Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234302e302f32302d3234203d3e203133333831.roa
File: 3230302e3131322e3234302e302f32302d3234203d3e203133333831.roa (raw, json)
Hash identifier: OrbLhXOXYrOHIgG7IuFyV/THxHy9GetA/LyWw+q5KBY=
Subject key identifier: 44:18:A6:3C:DE:0A:6D:DE:48:52:8D:A3:A5:9D:98:20:99:08:D5:A9
Certificate issuer: /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial: 769BF124113DB05E3985F03E121708E1932DF92C
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234302e302f32302d3234203d3e203133333831.roa
Signing time: Tue 04 Feb 2025 20:07:56 +0000
ROA not before: Tue 04 Feb 2025 20:02:56 +0000
ROA not after: Tue 03 Feb 2026 20:07:56 +0000
asID: 13381
IP address blocks: 200.112.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:9b:f1:24:11:3d:b0:5e:39:85:f0:3e:12:17:08:e1:93:2d:f9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Validity
Not Before: Feb 4 20:02:56 2025 GMT
Not After : Feb 3 20:07:56 2026 GMT
Subject: CN=4418A63CDE0A6DDE48528DA3A59D98209908D5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:82:97:be:ea:09:56:bb:b1:8b:f4:ed:58:
af:dc:72:4b:a4:24:60:16:0e:13:0f:16:3f:f5:4a:
d3:f3:39:11:ea:8a:2e:9b:b5:3f:e3:ce:e8:a3:20:
2d:ea:27:f7:a1:d3:14:19:5d:15:53:76:32:f9:97:
73:93:e9:b2:d3:c0:2a:08:7e:c8:ff:e5:cd:8e:e7:
c6:6b:80:81:c1:e4:a1:02:b8:d7:05:3c:59:06:96:
fb:37:58:50:39:67:ae:48:c8:6d:fd:6e:12:ab:ec:
d4:34:be:52:e3:97:29:a9:de:cf:a7:3d:68:b7:2c:
19:78:db:f9:28:b9:ba:b3:d1:fc:4e:04:56:15:ff:
ef:1c:cd:a1:9a:4f:69:04:8f:de:9e:9d:3c:ca:41:
fe:dc:0e:9e:1b:37:b6:76:ae:91:73:dd:ca:07:b7:
a9:03:32:fe:40:d6:f3:5c:37:22:7a:78:30:81:2c:
63:77:1b:23:50:a6:7b:0e:f1:b8:4d:61:9d:65:16:
f6:cd:d4:2b:69:34:c9:24:2d:ba:03:5e:7c:91:3d:
35:45:c7:10:f2:28:63:8b:26:61:31:80:15:b8:1e:
10:38:f7:d7:2c:0b:61:79:f9:ed:be:0b:81:7b:d2:
24:40:5f:07:ab:8c:c1:ae:fa:fe:e0:47:86:1d:fe:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:18:A6:3C:DE:0A:6D:DE:48:52:8D:A3:A5:9D:98:20:99:08:D5:A9
X509v3 Authority Key Identifier:
keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234302e302f32302d3234203d3e203133333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:96:05:c2:59:14:e4:b6:04:b8:c3:b8:42:d6:fa:a5:e7:7d:
b9:be:e1:2c:21:53:05:52:fb:d3:02:c3:d1:42:0a:99:5d:25:
c2:4c:14:18:07:44:72:46:2a:86:3c:a4:6a:62:50:d8:8e:36:
0a:b8:64:20:1c:c7:6a:e0:54:2e:2d:4a:7b:ac:0f:fc:5e:f9:
62:12:7e:51:82:a7:7e:8c:6a:a0:57:31:fe:41:c5:ea:21:95:
2a:ba:00:fa:64:67:a2:ed:02:d5:5f:cf:33:df:86:c7:b4:d8:
3d:97:bd:4f:20:a6:ec:a7:42:e8:e4:db:fc:52:37:a8:31:87:
cd:d5:07:64:e6:9e:7e:2c:c6:f8:7e:be:18:46:13:79:c0:da:
b2:ae:a8:f1:ae:06:69:2a:03:4f:44:53:c3:7a:f2:41:3e:e5:
9b:e3:c2:b3:cb:12:71:97:1d:5b:88:ea:0d:4e:cd:e8:5a:c0:
3d:26:49:69:fd:54:4c:9b:a8:77:e5:89:3b:33:6d:10:67:b0:
23:37:5a:b6:7a:c8:de:9c:1a:b6:6d:7c:63:50:aa:b4:fb:eb:
7e:46:6e:12:89:ee:5e:d1:46:f8:e8:30:1c:2b:f3:47:c3:f8:
f4:7d:fb:a2:d1:87:05:9a:f7:f5:01:c4:a8:4e:d0:d8:62:3b:
b5:dc:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:33 2025 by rpki-client