Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e33302e36342e302f31392d3139203d3e203133343839.roa
File: 3230302e33302e36342e302f31392d3139203d3e203133343839.roa (raw, json)
Hash identifier: 1mFCnFPbuzi0m8VitAtBvqzJEKOApBiXbeucfdr+Y9U=
Subject key identifier: 03:64:CC:12:A3:13:2E:56:F5:EA:8E:E9:D9:96:12:79:FA:9E:29:1C
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 5CB807C19F0F60E5A819FBDFF476ADF0262EEA9D
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e33302e36342e302f31392d3139203d3e203133343839.roa
Signing time: Tue 04 Feb 2025 18:33:30 +0000
ROA not before: Tue 04 Feb 2025 18:28:30 +0000
ROA not after: Tue 03 Feb 2026 18:33:30 +0000
asID: 13489
IP address blocks: 200.30.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b8:07:c1:9f:0f:60:e5:a8:19:fb:df:f4:76:ad:f0:26:2e:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Feb 4 18:28:30 2025 GMT
Not After : Feb 3 18:33:30 2026 GMT
Subject: CN=0364CC12A3132E56F5EA8EE9D9961279FA9E291C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:88:f1:08:8b:0e:d5:6d:91:9d:f5:6a:7d:
84:77:33:30:f9:32:95:45:1d:c7:56:42:b3:a7:69:
32:3e:de:d5:2c:51:97:3c:03:b5:ca:46:c5:66:ae:
2e:3f:f0:cd:fe:85:cf:71:cf:08:67:1a:39:c5:ce:
4d:06:e5:6e:a8:74:2b:34:c5:89:1b:d8:34:1f:a4:
56:6c:6d:4a:1a:fc:97:68:59:f6:fa:9f:65:fc:49:
43:17:20:63:e9:ff:19:36:b7:89:be:68:7d:5b:fe:
b6:5d:f3:1c:9a:e2:a5:56:c0:fd:5a:f4:c5:e3:d2:
cb:db:f1:51:e9:eb:cd:55:6c:5b:6d:a1:ab:67:1c:
81:8f:e9:94:f0:19:f8:4a:73:01:d9:e0:c4:c9:3d:
25:fb:2e:ee:82:65:fc:7c:e6:18:3f:be:ff:ec:59:
9c:4e:24:b1:22:8a:9b:45:d0:2f:06:5e:91:39:d6:
90:6e:fa:7c:d2:4e:77:15:d2:27:43:03:85:4f:4d:
69:ad:e6:22:ac:4c:2b:53:29:8a:7a:e4:01:6e:d5:
51:3c:f6:40:76:22:9d:88:88:cc:58:d7:d1:01:0b:
ea:68:88:fb:67:58:05:49:02:d5:b3:91:cd:9f:aa:
7f:df:27:43:6b:3b:31:f3:14:97:cb:b1:12:f7:71:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:64:CC:12:A3:13:2E:56:F5:EA:8E:E9:D9:96:12:79:FA:9E:29:1C
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e33302e36342e302f31392d3139203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.64.0/19
Signature Algorithm: sha256WithRSAEncryption
80:c6:95:91:5e:dd:e6:8a:c8:32:66:97:c6:8f:de:2d:1e:71:
36:c2:8a:13:96:97:9f:c1:33:f6:bc:6c:dd:bf:21:ed:71:d9:
a9:81:8a:06:d6:31:35:a9:7b:c0:d8:2f:bc:b7:53:54:4f:37:
13:fd:d7:24:a8:75:2d:8b:69:14:1d:45:88:77:ec:46:48:82:
e4:c7:0d:f3:f3:53:93:ad:fd:57:d9:a5:c9:68:4c:e8:6e:2c:
b0:93:68:91:6e:63:22:55:36:d5:d8:4f:1c:56:9f:30:8f:1c:
26:6c:4a:5f:8f:24:bc:9b:70:55:e4:32:a6:0b:cf:ab:bd:9c:
c3:2c:44:49:87:f0:22:c2:e1:ab:fe:28:90:09:d6:3b:24:c7:
a7:28:ea:e1:76:ae:c7:96:70:72:9c:2a:94:5b:51:08:cc:79:
c4:ef:da:ac:ca:7c:7c:ea:67:9f:51:f5:25:4f:eb:b6:f8:8c:
d0:c4:4a:96:29:51:c3:09:86:42:b1:b3:8a:7c:ca:76:4a:67:
67:a1:30:75:d4:3f:2d:ef:ea:60:6c:32:0f:76:e3:f7:2b:6e:
a0:c2:a7:63:e0:24:5a:53:7b:cc:86:39:52:43:63:db:1e:49:
e4:2f:7f:6d:cc:ee:da:a4:2d:7d:c1:df:10:73:7f:75:e4:ac:
70:4f:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:49 2025 by rpki-client