Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e34342e302e302f31362d3234203d3e2038303438.roa
File: 3230302e34342e302e302f31362d3234203d3e2038303438.roa (raw, json)
Hash identifier: GGDvbTQsJrpqkb6Awkans+oZeZ54Lk3nUQNFdU9CER0=
Subject key identifier: 4E:4C:CF:11:03:8E:E0:1D:B4:71:9E:A7:00:4B:3E:EB:A9:88:87:04
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 39906CD8E852C4FD7C7957BFB81EB04FE83E1B73
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e34342e302e302f31362d3234203d3e2038303438.roa
Signing time: Tue 04 Feb 2025 18:55:39 +0000
ROA not before: Tue 04 Feb 2025 18:50:39 +0000
ROA not after: Tue 03 Feb 2026 18:55:39 +0000
asID: 8048
IP address blocks: 200.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:90:6c:d8:e8:52:c4:fd:7c:79:57:bf:b8:1e:b0:4f:e8:3e:1b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Feb 4 18:50:39 2025 GMT
Not After : Feb 3 18:55:39 2026 GMT
Subject: CN=4E4CCF11038EE01DB4719EA7004B3EEBA9888704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:2b:37:5e:27:d9:a3:48:e0:5e:a0:0d:3f:
e2:10:f5:05:80:f1:e2:dd:67:f7:22:73:9c:01:2c:
08:15:d9:c6:11:74:11:b7:53:1d:90:a6:f9:31:c5:
67:53:03:a2:9d:24:82:c5:0e:04:f6:b6:90:74:cd:
ad:1e:95:ed:e1:33:91:a4:d7:e3:e3:bd:3b:1a:ad:
d1:f4:c8:7d:05:65:8a:88:9b:bd:a1:0a:04:d0:f5:
6d:c0:ba:f4:45:e0:cf:e8:86:59:4c:b0:de:11:42:
b6:c5:7b:cb:b1:b1:e0:9e:7d:17:cc:a9:ac:1b:b9:
46:52:3d:2f:73:e7:15:76:9d:9e:36:bd:37:81:69:
67:24:80:ff:d6:f8:32:77:93:d3:2b:3b:f5:f0:27:
50:63:2a:27:e5:55:93:c8:0d:e1:2f:92:e4:71:72:
a7:53:f7:63:20:0b:73:3f:a9:ba:cc:11:98:fa:27:
a7:30:f3:81:2e:48:cd:57:30:ad:c9:20:09:ec:9a:
53:ae:ff:6d:25:bb:29:25:41:71:89:88:0a:c9:91:
08:b3:fd:62:e7:1c:71:67:e7:a6:98:ad:06:bf:79:
c8:71:94:e2:e1:f6:64:49:27:12:d4:20:40:c9:99:
fa:7d:6a:b6:d6:f3:90:a1:24:87:10:f7:a1:f1:c6:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4C:CF:11:03:8E:E0:1D:B4:71:9E:A7:00:4B:3E:EB:A9:88:87:04
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e34342e302e302f31362d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.44.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:7e:7c:6b:c1:0b:db:8a:63:c1:17:e8:78:2a:96:cb:1a:27:
15:1d:9f:0e:01:bb:90:fb:52:f7:57:60:a1:96:e6:1f:db:ef:
63:ed:9e:11:7a:94:c2:cf:e0:65:c7:3d:15:64:54:ba:4b:7c:
3c:ae:69:86:df:04:2d:82:0c:5a:65:22:60:6b:92:7e:bf:08:
7a:95:4b:db:91:10:3b:83:bd:16:e1:7b:a0:e9:57:b1:81:7a:
f0:da:37:32:45:76:12:71:44:04:86:d3:ad:2e:3c:6a:93:9f:
49:6b:69:e9:52:70:3d:df:9e:b5:cb:10:db:8d:4c:1b:73:66:
80:3e:2d:bc:9b:b8:70:b8:da:6a:64:e0:84:58:13:8f:45:a4:
7c:79:0b:22:9e:32:ec:9a:d4:b8:2a:35:e6:cd:bb:de:a3:c2:
ce:43:25:b6:ed:9b:b9:72:91:db:e9:a4:5e:dd:b9:bc:68:bb:
78:fd:44:4d:4c:55:82:85:97:fa:c8:6c:73:bf:42:f9:1e:03:
90:e0:fb:cf:a9:2c:a3:c9:36:71:15:4c:f9:03:c6:e4:00:c6:
96:7f:34:9e:e1:c2:74:1d:c3:11:79:9d:e4:bc:d4:b3:5d:4b:
f9:44:f2:85:5e:08:f1:76:d5:dc:4b:7a:d1:d4:98:d2:c2:d0:
1f:6f:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:50 2025 by rpki-client