Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/3230302e32342e3132342e302f32322d3234203d3e203634313331.roa
File: 3230302e32342e3132342e302f32322d3234203d3e203634313331.roa (raw, json)
Hash identifier: DB7UOxkZFu2HJNqFldx93t1zIgYyzoGFRfK+FsWqQ/8=
Subject key identifier: 3F:92:B8:5D:B5:88:37:E6:0D:89:97:D8:07:68:B2:E3:2E:6C:A4:07
Certificate issuer: /CN=4F8BDA7981C17C999F0DEF92264319AC1A10CE1D
Certificate serial: 68FDCAA75A07219B4C59A2002AF62932CC57DFC5
Authority key identifier: 4F:8B:DA:79:81:C1:7C:99:9F:0D:EF:92:26:43:19:AC:1A:10:CE:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/3230302e32342e3132342e302f32322d3234203d3e203634313331.roa
Signing time: Mon 10 Feb 2025 14:25:00 +0000
ROA not before: Mon 10 Feb 2025 14:20:00 +0000
ROA not after: Mon 09 Feb 2026 14:25:00 +0000
asID: 64131
IP address blocks: 200.24.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:fd:ca:a7:5a:07:21:9b:4c:59:a2:00:2a:f6:29:32:cc:57:df:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F8BDA7981C17C999F0DEF92264319AC1A10CE1D
Validity
Not Before: Feb 10 14:20:00 2025 GMT
Not After : Feb 9 14:25:00 2026 GMT
Subject: CN=3F92B85DB58837E60D8997D80768B2E32E6CA407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:36:53:85:bd:ff:c8:e5:2b:c3:fc:3c:bb:
e2:61:c1:0f:54:d0:56:0a:55:dd:63:32:ed:b1:17:
ad:88:6a:2c:ac:fb:b3:3b:f4:c4:3d:e0:07:7e:76:
f2:1f:23:26:a9:b4:5f:40:74:22:bf:86:20:8f:ef:
5f:4b:b0:9b:b4:f4:76:54:a7:ca:e9:b0:54:9a:5e:
a1:8a:df:ef:c5:68:b6:5e:99:32:b3:27:26:45:d0:
90:63:0f:cd:2b:6e:ca:33:42:10:bb:81:55:b5:fa:
81:a4:11:f6:39:dd:4d:fa:c6:a5:ab:c3:23:ab:93:
aa:c1:e4:29:66:c1:89:29:ce:a8:2b:bd:8f:cc:64:
e5:df:6b:26:e4:83:10:da:42:2c:b6:2d:24:72:78:
57:bf:19:93:c7:6b:ba:72:88:2a:aa:0e:4f:8f:c2:
c7:d7:44:ec:4b:80:1e:b7:9b:f2:0b:90:7a:fc:43:
4a:d2:56:9a:e4:ac:0d:a7:b8:7b:d6:8c:70:08:43:
b7:da:2d:3e:f7:57:7a:ab:4a:11:87:6b:e4:24:f1:
19:8c:eb:52:df:48:53:43:c7:a9:10:55:ff:33:47:
76:d3:bb:9d:93:05:be:e3:33:af:67:97:49:7b:32:
d6:9a:c1:62:e8:b6:8f:bf:4a:db:d4:5f:0d:8e:47:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:B8:5D:B5:88:37:E6:0D:89:97:D8:07:68:B2:E3:2E:6C:A4:07
X509v3 Authority Key Identifier:
keyid:4F:8B:DA:79:81:C1:7C:99:9F:0D:EF:92:26:43:19:AC:1A:10:CE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/3230302e32342e3132342e302f32322d3234203d3e203634313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:bd:68:44:f7:eb:da:72:7f:ff:d4:13:c5:ed:56:00:b8:94:
00:86:6e:82:f7:b0:9d:a5:7f:4e:ab:a6:86:09:ef:33:e8:9f:
dd:5e:c0:d3:a1:ce:d0:1a:0e:cf:d6:a5:fd:13:fa:72:a2:48:
44:04:8d:86:54:2a:0a:b4:00:d8:99:60:97:d4:82:0d:6c:37:
2b:ac:dd:46:07:fe:a1:87:d3:ca:33:3f:98:f9:f9:35:7f:ee:
3d:b5:f2:04:0d:9e:fe:9a:31:f7:26:2e:b3:41:45:e8:45:f9:
cd:ba:a1:2e:ae:7a:7d:23:fb:d4:9e:b1:a6:ab:70:c2:60:f3:
79:09:82:78:83:ab:39:6e:5e:8a:b3:f8:1c:1a:fa:91:a3:fe:
b7:8b:00:13:d2:22:8e:e6:83:42:85:25:ae:10:1d:68:58:0a:
bd:26:92:7b:01:9c:2a:a4:70:5a:6e:8f:ad:f3:d3:7c:08:22:
0c:fa:d1:5d:b7:3c:3a:09:8a:5d:8b:e3:ab:22:1a:65:fa:63:
90:62:bb:a0:cb:be:06:50:7b:ee:4f:1b:3a:1b:8e:ce:a0:6b:
da:47:19:ae:f2:25:12:3d:2f:ed:dc:ca:14:10:16:27:c2:12:
d2:bd:9d:b1:b1:7c:60:62:67:7d:87:55:a0:ab:ff:33:c9:74:
ba:1e:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:40 2025 by rpki-client