Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3235302e302f32342d3234203d3e20323639383133.roa
File: 3230302e32392e3235302e302f32342d3234203d3e20323639383133.roa (raw, json)
Hash identifier: qSspzvU43mRFWrwQQrlTgIK67uhIL3FPWVhUFw7jIvQ=
Subject key identifier: 31:BA:FD:9D:83:DB:61:1F:66:7C:18:1A:67:36:68:EB:5A:CC:1D:03
Certificate issuer: /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial: 0AEEFA6F4184CFB795D07DB3B5E61A3C235B6051
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3235302e302f32342d3234203d3e20323639383133.roa
Signing time: Wed 04 Dec 2024 21:25:00 +0000
ROA not before: Wed 04 Dec 2024 21:20:00 +0000
ROA not after: Wed 03 Dec 2025 21:25:00 +0000
asID: 269813
IP address blocks: 200.29.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ee:fa:6f:41:84:cf:b7:95:d0:7d:b3:b5:e6:1a:3c:23:5b:60:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Validity
Not Before: Dec 4 21:20:00 2024 GMT
Not After : Dec 3 21:25:00 2025 GMT
Subject: CN=31BAFD9D83DB611F667C181A673668EB5ACC1D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:d9:4f:23:04:25:07:10:d3:df:2c:7f:5f:
31:85:bc:02:16:56:16:9f:c6:41:c3:8b:07:9f:d9:
37:b8:aa:71:e6:6c:cb:5a:2a:0b:34:82:74:7e:bf:
03:fd:42:77:18:59:55:9d:4f:4d:8e:89:17:a5:9c:
71:fe:2f:bd:39:6a:a2:a7:ad:ee:ab:56:7b:4b:88:
51:5b:af:99:87:3b:19:bd:75:2a:98:c4:9c:3c:8d:
63:6a:7d:d2:ce:80:a6:30:3f:7a:73:f6:9b:6e:2c:
40:ce:66:89:ea:2a:bd:e5:f3:41:96:4f:6f:e0:44:
a5:f9:a9:24:2b:64:1b:f5:8d:25:c9:bd:46:2d:a0:
df:08:be:24:a3:fa:9b:59:58:b8:28:6a:2b:20:3f:
dc:5a:2d:1b:54:a7:d2:16:99:d1:cb:21:09:5d:03:
7c:82:c2:36:4f:5a:10:db:6e:5d:23:55:5d:c5:b9:
a5:b8:43:15:a5:b7:6a:98:14:11:58:17:bd:22:de:
d9:bf:3a:ee:07:c3:a4:c3:cf:c4:c6:ba:7e:ea:c0:
0d:b6:81:c2:19:c1:0b:d9:7e:2e:c1:7e:70:1d:95:
f2:39:02:76:c3:4c:a1:a8:3f:2a:89:fc:8a:4c:d4:
f8:98:f6:ce:1a:f2:35:c4:db:f9:06:48:34:96:30:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:FD:9D:83:DB:61:1F:66:7C:18:1A:67:36:68:EB:5A:CC:1D:03
X509v3 Authority Key Identifier:
keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3235302e302f32342d3234203d3e20323639383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.250.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c0:07:e6:8f:5f:00:6b:69:8e:dd:b5:20:10:ca:13:09:9c:
a3:99:bc:ee:31:f7:ec:08:a3:4b:1d:99:26:3b:23:b8:1a:73:
40:82:bb:00:fa:bd:b9:0a:03:a8:d1:d8:a3:14:9b:9b:ea:0c:
e0:5e:23:9c:53:73:40:67:70:6c:80:01:b3:77:35:9e:40:f2:
c3:fb:78:86:06:04:a4:76:7f:44:58:e4:1e:04:94:5c:83:00:
7e:f1:e2:56:cb:f5:ca:5b:ff:aa:07:34:be:bb:1e:a0:49:2d:
47:60:d0:de:53:23:91:e9:4f:27:09:da:d8:48:0f:52:e8:bf:
67:71:fb:91:3e:38:6f:35:1e:29:60:26:44:9e:3c:41:ee:6b:
35:0a:71:0a:1e:87:b8:37:69:cf:f5:c1:95:df:d4:ab:f4:18:
9c:94:22:f6:3e:60:ce:79:c4:fc:75:3a:02:b3:d5:8e:9e:9f:
e3:03:88:ff:a2:7d:cf:54:9d:47:ab:8e:54:89:fb:03:37:5f:
23:dc:99:7d:c8:0e:07:fd:93:d1:c9:3d:d9:ba:73:20:80:41:
09:3b:8d:1d:b0:30:03:a7:a1:74:45:87:a4:21:e4:00:a6:c4:
0a:80:aa:ab:2a:ba:a2:33:a1:56:bc:2d:ef:8f:a6:df:af:25:
ed:36:01:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:01:50 2025 by rpki-client