Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e31302e36342e302f31392d3234203d3e2036313437.roa
File: 3230302e31302e36342e302f31392d3234203d3e2036313437.roa (raw, json)
Hash identifier: YpC1ucELrEgL1BwjRbs7+vt/FWTfSW1sEti8Sn/Y1l0=
Subject key identifier: 43:0A:E6:A1:B1:B0:9B:E2:0D:17:B3:84:F1:BC:11:50:49:E9:D7:BF
Certificate issuer: /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial: 06582C68ED37E4B9BFD40CC30F23704BDCC2916B
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e31302e36342e302f31392d3234203d3e2036313437.roa
Signing time: Tue 04 Feb 2025 20:05:13 +0000
ROA not before: Tue 04 Feb 2025 20:00:13 +0000
ROA not after: Tue 03 Feb 2026 20:05:13 +0000
asID: 6147
IP address blocks: 200.10.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:58:2c:68:ed:37:e4:b9:bf:d4:0c:c3:0f:23:70:4b:dc:c2:91:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Validity
Not Before: Feb 4 20:00:13 2025 GMT
Not After : Feb 3 20:05:13 2026 GMT
Subject: CN=430AE6A1B1B09BE20D17B384F1BC115049E9D7BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:1e:be:c4:5a:54:48:eb:6c:ae:2f:12:17:
d9:20:9b:b6:7d:88:1c:93:17:96:31:df:00:01:3e:
bb:19:4e:c8:d5:8c:6d:61:0d:0e:86:54:3c:11:66:
da:6d:43:3f:ec:34:64:0e:00:25:9c:45:85:8a:ec:
45:da:40:0c:82:70:bd:a4:91:b1:87:6e:09:8e:b6:
d0:5d:53:fe:cb:83:c6:5e:f3:a2:bf:0b:ff:2e:be:
20:a8:9b:cf:92:a4:11:9f:81:4f:0b:e6:06:a7:c7:
48:48:e2:23:0a:79:cd:de:39:69:1d:61:cd:b0:cc:
39:7d:e6:43:59:da:32:bc:4d:a9:a3:26:8a:97:c4:
f4:7e:5d:92:ce:5d:19:37:4e:49:44:9d:32:ee:2d:
c1:5c:3e:a5:57:8d:1e:e7:2f:e5:06:a6:08:c5:c8:
04:4a:4b:bd:5f:f7:1d:41:60:37:04:e8:48:df:c5:
7f:83:34:8f:ac:0d:aa:d0:26:31:a5:d2:c5:41:64:
ad:61:ac:65:68:6b:0b:43:a8:fe:8f:25:10:dc:6b:
3f:f5:c3:05:a6:f5:b6:be:e0:0c:63:f2:93:f3:af:
1f:9a:65:ff:a6:d0:30:98:46:c0:50:00:ae:82:6d:
69:de:ad:18:63:77:21:e3:38:b2:c8:ad:e3:36:12:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0A:E6:A1:B1:B0:9B:E2:0D:17:B3:84:F1:BC:11:50:49:E9:D7:BF
X509v3 Authority Key Identifier:
keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e31302e36342e302f31392d3234203d3e2036313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:60:50:fb:cf:0d:f9:0f:f1:c4:a2:60:18:de:15:92:6c:25:
16:2c:75:17:a4:0c:5d:bc:e1:df:5b:16:a9:e0:49:46:fe:5a:
56:ce:60:13:8e:c5:5e:7f:e1:cf:3f:23:ba:b3:a9:45:52:a3:
d8:74:8c:9d:a0:e2:fa:00:9c:02:9d:e6:98:e6:a1:66:aa:cf:
e7:05:1d:46:4b:3c:63:13:8a:d2:7c:0e:77:1e:76:2e:35:00:
63:ec:be:33:8b:11:83:c7:45:4d:d6:fc:b3:72:bf:44:04:ca:
e0:dd:61:6e:5b:10:d8:54:60:b4:26:aa:e3:9c:86:e2:3e:1b:
0d:26:06:59:b7:a3:8a:fa:4c:66:2d:30:6d:d9:11:37:bc:5f:
91:a6:bf:a7:a5:9d:7c:46:3c:52:80:75:be:a6:75:ef:7a:f3:
46:2a:35:96:b6:56:a0:e5:cd:04:95:a3:fa:f3:dc:c3:12:f7:
5a:8f:fc:35:e7:9c:69:da:2b:42:ca:be:e9:40:a0:3a:e2:73:
45:a5:a0:81:f1:58:60:bd:3e:f8:76:a9:e3:23:84:09:15:d3:
e2:d0:f4:4c:fd:ea:f7:50:03:5f:8d:08:ff:43:1f:09:72:8b:
44:77:0c:3f:14:54:a7:cc:eb:99:8f:8b:33:1d:3b:cf:b9:15:
1a:df:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:56 2025 by rpki-client