Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34312e302f32342d3234203d3e203236363137.roa
File: 3230302e31322e34312e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier: /QICFrJkclXdvv74KmKhp1GJ7q207eK6dN/QupgfFFQ=
Subject key identifier: 62:49:B0:CD:E9:30:5B:E6:60:FC:E6:3E:94:26:F8:68:A1:B5:76:67
Certificate issuer: /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial: 3DF5E9ABEC0E0528B30A347DABCD8AC7879BB948
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34312e302f32342d3234203d3e203236363137.roa
Signing time: Tue 04 Feb 2025 18:06:33 +0000
ROA not before: Tue 04 Feb 2025 18:01:33 +0000
ROA not after: Tue 03 Feb 2026 18:06:33 +0000
asID: 26617
IP address blocks: 200.12.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f5:e9:ab:ec:0e:05:28:b3:0a:34:7d:ab:cd:8a:c7:87:9b:b9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Validity
Not Before: Feb 4 18:01:33 2025 GMT
Not After : Feb 3 18:06:33 2026 GMT
Subject: CN=6249B0CDE9305BE660FCE63E9426F868A1B57667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:23:c8:a8:10:dd:9a:44:83:b3:b6:bb:6f:
c2:bf:0d:9f:67:5c:dd:0d:b6:b9:2c:c6:7b:39:ea:
75:bc:48:4d:b4:d2:ad:f3:4d:00:9e:90:95:97:39:
c7:f1:5a:73:45:e4:3e:a7:47:ec:a1:3e:a0:bb:41:
17:4b:df:f5:f8:d6:44:7a:11:b8:e2:df:9a:a3:48:
a4:9e:7b:53:1f:b8:5a:e9:9d:6c:dd:c3:ea:ff:ba:
d3:f8:f6:56:aa:80:1f:97:c3:28:8e:27:0b:ef:04:
16:0d:8b:11:e9:e2:1d:d6:a7:08:35:c7:e5:d9:19:
88:a6:46:1e:c1:b6:07:6e:6d:96:d8:0d:51:48:b7:
fc:cd:46:cd:81:33:5f:c6:99:ca:df:6f:f8:9f:4a:
6e:1b:f8:b7:7d:07:a4:66:a1:41:7d:40:e7:83:50:
6f:be:20:7d:c1:fb:ce:25:3c:c3:8b:98:dc:d9:20:
03:98:66:02:f2:cc:76:3e:ba:fc:0b:00:b5:21:c9:
cd:14:e2:89:ee:73:a9:e0:c1:77:51:03:42:35:49:
ae:c3:3d:2e:3a:55:22:3b:2a:17:10:5d:9e:d7:b1:
db:91:24:8b:87:e1:67:9a:51:a9:33:45:cc:21:83:
4f:a6:90:2a:9f:72:0c:10:3f:0c:1a:e4:9a:a8:08:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:49:B0:CD:E9:30:5B:E6:60:FC:E6:3E:94:26:F8:68:A1:B5:76:67
X509v3 Authority Key Identifier:
keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34312e302f32342d3234203d3e203236363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8a:61:a2:f8:30:8a:bc:77:cb:a2:48:3c:cd:5f:c2:ca:aa:
3f:75:8d:01:54:e6:81:8a:d9:f9:81:fd:17:c0:e1:0b:2c:65:
93:69:95:08:ee:11:70:29:67:cd:3c:19:a9:11:c7:16:55:17:
21:0e:c0:a9:6e:a9:b2:5b:74:74:e1:48:47:90:b0:1b:86:43:
db:ed:77:af:ee:d5:c0:09:ee:a2:e2:98:72:32:8e:1a:58:1e:
12:ca:37:1d:99:87:f3:8c:b8:af:9d:49:b2:3f:70:d5:be:66:
b4:35:b8:88:f8:d5:8f:61:c5:dd:8c:d8:43:f2:14:ad:73:67:
54:e2:15:24:03:85:a0:25:85:e9:4d:9f:a0:b5:5e:8b:63:cb:
06:88:4b:4a:53:a4:c4:20:57:24:cd:d7:e1:2d:3c:70:4f:dc:
22:d3:00:99:3c:bc:4f:f7:13:ca:0f:af:33:ad:65:f4:71:6d:
5a:3d:a1:60:d7:29:83:43:f4:e7:df:3e:22:0e:e6:7a:79:6e:
bf:76:2f:01:ea:f2:04:8c:e0:e1:9e:e3:3a:61:a3:c4:a2:6c:
51:c7:6e:c2:70:34:87:d3:79:81:1c:6a:c0:f2:f3:2c:7b:12:
d5:db:f5:d3:fa:f7:3c:f3:e3:ed:f0:73:aa:75:f0:06:21:3c:
11:31:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:30 2025 by rpki-client