Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e312e302f32342d3234203d3e203135333131.roa
File: 3230302e36382e312e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier: RwLD2B+yJxXSLhQku7kW+xehvgpbn5tuEuWPseQq3bk=
Subject key identifier: 82:11:69:50:3A:9C:8D:22:E4:CF:4C:58:91:AF:DC:21:48:41:CB:79
Certificate issuer: /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial: 3C9C08BCB5DAAF5E38D41675FF5C31680AEB434E
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e312e302f32342d3234203d3e203135333131.roa
Signing time: Tue 04 Feb 2025 18:32:01 +0000
ROA not before: Tue 04 Feb 2025 18:27:01 +0000
ROA not after: Tue 03 Feb 2026 18:32:01 +0000
asID: 15311
IP address blocks: 200.68.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:9c:08:bc:b5:da:af:5e:38:d4:16:75:ff:5c:31:68:0a:eb:43:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Validity
Not Before: Feb 4 18:27:01 2025 GMT
Not After : Feb 3 18:32:01 2026 GMT
Subject: CN=821169503A9C8D22E4CF4C5891AFDC214841CB79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:03:27:82:aa:c0:98:36:fc:e1:b0:f8:67:
d1:ae:20:d9:4b:42:8f:16:da:46:eb:8f:c0:3a:4f:
df:56:38:fe:93:54:41:b7:53:d0:e9:d8:81:81:f9:
3a:bb:59:2d:f6:5d:13:3f:8a:b2:dc:75:c8:24:0b:
a6:3c:38:c3:40:7a:99:cd:86:31:39:83:0c:76:62:
a3:74:37:2c:44:1a:4e:66:2a:43:c8:4b:c3:73:9a:
21:13:2e:57:98:1b:c2:23:3c:15:64:20:7b:c0:f6:
46:42:ca:7c:f6:b9:d4:8e:a8:a9:92:7c:d2:5c:2b:
55:f3:d8:f2:a4:a5:43:65:8b:3c:22:21:be:b7:81:
63:ac:ed:ac:48:0a:0b:5d:e8:7c:e7:0f:dc:45:c1:
6b:a8:69:a1:e3:27:6a:7c:ba:5c:05:9e:c0:87:51:
fb:a7:dc:9c:8b:73:59:65:44:0f:82:27:4a:fb:8d:
17:f2:06:09:69:5b:c8:2a:49:ef:19:e0:2a:e3:1e:
96:f7:a7:c0:5c:ec:c8:ba:43:22:f0:90:6e:0b:62:
af:9b:02:ae:7b:02:db:23:fc:17:db:7e:04:b8:a5:
c7:36:0f:5e:d7:c8:f0:eb:2e:d6:5e:35:2c:e1:a8:
d5:e6:4f:63:1d:84:19:58:f3:6a:52:be:61:0e:08:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:11:69:50:3A:9C:8D:22:E4:CF:4C:58:91:AF:DC:21:48:41:CB:79
X509v3 Authority Key Identifier:
keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e312e302f32342d3234203d3e203135333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.68.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a1:03:64:11:9d:b4:3b:de:c0:24:d5:c1:b4:d1:16:0d:4b:
dc:40:25:c6:33:73:67:5c:03:5a:1b:30:bf:1c:11:bd:35:a7:
d3:36:20:66:2d:5a:5c:16:5b:6d:3e:f1:54:1a:f7:bf:92:ed:
ef:94:15:c9:d2:f2:32:f6:f0:43:b1:87:7d:b7:b9:03:8b:03:
1a:79:cc:5d:84:6a:44:e7:cb:7d:4d:82:f5:27:e5:aa:30:65:
e2:44:88:e0:be:af:23:3c:51:54:db:ae:75:61:92:ed:be:04:
b1:dc:48:c4:6c:7d:22:99:72:8a:b4:c5:f9:06:81:27:35:33:
42:2a:8f:a2:91:2c:00:d9:1a:de:ff:ef:97:c1:68:d7:5b:7d:
d0:55:fc:e6:4d:68:41:23:64:c1:d2:cc:c8:5e:99:cc:53:85:
7d:f2:7d:ee:b3:3e:cd:04:3f:e4:c7:3e:bc:88:8e:98:06:1b:
47:cc:47:53:cd:ca:f6:f2:0e:56:9a:37:0e:10:2e:ac:a8:a7:
e6:4b:de:2a:4e:e6:85:0c:44:20:a0:f5:18:47:42:17:30:f0:
9b:34:8f:c9:bf:aa:b7:c8:44:08:e0:c0:af:33:f0:c3:11:80:
37:63:22:29:dd:19:95:9f:3d:b9:18:a0:fd:e1:eb:23:2b:a7:
c8:41:45:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:25:55 2025 by rpki-client