Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131342e302e302f31382d3138203d3e203133343839.roa
File: 3230302e3131342e302e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier: McIl/6VVgyG9vWer3lh1PA/gdKlrg2tg4y50Y3FMxdo=
Subject key identifier: 28:83:CB:14:8B:84:6F:30:BB:00:39:D6:BD:E8:1F:01:6E:2A:48:F4
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 6C34487C320B7D96AA44CDAF269FBD4343376457
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131342e302e302f31382d3138203d3e203133343839.roa
Signing time: Tue 04 Feb 2025 18:33:28 +0000
ROA not before: Tue 04 Feb 2025 18:28:28 +0000
ROA not after: Tue 03 Feb 2026 18:33:28 +0000
asID: 13489
IP address blocks: 200.114.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:34:48:7c:32:0b:7d:96:aa:44:cd:af:26:9f:bd:43:43:37:64:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Feb 4 18:28:28 2025 GMT
Not After : Feb 3 18:33:28 2026 GMT
Subject: CN=2883CB148B846F30BB0039D6BDE81F016E2A48F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c0:42:8c:0f:66:38:c3:91:f9:09:4f:8f:18:
7f:fa:4d:1d:a1:e0:78:e2:36:3d:d6:c4:61:f6:c3:
f7:02:17:fd:58:b1:df:6a:8f:e8:f6:06:23:be:8f:
39:fe:c6:aa:e8:c5:5e:f3:d7:51:47:d4:37:c0:b8:
74:fe:32:8d:5a:50:d4:bf:70:03:c0:10:d8:29:f8:
a5:2d:31:e9:ac:e0:34:72:5b:32:ec:71:f2:a5:8e:
ad:32:4b:58:f8:36:67:62:f0:69:ad:e0:a5:0d:d3:
64:35:bd:b4:5a:3b:41:f1:cd:ce:62:4b:dd:20:f7:
7c:1b:3f:f6:1c:a3:bc:b5:23:1e:26:81:a6:92:78:
f1:c6:32:02:8f:aa:e5:2a:1a:78:7e:6a:da:b8:fa:
67:e8:96:2e:70:19:5f:79:3f:16:c9:6d:82:02:42:
21:2c:51:c7:6b:c2:09:99:cb:f2:df:4d:31:de:18:
8e:34:1c:ed:1a:d2:f4:50:1f:43:6c:19:c3:d2:fb:
d6:cb:da:d9:95:b2:61:b9:ee:77:d9:eb:e3:f8:28:
60:da:b6:ea:84:31:ae:a9:f5:86:6b:c7:d8:6d:81:
37:99:42:9f:dd:d8:d3:06:03:5f:85:a3:be:99:41:
ff:50:e7:6b:a1:0e:9e:1d:2b:0d:77:fb:97:42:e2:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:CB:14:8B:84:6F:30:BB:00:39:D6:BD:E8:1F:01:6E:2A:48:F4
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131342e302e302f31382d3138203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.114.0.0/18
Signature Algorithm: sha256WithRSAEncryption
53:a9:de:1e:0d:8b:00:b5:f5:54:f4:d6:98:0f:67:7c:db:87:
4f:2a:78:b8:e4:b2:a9:57:db:bb:47:f1:e6:1b:76:c0:a4:2d:
40:c2:cb:8e:72:a4:59:3b:9f:a7:33:53:f3:d4:ae:6f:8f:cf:
f2:a6:3b:3b:6a:93:dd:86:e9:0a:d8:ef:64:38:f4:c2:c5:64:
d5:b7:17:cb:ff:7f:49:ab:87:ec:07:7b:ca:dc:07:87:ec:43:
fa:90:df:c1:4f:d1:f4:54:2a:e9:c7:47:da:aa:d0:3e:fe:a4:
5a:19:75:67:57:9b:35:39:3a:8b:7b:c0:81:17:eb:be:aa:0a:
90:34:c3:bd:42:a7:1a:55:3f:cd:1f:ff:51:2f:42:8c:13:d4:
3d:97:64:59:78:54:91:6b:b1:de:7f:72:8a:74:a5:fb:19:67:
65:f0:2a:1e:15:42:9c:1d:3f:f4:c2:11:ee:d3:ea:ea:55:c1:
c6:b2:71:77:7a:a8:71:e8:33:cb:27:cc:c3:3e:a7:52:37:18:
0d:a1:a7:22:83:63:9e:6b:80:68:6b:c4:a9:26:c6:ea:18:8f:
fb:d7:75:9f:3f:c6:b3:28:36:0e:7f:d6:c1:3f:65:31:2e:cd:
0f:7b:d4:64:9b:4a:fa:da:b1:cd:e5:ac:a9:65:1d:74:21:32:
4f:59:bc:89
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUbDRIfDILfZaqRM2vJp+9Q0M3ZFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNTAyMDQxODI4MjhaFw0yNjAyMDMxODMzMjhaMDMxMTAvBgNV
BAMTKDI4ODNDQjE0OEI4NDZGMzBCQjAwMzlENkJERTgxRjAxNkUyQTQ4RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0wEKMD2Y4w5H5CU+PGH/6TR2h
4HjiNj3WxGH2w/cCF/1Ysd9qj+j2BiO+jzn+xqroxV7z11FH1DfAuHT+Mo1aUNS/
cAPAENgp+KUtMems4DRyWzLscfKljq0yS1j4Nmdi8Gmt4KUN02Q1vbRaO0Hxzc5i
S90g93wbP/Yco7y1Ix4mgaaSePHGMgKPquUqGnh+atq4+mfoli5wGV95PxbJbYIC
QiEsUcdrwgmZy/LfTTHeGI40HO0a0vRQH0NsGcPS+9bL2tmVsmG57nfZ6+P4KGDa
tuqEMa6p9YZrx9htgTeZQp/d2NMGA1+Fo76ZQf9Q52uhDp4dKw13+5dC4n9JAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUKIPLFIuEbzC7ADnWvegfAW4qSPQwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMyMzAzMDJlMzEzMTM0MmUzMDJlMzAy
ZjMxMzgyZDMxMzgyMDNkM2UyMDMxMzMzNDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbIcgAwDQYJ
KoZIhvcNAQELBQADggEBAFOp3h4NiwC19VT01pgPZ3zbh08qeLjksqlX27tH8eYb
dsCkLUDCy45ypFk7n6czU/PUrm+Pz/KmOztqk92G6QrY72Q49MLFZNW3F8v/f0mr
h+wHe8rcB4fsQ/qQ38FP0fRUKunHR9qq0D7+pFoZdWdXmzU5Oot7wIEX676qCpA0
w71CpxpVP80f/1EvQowT1D2XZFl4VJFrsd5/cop0pfsZZ2XwKh4VQpwdP/TCEe7T
6upVwcaycXd6qHHoM8snzMM+p1I3GA2hpyKDY55rgGhrxKkmxuoYj/vXdZ8/xrMo
Ng5/1sE/ZTEuzQ971GSbSvrasc3lrKllHXQhMk9ZvIk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:49 2025 by rpki-client