Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/72f47ae66875785a87ec7a3295b8f1363d72a19d.roa
File: 72f47ae66875785a87ec7a3295b8f1363d72a19d.roa (raw, json)
Hash identifier: cb+4Lev7E9ynUHZOFgOKv5JwvAuW9WYyiGRgjoCAnsI=
Subject key identifier: ED:DC:CC:59:B7:87:00:C2:2D:C9:FB:D1:3F:F8:F4:C3:6D:08:9A:15
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DA870
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/72f47ae66875785a87ec7a3295b8f1363d72a19d.roa
Signing time: Thu 07 Dec 2023 12:42:17 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 265749
IP address blocks: 200.45.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992240 (0x2da870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=72f47ae66875785a87ec7a3295b8f1363d72a19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:30:bc:a4:ab:4f:14:83:97:3d:e1:64:53:
91:d0:c8:ee:06:e3:71:b1:4d:8f:bd:69:7a:02:40:
60:01:1c:d0:34:f4:25:f8:33:2a:d4:fc:a6:cf:6b:
72:e9:27:45:47:99:9d:2d:aa:7f:5d:74:2e:b3:a7:
ab:d6:f6:09:2d:d6:26:56:50:8a:8b:c8:5b:22:6f:
f7:80:f2:24:12:3b:54:81:dc:dd:21:38:6e:b0:36:
a8:c8:09:f9:5f:2c:2d:58:9b:07:28:4d:cc:86:78:
f6:bc:ed:44:c4:64:a1:9b:3b:38:ba:ab:f8:0b:e1:
77:4f:eb:8a:5d:46:04:d7:87:cd:71:89:64:28:64:
e0:ef:28:b4:16:13:3b:b6:83:f3:82:d6:c0:a8:40:
d3:7c:a7:cf:39:6f:5e:fc:02:60:e4:f7:b5:42:af:
ac:2c:3f:ba:03:35:7c:7b:af:13:c6:ed:57:21:87:
64:a0:30:94:ec:ca:7d:dd:85:38:c4:9f:4d:fb:8c:
36:3c:c1:75:7b:09:54:70:a0:d4:fe:2f:5f:bb:2b:
4c:41:9c:ce:ca:a0:72:b8:e6:e6:2b:e4:43:af:dc:
b7:15:33:23:ae:cf:be:9b:7f:18:f4:5d:41:7c:ce:
40:e8:20:b3:6f:4c:e0:f5:fe:6e:42:65:10:16:e4:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DC:CC:59:B7:87:00:C2:2D:C9:FB:D1:3F:F8:F4:C3:6D:08:9A:15
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/72f47ae66875785a87ec7a3295b8f1363d72a19d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.45.223.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d0:a5:a1:70:5e:7c:fa:de:5d:90:05:e4:6c:83:04:11:f8:
84:bc:02:8b:73:4f:5c:89:76:67:ac:5d:b1:d3:16:db:1c:36:
d7:c6:3e:ce:91:17:62:a7:e2:c1:e2:a3:5a:f8:d1:73:b0:54:
0a:af:2a:38:70:87:21:b8:c8:85:9b:8b:54:70:b2:9c:5f:a5:
71:1a:70:52:7e:5a:c3:dd:0a:9f:9b:97:b8:44:b1:80:71:d6:
b1:5c:7c:8a:16:e7:04:f2:92:4e:6b:42:2e:86:c1:50:1e:d7:
0a:3d:5e:43:47:98:ce:46:64:81:5a:7f:18:a0:8a:83:85:73:
fd:0b:65:5d:92:5e:b5:e8:20:69:d6:be:7f:f2:59:3e:75:a4:
a6:5f:34:b8:25:c5:7a:22:81:19:d2:bc:76:cc:03:0a:2e:1b:
6e:f4:05:f5:2c:aa:05:82:b8:79:db:0c:f9:84:42:41:25:c0:
d3:1a:67:5e:5a:4a:86:6e:c0:43:27:57:1b:fb:61:4f:dc:89:
86:c7:c6:7d:8b:25:db:93:e7:7f:d2:d6:3e:02:b4:28:51:10:
8f:fb:eb:f7:1c:e8:e1:80:46:4a:6b:0d:ba:19:c2:39:26:ab:
ca:ef:42:39:11:eb:b7:ac:18:20:fe:0d:c9:db:88:e3:bc:87:
53:61:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:27:31 2025 by rpki-client