Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3234203d3e203237393332.roa
File: 3230302e35322e3134342e302f32302d3234203d3e203237393332.roa (raw, json)
Hash identifier: 2+Q8AAXBW1eufEqo0d3D/afnqHY3Kh6/gXE98bixPHY=
Subject key identifier: CA:28:E4:45:F9:05:0A:65:88:9F:0F:52:A8:BA:1E:89:D5:89:33:7B
Certificate issuer: /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial: 323E0BEC297D2A81F9E424ECCDE1617C9FCF3E35
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3234203d3e203237393332.roa
Signing time: Tue 04 Feb 2025 18:09:08 +0000
ROA not before: Tue 04 Feb 2025 18:04:08 +0000
ROA not after: Tue 03 Feb 2026 18:09:08 +0000
asID: 27932
IP address blocks: 200.52.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3e:0b:ec:29:7d:2a:81:f9:e4:24:ec:cd:e1:61:7c:9f:cf:3e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Validity
Not Before: Feb 4 18:04:08 2025 GMT
Not After : Feb 3 18:09:08 2026 GMT
Subject: CN=CA28E445F9050A65889F0F52A8BA1E89D589337B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:51:84:ae:24:0d:62:e0:35:51:20:8c:0f:
11:61:a2:b8:94:b4:f9:73:d5:80:ce:c6:42:21:12:
14:5f:12:8d:97:fe:a4:65:f2:a3:96:18:13:39:37:
b3:6c:94:d8:96:45:8a:91:13:0c:44:55:5d:06:45:
c7:0e:5e:47:33:65:a3:d9:16:f9:e8:73:4f:5d:1f:
0e:14:09:01:97:08:72:d6:0e:aa:34:20:5e:7e:21:
f4:67:6d:32:d8:47:67:05:a8:85:66:01:d1:fb:d0:
ac:b2:08:23:51:a1:d4:7a:e7:cd:ef:88:6e:a9:5d:
2e:93:80:48:af:57:ee:26:77:6a:c5:fc:a9:04:b8:
a6:07:0f:6e:e9:2b:6c:35:5b:00:76:7f:58:32:6d:
92:8e:16:69:a5:16:29:c1:15:f3:95:d6:90:f6:eb:
55:c4:5c:c6:3a:66:41:f6:0e:3b:b5:0c:74:20:4f:
c5:0e:de:74:9f:54:da:4d:6e:4f:bc:36:f5:58:9f:
d7:62:b1:a3:fe:26:3f:ce:2a:05:18:fd:48:be:5c:
8d:ed:2d:c6:48:47:33:70:e6:bb:05:8b:84:06:fb:
fb:2a:7b:20:50:36:4a:a8:ad:f5:48:f5:9b:26:b8:
b4:cd:22:46:c5:1c:4a:9c:f1:e6:56:34:35:96:87:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:28:E4:45:F9:05:0A:65:88:9F:0F:52:A8:BA:1E:89:D5:89:33:7B
X509v3 Authority Key Identifier:
keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3234203d3e203237393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.52.144.0/20
Signature Algorithm: sha256WithRSAEncryption
07:ce:95:40:47:0b:c5:71:c2:91:85:19:9c:d1:b3:83:2f:c5:
73:83:88:97:4f:5a:c8:af:ba:ae:66:08:dd:30:46:6b:12:3c:
1a:71:bb:d1:d4:8f:e6:34:c9:7f:ae:3f:15:05:45:98:b4:2f:
91:7e:e3:e9:3a:9f:d6:f6:ca:32:10:71:c8:40:27:8b:4a:a1:
57:6e:68:6a:f8:19:7b:94:d6:1b:7e:69:b9:07:16:e3:c5:f1:
56:43:26:38:57:08:c1:79:4e:0e:d4:e1:14:b2:ed:26:9c:9f:
ac:0c:a4:3c:6b:b1:9b:e0:19:6c:6d:7e:12:cd:ce:29:89:5f:
a3:de:dc:7e:28:28:b8:de:8d:32:3e:4a:ad:13:9d:45:e0:9e:
7f:be:1b:bc:3d:c3:91:7a:3e:65:26:de:da:42:d5:b8:45:69:
7b:e4:4e:fa:10:25:cc:e6:fc:a3:de:4a:cd:f8:df:6f:fb:09:
0b:4d:f5:87:52:60:e6:3c:b2:fd:04:33:79:99:00:be:56:fe:
51:81:6f:0f:54:13:b5:2c:3b:c7:31:e5:08:38:e0:39:46:c4:
73:da:4a:ab:a0:0c:7a:32:fb:52:d8:37:fc:c2:c0:f1:cc:93:
3d:f1:c8:9e:27:4e:7b:74:fd:e1:63:20:21:75:54:9c:b9:3f:
4a:01:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:49 2025 by rpki-client