Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203238303031.roa
File: 3230302e372e38362e302f32342d3234203d3e203238303031.roa (raw, json)
Hash identifier: LODXJklrWjniK3aFYqxAL2O8GLh7Zms+Ot57MVWqFu8=
Subject key identifier: 43:C6:D6:E5:55:34:DF:50:4E:F1:52:C2:73:8E:5C:3C:61:B7:EA:47
Certificate issuer: /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial: 4CD0BBB7C8735CB3AFCDCB6F337057986F2F0D29
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203238303031.roa
Signing time: Tue 04 Feb 2025 18:19:36 +0000
ROA not before: Tue 04 Feb 2025 18:14:36 +0000
ROA not after: Tue 03 Feb 2026 18:19:36 +0000
asID: 28001
IP address blocks: 200.7.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d0:bb:b7:c8:73:5c:b3:af:cd:cb:6f:33:70:57:98:6f:2f:0d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Validity
Not Before: Feb 4 18:14:36 2025 GMT
Not After : Feb 3 18:19:36 2026 GMT
Subject: CN=43C6D6E55534DF504EF152C2738E5C3C61B7EA47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:19:35:37:76:72:2b:e5:83:00:78:ee:b9:e8:
ff:8e:27:4d:bd:24:5d:9e:c6:c1:a5:e5:4d:7b:ea:
c6:13:21:3e:db:57:9f:57:9f:64:16:81:df:e8:87:
88:a3:22:16:46:57:bc:1c:80:73:f1:31:46:ff:35:
54:a8:c8:d1:46:35:6e:1f:83:32:d1:b7:aa:2a:e5:
74:b9:02:c7:17:03:0c:18:07:73:6c:09:fe:9d:d1:
a1:cd:3f:9b:0a:6b:34:fe:38:b3:7f:02:58:47:4e:
60:c5:db:99:09:95:23:52:a0:80:04:7c:48:bb:47:
39:a4:8a:3e:6d:30:9c:bb:2c:a8:69:8f:2a:fa:2c:
b4:13:b9:a9:97:be:ad:14:5f:93:22:10:87:b7:0a:
38:20:36:55:95:1b:73:f1:c6:d8:75:dd:a6:42:6d:
e7:fa:48:4d:fb:ca:4a:de:e4:eb:e3:0f:69:28:a1:
9a:a9:e4:cd:af:c1:33:75:71:85:ec:f9:2f:03:3e:
38:2f:7c:55:7c:60:f9:e7:ca:2f:d4:a4:1b:e3:f5:
40:48:ac:6b:35:a8:45:ac:c4:c5:9e:af:a6:75:7e:
d7:4e:19:9e:12:f3:87:a1:3a:a8:22:61:75:bf:9a:
ca:0e:02:38:94:7d:f5:5b:9f:43:5d:ce:34:34:d9:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:D6:E5:55:34:DF:50:4E:F1:52:C2:73:8E:5C:3C:61:B7:EA:47
X509v3 Authority Key Identifier:
keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203238303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.86.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1f:45:bb:cd:0f:a9:7f:75:bb:96:dc:06:c2:52:23:b9:84:
4f:ab:de:e7:da:14:c5:66:85:dc:ec:20:ec:fa:fa:90:e4:a6:
31:6e:e3:62:0e:ea:29:41:2a:9f:ae:7e:5e:a4:5d:af:7f:1e:
03:1f:94:91:20:60:13:ba:a8:98:07:ca:6c:d5:25:39:21:33:
b2:94:4f:7b:f2:13:ab:b1:66:a6:2d:8e:cd:32:c0:d1:de:e9:
77:74:72:02:ee:46:6e:f9:57:21:6d:53:30:9a:bf:cd:6c:b4:
da:0b:c0:c3:cd:3c:95:d6:be:e1:fd:d4:6e:fc:76:d6:71:6a:
1c:bc:f3:8e:07:2a:e5:20:c5:7a:ea:2f:0b:6f:90:f8:5a:40:
27:74:2b:4d:d7:f8:10:2f:df:2b:2d:c4:bd:4b:c6:31:75:f2:
bb:3e:2f:c0:7c:f6:02:69:33:25:f5:26:1f:82:d2:d1:61:f4:
0a:5f:2d:f6:30:b2:fd:80:ee:b7:0e:62:85:1e:fd:2c:62:8b:
c5:0e:cf:f6:0e:18:b2:2a:4c:10:d0:11:9d:a8:1f:1d:c1:f7:
7a:05:ad:b1:92:d1:95:96:a9:c6:c0:e6:b9:d6:c0:77:2d:cb:
ef:d6:d6:bd:20:fa:67:b4:7c:dc:dd:12:e7:35:79:74:7c:a6:
7f:78:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:04 2025 by rpki-client