af:8f:74:
32:41:9a:cd:d9:23:0c:89:20:cc:d7:67:9c:de:2c:25:2b:26:
3c:f0:82:10:a3:5f:c6:0e:39:41:fa:5e:ac:06:d1:a9:23:08:
10:5a:a1:01:fc:2c:54:66:ee:08:13:74:40:18:9c:40:a0:b0:
10:86:a0:b2:84:ed:51:59:f4:2e:7f:1c:01:f7:55:85:4c:ba:
3a:a4:2b:0e:7f:8f:0d:93:cc:20:62:92:b5:2e:c8:85:de:e0:
a8:4f:9c:75:9c:19:a1:b4:10:9b:93:e0:04:d3:5a:4b:60:2b:
81:0b:31:02:d9:8c:6c:57:f8:0b:81:0d:e8:6d:97:22:64:d0:
6a:c0:50:13:07:19:f3:36:25:ea:94:73:f7:e0:b7:44:7b:8a:
f4:b4:17:1f:40:31:20:db:77:6d:8a:07:e8:9a:8f:09:2f:d4:
e4:bc:55:0b:ed:ea:ed:8f:b7:7d:d6:34:af:52:44:53:07:4d:
b4:6d:22:8d:d4:6b:6c:f2:89:0d:77:7b:ba:0a:b7:0a:06:c2:
51:65:2c:e4
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgITHlx+YGxzp257gMX0U7+PdBXGSTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg5QkNDQkQ2OEVCMjJDMzdCODg2RDgxQkRGQzhCQTc3Q0Q3
MzEyMjA4MB4XDTI1MDIwNDE5NTcxM1oXDTI2MDIwMzIwMDIxM1owMzExMC8GA1UE
AxMoMjlGNTRENjQ1MjUyODg2MTYyNDUxODQwNzg2M0JDMEM4M0RDMkYxODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANxf0NhrCiJ/TUmq9QWhyIUJZKuc
I1I9tMxCw4KVmTcW/hLL9BnS/M+SMB+iqs5EoIO50wSv3P64uhXVShQwFOAbzfe4
95ymRu+XqP3xDbyaRDLLJL1h52XGnBYxG5nLliQT1h5AUTwkKzWvsrLSCWVbhQk9
4Elm08yrsgXmiD8V82JpvNT6rWlV5GZNCzuxLXGEGgpW9AD7VLdZagb7zQNaSS5G
EsDxKQxxcMSk4Kqn9ss58kTFrk4soROLZZYgzJf0mQQPCvC/K7lIN3A8/9XMDfEj
D9pqq+mPzxN6crLRAMqrSg9bjqAHeto0pffii36bPt13js3Nku8Ey8sl668CAwEA
AaOCAsgwggLEMB0GA1UdDgQWBBQp9U1kUlKIYWJFGEB4Y7wMg9wvGDAfBgNVHSME
GDAWgBSbzL1o6yLDe4htgb38i6d81zEiCDAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljLzNBNUYyRjg3RDExNzg2RkIzRkNBREFBMDQzNDMxRUIwMTND
REJBRDAwMjQ3RURCN0E2NTAyQkZGRDhCNENDMjQvMC85QkNDQkQ2OEVCMjJDMzdC
ODg2RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wLzlCQ0NCRDY4RUIyMkMzN0I4ODZE
ODFCREZDOEJBNzdDRDczMTIyMDguY2VyMIHHBggrBgEFBQcBCwSBujCBtzCBtAYI
KwYBBQUHMAuGgadyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEzQ0RCQUQwMDI0
N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvMzIzMDMwMmUzMTMzMmUzMTM5MzAyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzczNzMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyA2+MA0G
CSqGSIb3DQEBCwUAA4IBAQBdMFbxjSKLiA+zI8+8IAniJxC9gZHTF+EXkZ6t6oKM
Fs0A5G7xHXkVvUx0GRODeJf71yavj3QyQZrN2SMMiSDM12ec3iwlKyY88IIQo1/G
DjlB+l6sBtGpIwgQWqEB/CxUZu4IE3RAGJxAoLAQhqCyhO1RWfQufxwB91WFTLo6
pCsOf48Nk8wgYpK1LsiF3uCoT5x1nBmhtBCbk+AE01pLYCuBCzEC2YxsV/gLgQ3o
bZciZNBqwFATBxnzNiXqlHP34LdEe4r0tBcfQDEg23dtigfomo8JL9TkvFUL7ert
j7d91jSvUkRTB020bSKN1Gts8okNd3u6CrcKBsJRZSzk
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:35 2025 by rpki-client