Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234302e302f32342d3234203d3e203133333831.roa
File: 3230302e3131322e3234302e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier: 8IR3Ke0Qvm/NM4i+2FzKHUBgSYL22TjnPXrITb3To/k=
Subject key identifier: 97:EB:D1:B1:EC:7C:AD:A6:5E:4C:22:31:D5:54:DD:F8:3F:43:0D:C1
Certificate issuer: /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial: 288A4CC85990452CB998F986204BA7E79618E87D
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234302e302f32342d3234203d3e203133333831.roa
Signing time: Tue 04 Feb 2025 20:07:57 +0000
ROA not before: Tue 04 Feb 2025 20:02:57 +0000
ROA not after: Tue 03 Feb 2026 20:07:57 +0000
asID: 13381
IP address blocks: 200.112.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8a:4c:c8:59:90:45:2c:b9:98:f9:86:20:4b:a7:e7:96:18:e8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Validity
Not Before: Feb 4 20:02:57 2025 GMT
Not After : Feb 3 20:07:57 2026 GMT
Subject: CN=97EBD1B1EC7CADA65E4C2231D554DDF83F430DC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:e8:16:40:56:9f:d1:08:20:88:35:bd:1c:
3b:39:20:2e:ab:0b:de:d2:a6:c4:b3:e6:7f:64:77:
98:ba:a2:b6:6c:f1:75:5e:43:b2:c3:50:c5:b3:61:
46:f2:7a:0c:3d:c7:6e:0e:e5:66:76:b1:db:60:9b:
61:c9:13:cd:3f:53:f1:80:e1:d2:dc:09:b4:88:ed:
d8:93:d7:aa:cc:7b:2b:9d:82:76:3b:42:37:cc:aa:
18:33:c0:d6:23:09:74:06:7d:f6:ea:df:2f:51:78:
4f:c8:59:3a:4e:8e:84:eb:d5:0d:a7:25:b8:13:b6:
d8:7a:5f:7f:96:69:46:5b:34:6f:d3:40:f8:d1:08:
72:20:c1:23:c2:c4:9e:81:f8:04:ab:20:9a:40:dc:
7b:67:21:c4:71:c7:06:20:9d:ae:8c:d1:f2:7e:78:
ee:5b:b3:6f:2a:9c:ef:ab:6f:a6:f7:df:31:5f:2e:
d1:f7:98:be:e4:f2:c0:a5:17:b4:45:2e:a7:b7:49:
8f:cb:f2:87:b2:93:5c:7c:42:07:95:80:af:9a:52:
4a:a0:ce:25:f0:54:52:b7:64:cc:c8:7e:88:f1:8b:
17:91:00:b7:3d:09:55:e1:a7:c0:c2:2d:28:74:33:
54:27:b2:a3:3c:11:ad:eb:e9:bf:07:94:b7:30:35:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EB:D1:B1:EC:7C:AD:A6:5E:4C:22:31:D5:54:DD:F8:3F:43:0D:C1
X509v3 Authority Key Identifier:
keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234302e302f32342d3234203d3e203133333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:26:2a:87:ba:fb:bc:ff:fb:87:28:0c:5c:16:04:28:9d:50:
5b:89:68:d0:12:76:85:32:90:56:8f:98:a6:99:20:de:fe:85:
7b:29:32:8c:a7:36:9c:11:14:7c:1b:fa:99:bb:41:74:ac:26:
71:13:92:62:b8:9e:84:c5:26:fb:3f:88:fc:6e:99:8d:38:13:
e6:ec:cd:9c:77:2d:64:9b:8b:d4:25:ca:8d:c6:8e:cc:14:58:
b4:8f:01:80:1c:c0:9c:1f:cd:33:22:5a:31:cf:28:71:37:dc:
3f:91:3b:ee:9f:8b:aa:bc:79:ee:8a:28:58:43:6c:8c:5e:c6:
b0:17:e6:ea:b0:06:36:1c:66:64:d6:26:6e:32:ff:77:56:5f:
39:cd:62:5c:18:09:10:8b:97:b8:bc:be:12:42:69:6d:1a:ce:
29:a4:84:ad:c9:2e:f6:28:83:3e:24:7c:c4:a6:b7:dd:01:5f:
79:e1:b8:15:f8:11:2b:73:cf:d5:52:e0:0f:5e:28:1b:3a:be:
83:d4:6c:15:59:63:84:32:8e:52:60:26:da:f8:53:4d:f0:fb:
1e:a3:ca:09:95:a8:83:6d:d9:49:7b:a6:4d:0d:f1:48:23:2e:
13:96:82:5e:65:ce:ec:b1:cb:5f:cc:83:60:38:19:c3:9c:30:
14:eb:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:06 2025 by rpki-client