Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e39302e302e302f31372d3234203d3e2038303438.roa
File: 3230302e39302e302e302f31372d3234203d3e2038303438.roa (raw, json)
Hash identifier: NyM9eA2CgCvINlmBenPmUdfFD9e5tNpT9MXOPmNo5Jc=
Subject key identifier: 4D:BD:96:53:A1:33:37:77:02:EF:17:30:96:37:87:91:B0:98:E1:17
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 41D4EF2773ABF9887EE172615252A7504F67135E
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e39302e302e302f31372d3234203d3e2038303438.roa
Signing time: Tue 04 Feb 2025 18:55:34 +0000
ROA not before: Tue 04 Feb 2025 18:50:34 +0000
ROA not after: Tue 03 Feb 2026 18:55:34 +0000
asID: 8048
IP address blocks: 200.90.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d4:ef:27:73:ab:f9:88:7e:e1:72:61:52:52:a7:50:4f:67:13:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Feb 4 18:50:34 2025 GMT
Not After : Feb 3 18:55:34 2026 GMT
Subject: CN=4DBD9653A133377702EF173096378791B098E117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:39:06:14:7b:30:ac:96:36:6b:a3:3c:cd:
1e:95:e6:50:db:91:47:89:c5:58:58:54:b7:8c:0d:
88:bf:88:74:3d:07:22:46:ba:b1:1c:fc:ba:7e:42:
7a:48:5d:d7:70:ff:e2:50:4b:2d:8a:f6:39:26:41:
61:d6:07:96:1c:b8:3d:21:1a:6f:75:9c:9b:61:35:
50:b2:4d:11:47:66:5b:43:7c:eb:c2:6d:4b:1a:e3:
0c:06:1d:c6:f3:0a:71:d9:49:6a:af:29:2e:25:31:
05:81:2b:06:df:fb:75:df:26:4c:0a:9b:75:dd:ef:
f8:57:97:8c:e2:0c:c6:fc:88:3b:5f:82:2a:6f:f8:
99:03:d0:58:71:b9:d0:de:9d:bc:36:39:cd:b5:86:
b2:33:dd:e6:45:59:01:20:d4:42:d3:d9:b6:df:85:
15:04:6a:cc:e0:96:b7:59:ee:b7:c5:05:cb:47:b7:
6b:2c:e7:8b:c5:3b:2a:0d:0f:24:52:69:99:c8:ed:
d9:b2:5d:cc:27:45:a4:ae:55:d9:df:58:58:07:af:
14:a5:38:5a:2c:f5:a0:82:e0:c4:7a:50:f7:11:d0:
c4:05:42:5a:ac:97:09:a7:2e:e0:32:05:6f:d6:c2:
9b:6a:98:a2:83:85:d4:dc:ea:38:f0:07:fe:45:72:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BD:96:53:A1:33:37:77:02:EF:17:30:96:37:87:91:B0:98:E1:17
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e39302e302e302f31372d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8c:24:82:14:37:f0:c0:e4:99:5b:b1:44:34:60:ce:59:2f:02:
b0:32:36:25:08:41:f6:43:17:6c:63:74:0d:aa:0a:5c:4d:67:
ce:ef:10:d2:b8:0a:84:11:ab:e9:d5:9e:29:1c:6c:40:42:b6:
bf:44:f1:d9:9f:5b:7e:78:77:2d:e1:a4:17:3d:6c:d8:aa:2b:
3e:48:93:15:35:5e:61:aa:46:80:d9:c2:93:18:ec:6d:e9:16:
8f:ff:93:d2:5b:64:90:6c:90:da:c8:87:30:04:a3:37:11:d6:
62:5a:6a:13:41:2c:09:99:23:58:44:a1:df:33:ff:fa:fa:80:
62:b1:54:67:6e:82:41:0d:91:f0:55:e9:07:1a:2f:ed:d9:b0:
c6:57:03:84:dd:28:59:17:94:e1:55:8b:17:66:d7:3c:a1:40:
92:3a:7e:eb:51:41:f4:00:af:14:da:04:a1:d6:8a:35:75:75:
ec:27:47:35:3e:33:09:7a:f4:0e:28:58:f1:3b:f3:dd:3a:bc:
67:94:19:27:dd:b4:62:81:a0:7f:92:c1:92:e2:2b:e6:45:db:
41:2c:2e:09:7e:fb:45:7b:6a:2b:e3:90:cd:91:4f:50:cd:85:
8c:27:49:86:fa:ed:a0:f9:15:76:57:a7:59:3a:f8:05:51:5d:
3b:8d:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:04 2025 by rpki-client