Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
File: 3230302e372e3132382e302f32302d3234203d3e203237373730.roa (raw, json)
Hash identifier: e7fwKCAwrJBOARxXUFeN2hPCUL05RIozWzYfyHXA7Ss=
Subject key identifier: 4F:5B:A4:78:52:4C:F5:36:63:D8:3F:74:77:AC:6B:0C:96:82:0F:70
Certificate issuer: /CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Certificate serial: 18B47CF983149195AD70D47AC83593E3A4D6C0B7
Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
Signing time: Tue 04 Feb 2025 18:47:18 +0000
ROA not before: Tue 04 Feb 2025 18:42:18 +0000
ROA not after: Tue 03 Feb 2026 18:47:18 +0000
asID: 27770
IP address blocks: 200.7.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b4:7c:f9:83:14:91:95:ad:70:d4:7a:c8:35:93:e3:a4:d6:c0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Validity
Not Before: Feb 4 18:42:18 2025 GMT
Not After : Feb 3 18:47:18 2026 GMT
Subject: CN=4F5BA478524CF53663D83F7477AC6B0C96820F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:f6:b3:3f:fc:51:22:63:7c:0a:86:c4:57:
83:cd:f6:d8:5a:00:91:14:3a:2b:d6:1c:1c:71:f1:
90:e4:c8:f3:a9:23:b6:9f:7d:be:22:f4:e9:37:99:
09:ba:d2:91:5b:17:6f:4c:db:39:3e:7c:f7:a4:4f:
4e:57:d7:d4:96:b0:cc:b5:9b:ef:85:fc:6f:1d:76:
a9:20:b3:13:34:7e:3b:c7:5b:20:d2:9d:6d:74:68:
e8:46:25:f3:43:5f:44:4e:2e:32:c9:17:fc:f5:18:
af:1c:e6:e0:c0:aa:e5:2a:5d:4c:47:ee:6c:23:1e:
80:2b:ef:26:5a:c3:61:64:d3:c8:2f:1d:65:ac:9a:
18:f4:91:6d:fd:ed:d5:4d:78:79:96:97:fe:00:0b:
66:13:97:b2:6f:fc:a1:b3:33:df:3a:0a:27:00:2a:
a3:d7:ad:91:7a:47:06:14:22:90:08:3b:c9:9d:5f:
00:2f:6b:05:09:46:98:a0:9a:db:83:f3:41:99:25:
a5:e4:92:7e:ae:85:57:90:11:ad:af:35:79:83:71:
85:f6:40:d3:71:41:1d:e5:ca:ff:e5:56:e3:e3:e6:
eb:c5:fb:2c:46:68:af:83:78:70:62:46:e7:d7:af:
b3:00:6b:ef:cf:eb:7d:fc:08:ca:64:b3:a7:e8:86:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5B:A4:78:52:4C:F5:36:63:D8:3F:74:77:AC:6B:0C:96:82:0F:70
X509v3 Authority Key Identifier:
keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.128.0/20
Signature Algorithm: sha256WithRSAEncryption
94:28:e2:c2:4b:6b:1f:85:ba:b6:3e:97:d1:54:aa:30:d7:61:
52:02:27:9a:3b:c2:00:28:f0:0a:0a:61:90:b9:64:ce:c6:bd:
f6:83:fc:4f:59:cd:2b:2b:b5:fb:7a:60:84:52:30:8a:fe:54:
4e:95:f1:bc:be:74:da:e0:e2:95:85:fd:79:e7:75:06:9f:d6:
5b:a9:18:77:f3:95:8c:19:62:e6:40:b6:00:7e:66:05:29:54:
04:1a:44:14:c0:a5:fe:78:15:82:19:9e:50:49:88:f3:fa:fd:
c8:19:53:3b:08:46:35:bb:2a:8e:3e:c3:32:38:18:ce:a0:77:
19:0c:a9:4b:c8:9b:47:82:ef:bf:e2:26:85:22:1a:83:36:11:
0f:c1:4a:87:0b:61:0d:d8:61:9c:3b:14:dd:6f:20:7c:7a:ac:
57:30:4c:94:df:b1:e3:3c:0f:8f:70:21:4d:28:87:14:d8:de:
e2:be:88:88:d9:0a:ee:cb:cf:7c:c5:cb:5a:0d:a7:34:a8:ec:
31:5b:59:ef:0a:03:de:10:8f:70:a6:cb:06:70:79:29:6d:e7:
54:e3:df:17:31:e1:0c:d4:e1:e5:3b:02:17:9e:a2:ce:b8:62:
c1:f8:0d:39:d7:50:43:c7:99:61:a7:b0:ae:06:9a:29:51:ff:
5f:9d:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:50 2025 by rpki-client