Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34332e302f32342d3234203d3e203532323735.roa
File: 3230302e31332e34332e302f32342d3234203d3e203532323735.roa (raw, json)
Hash identifier: n4ZCxElsFrnJ/cokoawAVHksdOkVBLI79Cq1tWxfmH8=
Subject key identifier: 8B:09:3B:DE:67:E9:21:75:01:3C:C9:CE:5E:5C:2A:5E:B3:03:85:58
Certificate issuer: /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial: 7F8EAA1D55A64C0786BA27C152A1228BF92A3E24
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34332e302f32342d3234203d3e203532323735.roa
Signing time: Tue 04 Feb 2025 18:37:14 +0000
ROA not before: Tue 04 Feb 2025 18:32:14 +0000
ROA not after: Tue 03 Feb 2026 18:37:14 +0000
asID: 52275
IP address blocks: 200.13.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:8e:aa:1d:55:a6:4c:07:86:ba:27:c1:52:a1:22:8b:f9:2a:3e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Validity
Not Before: Feb 4 18:32:14 2025 GMT
Not After : Feb 3 18:37:14 2026 GMT
Subject: CN=8B093BDE67E92175013CC9CE5E5C2A5EB3038558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:3b:14:bc:28:b7:fe:bd:41:a9:f8:5f:36:
14:5e:59:e9:42:8c:08:03:4f:e9:ee:99:22:87:39:
ca:e9:8f:d5:c7:57:24:4d:7a:8c:e9:c5:d6:2e:0e:
11:01:6e:44:ba:d1:7e:35:39:02:31:7c:53:5f:0c:
f6:4d:04:a0:0f:29:5c:30:b6:9c:dc:8d:42:0a:7d:
73:23:5d:52:4b:4f:9b:f4:eb:39:ac:c6:23:fd:1f:
a4:ca:4c:7c:e7:3c:db:4a:a4:8c:be:4c:0b:56:4d:
c7:98:80:eb:93:e7:0d:e9:d8:51:19:f4:8f:d3:40:
66:7d:fb:fb:f1:2f:f4:c7:7e:6e:28:81:60:aa:8c:
49:47:af:3e:98:ba:f7:15:aa:01:cd:88:91:dc:9e:
fd:00:53:d0:d0:32:a3:10:e6:09:ae:3a:bc:dc:4d:
f3:80:89:59:92:f0:1f:95:14:79:19:34:43:24:25:
62:38:81:b0:cf:ec:08:18:56:98:eb:10:28:01:22:
6a:32:1e:d3:44:16:64:bf:f1:98:85:8e:b3:3c:8f:
8a:84:d2:d8:9f:07:f4:90:e3:06:6e:e5:48:ba:d0:
5d:03:8a:bd:0c:8b:71:1e:e2:87:b4:cf:00:92:fd:
25:ab:7d:fb:bc:94:7d:9a:74:3e:2b:d5:3c:dd:2a:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:09:3B:DE:67:E9:21:75:01:3C:C9:CE:5E:5C:2A:5E:B3:03:85:58
X509v3 Authority Key Identifier:
keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34332e302f32342d3234203d3e203532323735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.43.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:6b:38:bd:1c:9a:1e:55:0d:65:b7:d3:06:25:2e:6d:9c:c4:
dd:48:32:2e:d2:79:30:f6:0b:a2:2c:89:e3:ed:f6:4a:8e:ba:
b0:fd:36:e5:f0:3a:be:7e:ea:cc:00:b7:53:ba:f8:55:b0:a1:
2e:6b:fd:34:ca:de:f8:59:7d:8d:e4:f1:1b:99:ac:2c:f1:71:
16:e3:70:cb:d3:a0:5f:3c:7b:f7:ae:7e:3e:59:64:8f:35:c2:
da:04:52:b0:91:42:85:c1:f7:4a:b8:b5:25:2d:6e:48:7a:ad:
cd:36:ab:65:05:9f:e8:10:a7:33:ad:e5:b5:1d:80:a6:49:02:
7c:f1:7d:36:88:52:fc:a4:aa:7d:22:4a:a0:a3:cc:9e:f4:58:
00:75:d4:ba:19:82:67:d1:bb:76:31:e0:e1:53:8c:20:79:27:
e8:7d:55:9d:d1:15:82:1b:3a:d0:40:e8:05:a5:ad:78:f0:8e:
a8:f4:af:35:a4:17:69:45:ef:fc:21:84:1b:b9:5f:1e:d7:fb:
ba:06:ee:72:b7:8c:94:08:bb:69:04:f6:64:c3:67:38:a3:0f:
cc:99:1a:3b:13:1a:7d:99:35:c3:92:07:5b:0d:ee:1d:f6:33:
19:fa:38:41:e4:d3:ab:25:ab:02:50:7e:10:2b:78:bf:55:3a:
d7:1e:a0:34
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUf46qHVWmTAeGuifBUqEii/kqPiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG
QzdBNTc3RjAeFw0yNTAyMDQxODMyMTRaFw0yNjAyMDMxODM3MTRaMDMxMTAvBgNV
BAMTKDhCMDkzQkRFNjdFOTIxNzUwMTNDQzlDRTVFNUMyQTVFQjMwMzg1NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNgDsUvCi3/r1BqfhfNhReWelC
jAgDT+numSKHOcrpj9XHVyRNeozpxdYuDhEBbkS60X41OQIxfFNfDPZNBKAPKVww
tpzcjUIKfXMjXVJLT5v06zmsxiP9H6TKTHznPNtKpIy+TAtWTceYgOuT5w3p2FEZ
9I/TQGZ9+/vxL/THfm4ogWCqjElHrz6YuvcVqgHNiJHcnv0AU9DQMqMQ5gmuOrzc
TfOAiVmS8B+VFHkZNEMkJWI4gbDP7AgYVpjrECgBImoyHtNEFmS/8ZiFjrM8j4qE
0tifB/SQ4wZu5Ui60F0Dir0Mi3Ee4oe0zwCS/SWrffu8lH2adD4r1TzdKqwnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUiwk73mfpIXUBPMnOXlwqXrMDhVgwHwYDVR0j
BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5
QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2
MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw
N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0
N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMyMzAzMDJlMzEzMzJlMzQzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzMjM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDSswDQYJ
KoZIhvcNAQELBQADggEBALtrOL0cmh5VDWW30wYlLm2cxN1IMi7SeTD2C6IsiePt
9kqOurD9NuXwOr5+6swAt1O6+FWwoS5r/TTK3vhZfY3k8RuZrCzxcRbjcMvToF88
e/eufj5ZZI81wtoEUrCRQoXB90q4tSUtbkh6rc02q2UFn+gQpzOt5bUdgKZJAnzx
fTaIUvykqn0iSqCjzJ70WAB11LoZgmfRu3Yx4OFTjCB5J+h9VZ3RFYIbOtBA6AWl
rXjwjqj0rzWkF2lF7/whhBu5Xx7X+7oG7nK3jJQIu2kE9mTDZzijD8yZGjsTGn2Z
NcOSB1sN7h32Mxn6OEHk06slqwJQfhAreL9VOtceoDQ=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:01:45 2025 by rpki-client