Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203238303237.roa
File: 3230302e31302e3134382e302f32322d3234203d3e203238303237.roa (raw, json)
Hash identifier: ZZsjlxBeipxRrFaUCZGN0WQ+EGR0lsmp7zWBkpWtQgA=
Subject key identifier: FC:9F:8F:76:E7:A7:D3:AB:20:FD:12:77:EF:20:33:48:76:75:18:5F
Certificate issuer: /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial: 0BC28323CB59431BB4090A9D2DA76B0BE8498E47
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203238303237.roa
Signing time: Tue 04 Feb 2025 18:27:14 +0000
ROA not before: Tue 04 Feb 2025 18:22:14 +0000
ROA not after: Tue 03 Feb 2026 18:27:14 +0000
asID: 28027
IP address blocks: 200.10.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c2:83:23:cb:59:43:1b:b4:09:0a:9d:2d:a7:6b:0b:e8:49:8e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
Validity
Not Before: Feb 4 18:22:14 2025 GMT
Not After : Feb 3 18:27:14 2026 GMT
Subject: CN=FC9F8F76E7A7D3AB20FD1277EF2033487675185F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:ed:5a:d4:8d:2b:bb:ae:dd:82:7e:dd:4d:
73:16:65:32:9e:b3:cd:14:bf:28:84:22:15:4e:89:
7a:89:99:68:16:dc:07:31:07:4c:b9:25:a0:4f:90:
f4:84:01:15:eb:a1:a3:2c:f8:21:d9:b5:66:35:f1:
9c:a4:6c:e5:69:cc:a4:d8:94:84:ba:48:4c:83:0c:
ef:4f:36:40:7f:7c:ed:4f:c6:8c:91:d6:f4:c5:24:
40:e9:76:bc:17:ec:35:cf:cd:ec:e1:55:e1:0c:6e:
3f:e0:84:d5:2f:8a:32:9b:3c:21:da:e6:0d:24:06:
5d:85:29:33:20:ff:a1:df:05:7b:2b:52:a2:bd:42:
73:55:79:3c:44:c1:2d:80:24:d2:1b:8f:cc:e5:f5:
73:b7:b5:fc:9c:48:b6:0c:56:56:2c:1d:87:46:9c:
f8:4e:51:58:9a:5b:8f:29:ab:2a:36:24:ee:c1:7b:
6b:f8:d0:b2:51:18:8e:6d:9f:cd:37:ed:82:71:e4:
3e:f6:e8:98:1d:4e:47:16:4c:c7:25:16:08:fb:4d:
65:65:d1:fc:ab:3d:d0:cf:69:93:56:22:92:17:d9:
0b:e4:13:86:b5:e8:f7:26:5d:05:2b:a3:9f:47:69:
a4:7c:0a:14:bc:37:60:2c:03:8d:3c:a3:1e:29:fd:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9F:8F:76:E7:A7:D3:AB:20:FD:12:77:EF:20:33:48:76:75:18:5F
X509v3 Authority Key Identifier:
keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203238303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.148.0/22
Signature Algorithm: sha256WithRSAEncryption
27:62:18:d5:7f:cc:7b:1b:69:a0:81:19:4e:19:fd:89:77:c2:
b9:ff:fb:94:bb:df:81:70:21:b2:f5:a2:6f:cb:c5:ff:09:5f:
3b:30:41:b3:da:39:9d:f5:c7:32:b1:ee:9c:c6:6a:11:7a:8f:
2a:6f:dd:f6:e4:8c:e7:60:9f:50:fb:2e:41:c9:ff:75:5e:8a:
25:bd:ed:ea:71:cd:76:9b:4f:43:1e:4a:79:e6:97:a7:1b:d3:
5e:b8:af:30:b5:dd:0d:ac:c3:da:5a:75:88:9a:9b:37:50:ce:
5f:b3:66:22:a7:ab:b3:ab:13:79:70:8d:cd:61:82:e5:16:b9:
4e:38:a7:4e:59:b7:cb:97:d1:83:a9:a8:0c:7a:41:28:d6:76:
25:62:82:dd:e0:c2:a9:f9:78:6d:e0:14:b5:49:ea:fd:2a:f7:
26:f3:db:b1:75:ac:ac:14:b9:38:2a:34:06:36:f7:be:a4:81:
23:8f:24:ed:29:f7:74:8d:c0:7e:52:4e:cf:bd:93:85:94:1e:
a9:1e:4b:90:bf:c6:62:e5:af:13:ae:f5:1b:e7:08:5b:0f:cb:
51:d4:0b:d0:53:21:e6:e8:1b:ce:b1:aa:fe:5e:bb:48:50:f3:
31:8f:f7:bf:69:9a:45:57:f2:56:58:3b:09:1f:07:63:3f:fa:
e1:67:35:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:26 2025 by rpki-client