Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32342d3234203d3e203532333736.roa
File: 3230302e31332e34322e302f32342d3234203d3e203532333736.roa (raw, json)
Hash identifier: xDwM+iffHEkQ/6c8lG3NKuUb0AABTxGTO2lSVM7Zpxo=
Subject key identifier: 64:31:D7:50:DD:50:0A:32:B6:30:B3:D0:AE:EB:CF:BE:DD:6E:89:CA
Certificate issuer: /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial: 606D02051D863C888047A3220A808AE9DBA9EF0F
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32342d3234203d3e203532333736.roa
Signing time: Wed 05 Feb 2025 20:55:00 +0000
ROA not before: Wed 05 Feb 2025 20:50:00 +0000
ROA not after: Wed 04 Feb 2026 20:55:00 +0000
asID: 52376
IP address blocks: 200.13.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:6d:02:05:1d:86:3c:88:80:47:a3:22:0a:80:8a:e9:db:a9:ef:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Validity
Not Before: Feb 5 20:50:00 2025 GMT
Not After : Feb 4 20:55:00 2026 GMT
Subject: CN=6431D750DD500A32B630B3D0AEEBCFBEDD6E89CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:64:5f:a3:ac:b0:84:41:fb:12:1d:26:d3:
14:fa:6a:85:c9:10:dd:f9:d9:f4:f7:d0:13:06:37:
8a:13:1a:e7:b9:ae:29:af:e3:f0:68:7f:0f:da:da:
57:48:27:5a:ff:11:e1:05:9a:ff:41:de:dc:5e:26:
53:58:c9:f8:51:af:d9:f7:93:91:82:81:32:dd:cd:
0a:22:44:3b:ed:a3:f1:f0:30:fe:14:0e:6b:fb:aa:
52:aa:99:e8:ce:44:ac:e5:b9:f4:a3:11:bf:e9:35:
43:3f:6f:46:69:ef:11:28:0a:64:44:22:49:45:40:
1d:cb:f8:53:eb:24:c9:c7:17:b4:a8:73:6d:84:e7:
67:6c:cf:cc:0c:ec:39:8a:07:86:a1:a5:60:a0:ec:
ce:e7:9c:10:68:2b:56:0e:14:25:e0:7c:b7:24:5d:
65:cb:a8:6a:dd:b7:a8:db:3d:4d:cd:fb:9d:17:a8:
86:92:f9:36:a1:f6:45:c2:0f:a3:95:d6:8b:6f:a2:
78:eb:9a:9a:d5:e5:53:3e:2c:a4:3a:3f:1d:76:de:
e0:28:fd:ab:df:4f:d0:93:3f:2f:cd:22:c3:b0:5d:
17:a6:3a:8e:91:67:77:f5:ad:0d:85:40:80:a4:94:
9b:f7:d8:c5:3b:62:0a:67:a5:d8:3d:61:4b:1a:22:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:D7:50:DD:50:0A:32:B6:30:B3:D0:AE:EB:CF:BE:DD:6E:89:CA
X509v3 Authority Key Identifier:
keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32342d3234203d3e203532333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.42.0/24
Signature Algorithm: sha256WithRSAEncryption
51:65:99:cf:bd:5d:bf:94:a8:d8:18:c4:c2:12:5f:76:30:ad:
d9:17:fe:b0:ae:ba:82:a1:96:20:f5:6b:2d:b3:ac:84:80:d2:
12:73:7b:3f:ad:60:28:dd:d6:d6:8c:ae:1b:f6:a4:19:6f:1c:
ed:30:5e:05:a7:06:97:75:de:99:dd:44:58:11:cf:49:bc:a4:
7e:f7:88:ee:50:90:5f:4d:49:53:48:c9:99:31:5c:41:30:e7:
c1:c9:74:7a:ea:c5:86:75:76:09:40:7b:99:a5:85:23:1b:d9:
55:be:35:99:13:a5:72:ca:fd:fe:dd:06:fa:8d:35:72:5c:17:
e1:db:8d:a7:fd:25:2e:e2:1d:b1:9e:4f:38:66:98:c5:e4:5a:
7e:38:1d:93:82:af:70:29:5d:6c:11:a7:fb:ee:0e:d8:3f:dc:
2f:43:8e:b2:22:89:51:49:98:ce:d3:fd:c8:96:a6:ad:65:1f:
1c:a5:fa:b9:bb:06:76:c2:b1:27:87:0b:72:82:72:33:85:ec:
5e:83:76:40:35:b2:24:b8:f0:a6:21:f1:df:8e:e7:0d:38:59:
99:68:9e:bd:8e:f3:37:0b:94:3e:e8:9c:c6:62:82:54:cf:1f:
d8:83:4e:13:1a:e3:71:79:0b:7a:3d:76:a1:1c:12:7e:ec:ee:
cb:6c:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:06:12 2025 by rpki-client