Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/3230302e38352e3138342e302f32312d3234203d3e203238303337.roa
File: 3230302e38352e3138342e302f32312d3234203d3e203238303337.roa (raw, json)
Hash identifier: QnTgwo3Rj5x845w23Fgpr67Im+ZaDHhuxy4e4+qFsGY=
Subject key identifier: 65:05:D3:EB:90:87:D2:E5:BA:0F:9F:37:34:96:F8:8E:FC:40:F3:3F
Certificate issuer: /CN=336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A
Certificate serial: 1C3D733AFC0670A287656B4FFD348B05D08024A0
Authority key identifier: 33:6D:FC:57:AB:D9:32:C2:AB:D3:7A:88:DA:1E:1B:BC:DD:EC:40:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/3230302e38352e3138342e302f32312d3234203d3e203238303337.roa
Signing time: Tue 04 Feb 2025 18:00:14 +0000
ROA not before: Tue 04 Feb 2025 17:55:14 +0000
ROA not after: Tue 03 Feb 2026 18:00:14 +0000
asID: 28037
IP address blocks: 200.85.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3d:73:3a:fc:06:70:a2:87:65:6b:4f:fd:34:8b:05:d0:80:24:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A
Validity
Not Before: Feb 4 17:55:14 2025 GMT
Not After : Feb 3 18:00:14 2026 GMT
Subject: CN=6505D3EB9087D2E5BA0F9F373496F88EFC40F33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:80:a6:40:1a:0b:5f:a8:e1:f6:3b:15:a7:
fc:df:99:7a:91:11:f5:93:2f:54:a9:a9:c0:64:bd:
21:1a:58:f1:4d:f8:cb:f4:de:9c:f8:c3:f1:d4:f6:
b0:e1:24:05:9a:43:6a:2e:c1:e9:3c:5b:dd:a7:23:
13:36:c6:d3:09:ff:5e:1e:35:98:c4:f8:1c:a2:c0:
44:72:89:12:71:1d:aa:af:17:d3:00:17:94:30:e2:
54:d5:c8:4c:e7:81:d3:a1:dc:bd:03:97:07:a8:ec:
1c:d1:09:11:cc:ad:25:32:d3:c5:47:bd:48:dd:dc:
70:d4:b9:5e:dd:45:83:c9:e8:73:fd:03:36:4a:af:
74:00:12:c1:1a:4d:68:42:9a:1b:3e:c5:f5:85:5b:
ff:99:ea:8f:58:c5:c2:d7:01:8f:06:e7:74:ab:47:
6b:c2:78:3e:99:20:1d:ae:22:49:d3:49:28:a7:3c:
e9:f9:ac:ca:d5:da:92:ba:0e:2f:b0:e9:9a:11:bd:
f1:a8:f1:b1:b0:fe:57:5e:40:09:6b:00:ec:d4:7a:
ff:c8:45:6e:bb:79:ac:91:5d:35:9d:0f:fd:c1:b8:
34:64:f6:c2:82:b1:97:dd:9e:04:2b:1a:00:6b:7b:
8b:5e:6b:c2:aa:12:e6:32:c7:4e:6e:01:51:f0:7f:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:05:D3:EB:90:87:D2:E5:BA:0F:9F:37:34:96:F8:8E:FC:40:F3:3F
X509v3 Authority Key Identifier:
keyid:33:6D:FC:57:AB:D9:32:C2:AB:D3:7A:88:DA:1E:1B:BC:DD:EC:40:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/336DFC57ABD932C2ABD37A88DA1E1BBCDDEC407A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59D3AD81156AA2DB726A95A46B3EDAF97DE464119C7588E0CABC62676AD1B9AD/0/3230302e38352e3138342e302f32312d3234203d3e203238303337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.184.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:8b:bc:18:cc:c1:5e:11:53:b5:79:70:3b:1e:c6:e4:f1:73:
b7:27:8b:1f:65:42:e4:a4:9c:5c:36:d5:2f:38:97:30:35:5e:
07:9d:45:b4:89:8c:8a:38:59:d2:88:ad:88:9f:77:59:eb:3d:
53:0c:2c:d3:a9:48:64:7a:91:94:c8:eb:90:e6:08:a8:3c:d2:
17:d9:07:61:e0:b3:6f:ea:a2:c7:67:8e:4b:cf:4e:2c:1c:fc:
d4:27:62:3b:51:dd:15:00:ad:b0:e2:25:cc:8d:d2:7c:97:26:
f8:44:cd:31:74:71:04:be:39:d7:0a:01:1f:c7:ae:c0:67:14:
41:c2:4b:44:19:02:4f:1f:92:70:5b:bd:4a:d7:3b:6e:86:3d:
37:d9:ac:98:8a:9f:c4:1b:44:ec:a5:b2:93:a8:9e:1a:04:2b:
55:81:26:19:d9:24:52:22:df:3e:07:03:9d:9c:0e:02:11:ae:
84:ca:ff:55:1b:34:20:cd:11:2d:9c:b6:d4:5a:b7:8f:d9:d8:
cd:14:2d:41:4f:3f:ac:b8:d0:62:d5:0f:8c:32:cd:93:3d:a0:
e5:db:81:18:90:62:3e:f7:e1:42:14:76:7b:c7:12:5f:74:00:
1d:a5:4f:ed:96:11:13:1c:43:09:34:82:af:5a:74:a3:60:f1:
bf:72:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:07 2025 by rpki-client