Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa
File: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (raw, json)
Hash identifier: +JLSd5uFHqiUCm06ecF1x9vzbqFut/G4zYIvoGDlY28=
Subject key identifier: F7:BA:96:37:49:B9:D4:28:51:30:B2:CB:CF:28:12:BF:CC:F7:D9:58
Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
Certificate serial: 2B76C83EB0FAE43E0213C155469894C96E3C431E
Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa
Signing time: Tue 04 Feb 2025 18:46:55 +0000
ROA not before: Tue 04 Feb 2025 18:41:55 +0000
ROA not after: Tue 03 Feb 2026 18:46:55 +0000
asID: 270078
IP address blocks: 200.71.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:76:c8:3e:b0:fa:e4:3e:02:13:c1:55:46:98:94:c9:6e:3c:43:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
Validity
Not Before: Feb 4 18:41:55 2025 GMT
Not After : Feb 3 18:46:55 2026 GMT
Subject: CN=F7BA963749B9D4285130B2CBCF2812BFCCF7D958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:49:09:92:45:6a:e7:2b:f7:74:2d:03:25:b5:
e1:4b:5e:c3:7d:7d:94:65:5f:71:e6:46:35:cc:b9:
6a:c5:8b:ab:d3:de:29:9b:0d:e2:f5:8d:29:fa:2f:
de:88:b4:49:55:cd:2b:c4:55:86:f0:1f:f9:85:83:
54:90:2f:16:ce:d5:6e:af:49:0c:72:c3:01:ee:89:
f5:14:f3:86:9d:88:bb:b2:ca:4c:ef:b4:4b:0b:ce:
fd:43:f6:55:87:8c:da:82:b9:b6:16:d5:6c:f6:71:
84:70:9d:fd:11:f0:29:71:0e:26:01:fe:cb:6a:db:
6a:54:cb:4d:d1:f1:57:9c:00:53:f0:dc:8a:d8:45:
f1:b2:7d:bc:86:fd:ee:97:da:28:a0:1b:01:47:c8:
78:70:b1:d6:4a:03:d6:cf:58:ff:2e:56:f8:db:a5:
dd:ee:d6:0c:7f:c7:c1:27:6c:2d:65:83:6d:d0:ab:
28:91:1b:14:c5:2a:15:cc:a1:eb:28:2c:3b:db:86:
81:99:85:fe:eb:85:55:c7:7f:14:21:45:5c:5c:8d:
09:59:29:b5:69:cb:58:91:cd:67:d5:bb:9f:90:d9:
6f:bd:b6:55:6c:67:87:17:55:38:e1:86:bc:cc:04:
19:7a:4d:18:5f:3a:4e:81:f9:cd:3d:db:dc:40:72:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BA:96:37:49:B9:D4:28:51:30:B2:CB:CF:28:12:BF:CC:F7:D9:58
X509v3 Authority Key Identifier:
keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.80.0/23
Signature Algorithm: sha256WithRSAEncryption
28:32:9c:ca:bf:b7:2d:94:9e:79:04:79:4f:f6:2d:39:b5:52:
33:e9:7b:d3:79:c6:42:f9:c2:6d:81:c1:9f:f5:0a:fd:f6:52:
35:9d:0f:02:b8:0f:81:6f:54:af:9a:bc:7c:6c:e5:32:d4:a7:
ad:c3:19:25:0a:0c:1c:db:75:3d:c8:4f:57:b1:de:17:a4:70:
83:81:7e:74:16:0f:07:43:c1:38:1d:2f:e7:d4:01:0c:ff:dc:
5f:80:24:00:10:a5:69:b1:0e:45:1a:80:4e:67:12:40:83:c9:
f7:28:4e:2e:91:30:30:df:32:2e:b2:1a:3e:dd:81:5b:ac:71:
d5:02:07:4b:bc:cf:f1:a1:fb:e9:c5:66:c6:7a:f3:3c:2e:25:
ff:5a:e6:b6:d9:a6:86:6c:0e:26:0e:a3:ef:1c:0b:82:c2:c7:
47:1e:b5:c2:18:86:20:8b:3e:9d:5a:fc:85:bf:7b:90:14:29:
d1:36:34:dd:3b:5d:fe:fa:7b:b3:93:e1:32:12:32:dd:2e:6b:
42:ea:76:be:90:b5:e8:4c:63:11:d1:5e:1c:a8:ef:b3:b5:5d:
34:15:67:3d:25:fe:4f:38:fd:15:01:e0:f6:41:4d:97:60:80:
f1:30:9b:44:de:ad:d3:31:30:64:98:45:6c:ff:7c:f4:ef:eb:
85:79:45:a8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUK3bIPrD65D4CE8FVRpiUyW48Qx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy
QzI1QThBRjAeFw0yNTAyMDQxODQxNTVaFw0yNjAyMDMxODQ2NTVaMDMxMTAvBgNV
BAMTKEY3QkE5NjM3NDlCOUQ0Mjg1MTMwQjJDQkNGMjgxMkJGQ0NGN0Q5NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlSQmSRWrnK/d0LQMlteFLXsN9
fZRlX3HmRjXMuWrFi6vT3imbDeL1jSn6L96ItElVzSvEVYbwH/mFg1SQLxbO1W6v
SQxywwHuifUU84adiLuyykzvtEsLzv1D9lWHjNqCubYW1Wz2cYRwnf0R8ClxDiYB
/stq22pUy03R8VecAFPw3IrYRfGyfbyG/e6X2iigGwFHyHhwsdZKA9bPWP8uVvjb
pd3u1gx/x8EnbC1lg23QqyiRGxTFKhXMoesoLDvbhoGZhf7rhVXHfxQhRVxcjQlZ
KbVpy1iRzWfVu5+Q2W+9tlVsZ4cXVTjhhrzMBBl6TRhfOk6B+c0929xAcokfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU97qWN0m51ChRMLLLzygSv8z32VgwHwYDVR0j
BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5
QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5
RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw
RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC
QUM5NTJGNUUwODNERURFMDAxMTAxMS8wLzMyMzAzMDJlMzczMTJlMzgzMDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAchHUDAN
BgkqhkiG9w0BAQsFAAOCAQEAKDKcyr+3LZSeeQR5T/YtObVSM+l703nGQvnCbYHB
n/UK/fZSNZ0PArgPgW9Ur5q8fGzlMtSnrcMZJQoMHNt1PchPV7HeF6Rwg4F+dBYP
B0PBOB0v59QBDP/cX4AkABClabEORRqATmcSQIPJ9yhOLpEwMN8yLrIaPt2BW6xx
1QIHS7zP8aH76cVmxnrzPC4l/1rmttmmhmwOJg6j7xwLgsLHRx61whiGIIs+nVr8
hb97kBQp0TY03Ttd/vp7s5PhMhIy3S5rQup2vpC16ExjEdFeHKjvs7VdNBVnPSX+
Tzj9FQHg9kFNl2CA8TCbRN6t0zEwZJhFbP989O/rhXlFqA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:45 2025 by rpki-client