Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3230302e372e3134382e302f32322d3234203d3e203237373735.roa
File: 3230302e372e3134382e302f32322d3234203d3e203237373735.roa (raw, json)
Hash identifier: 23LXy+vBSjeU2AMcMqIN7ggze3M7KkySakY3ilZ+HQ8=
Subject key identifier: 74:F8:EF:92:FD:09:74:B6:B5:7D:57:38:3F:30:1D:66:8E:5E:EB:5A
Certificate issuer: /CN=319D62645871D3B24C33AF24E8F1C30794A59476
Certificate serial: 44170BB0F2B794A20A83B1DD633BC1326BBDD1BA
Authority key identifier: 31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3230302e372e3134382e302f32322d3234203d3e203237373735.roa
Signing time: Tue 04 Feb 2025 18:07:00 +0000
ROA not before: Tue 04 Feb 2025 18:02:00 +0000
ROA not after: Tue 03 Feb 2026 18:07:00 +0000
asID: 27775
IP address blocks: 200.7.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:17:0b:b0:f2:b7:94:a2:0a:83:b1:dd:63:3b:c1:32:6b:bd:d1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319D62645871D3B24C33AF24E8F1C30794A59476
Validity
Not Before: Feb 4 18:02:00 2025 GMT
Not After : Feb 3 18:07:00 2026 GMT
Subject: CN=74F8EF92FD0974B6B57D57383F301D668E5EEB5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:3a:4c:72:e0:6b:27:07:78:f3:ee:87:ec:
dd:17:d8:28:0b:5e:36:dc:e0:db:40:fd:9d:b6:53:
15:3e:d5:13:60:10:90:9c:73:35:08:4d:38:b8:40:
c2:2e:f9:c6:ea:16:fc:d7:59:af:a4:53:83:5d:2f:
1d:6e:c6:97:b6:9d:89:46:99:ff:c8:22:86:48:e8:
47:1b:a6:db:ca:9b:28:e2:f1:5f:88:53:8a:b3:18:
f5:45:f2:5d:7a:1f:70:b2:fe:fc:fb:8b:d8:73:4b:
3e:22:d7:4a:2c:70:76:3e:ef:a5:cc:5b:aa:de:a3:
1a:50:74:be:aa:74:73:f1:4c:74:40:a0:bb:23:ea:
ff:76:ee:13:cc:12:93:93:a1:69:47:c4:09:ea:a6:
d6:56:19:4a:23:96:63:73:bb:d5:93:e0:5b:88:65:
4c:16:54:61:bf:9b:b8:c4:0d:56:4d:cb:e1:75:63:
d1:f0:ac:bd:11:88:67:dd:78:24:fd:45:3f:67:b1:
e4:bf:ca:5d:e3:ad:11:a3:1f:bf:35:bb:41:b6:5a:
02:eb:06:68:e0:47:af:f2:59:f9:4b:1b:c2:d6:0d:
32:35:df:50:21:15:c3:7e:ed:83:66:8c:2d:55:6e:
51:94:a2:7c:e9:8d:04:63:59:7a:44:2a:a9:65:60:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F8:EF:92:FD:09:74:B6:B5:7D:57:38:3F:30:1D:66:8E:5E:EB:5A
X509v3 Authority Key Identifier:
keyid:31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/3230302e372e3134382e302f32322d3234203d3e203237373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.148.0/22
Signature Algorithm: sha256WithRSAEncryption
16:ad:a4:52:68:8d:9e:2b:cc:e5:ca:b6:a4:f2:6d:6d:df:39:
1f:c2:b7:f2:f0:d3:25:7c:0d:f6:41:75:f4:8d:17:48:22:8d:
15:e9:b5:66:9d:e1:13:e5:4b:53:00:b5:27:48:4c:6d:3a:9c:
73:9d:d3:1b:fe:ad:9e:ee:58:26:f0:75:57:29:08:94:13:42:
1f:ca:de:57:29:4c:69:0b:ab:2f:c4:ec:84:59:5c:ea:e7:0f:
12:96:d6:ca:da:8f:86:a5:e4:ed:47:31:51:4b:af:71:af:4f:
48:ba:7e:36:93:9c:70:72:0a:27:26:30:87:a3:d8:d7:56:5b:
1a:fe:5e:4f:56:b6:74:25:45:58:60:e8:6e:d7:36:6b:a7:f2:
82:b5:82:0c:86:51:5b:b3:72:34:a8:57:9b:a8:54:e2:20:02:
fc:d0:a6:eb:a4:3e:e6:3c:3e:77:33:26:d0:e2:95:36:a9:2b:
25:31:f2:9a:20:90:01:e1:ba:b0:b0:d2:9a:ee:2e:89:d4:47:
a4:e1:3e:cf:db:a9:1b:2d:26:c3:a8:ea:3d:e3:9f:a3:91:d7:
16:b8:0f:9c:d0:1b:f9:01:e5:b2:6b:cb:c8:95:86:10:a0:0a:
da:05:35:33:f5:45:0a:91:a5:25:7d:f0:30:8b:88:38:22:47:
8a:94:e8:4b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURBcLsPK3lKIKg7HdYzvBMmu90bowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RDYyNjQ1ODcxRDNCMjRDMzNBRjI0RThGMUMzMDc5
NEE1OTQ3NjAeFw0yNTAyMDQxODAyMDBaFw0yNjAyMDMxODA3MDBaMDMxMTAvBgNV
BAMTKDc0RjhFRjkyRkQwOTc0QjZCNTdENTczODNGMzAxRDY2OEU1RUVCNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7jpMcuBrJwd48+6H7N0X2CgL
Xjbc4NtA/Z22UxU+1RNgEJCcczUITTi4QMIu+cbqFvzXWa+kU4NdLx1uxpe2nYlG
mf/IIoZI6EcbptvKmyji8V+IU4qzGPVF8l16H3Cy/vz7i9hzSz4i10oscHY+76XM
W6reoxpQdL6qdHPxTHRAoLsj6v927hPMEpOToWlHxAnqptZWGUojlmNzu9WT4FuI
ZUwWVGG/m7jEDVZNy+F1Y9HwrL0RiGfdeCT9RT9nseS/yl3jrRGjH781u0G2WgLr
BmjgR6/yWflLG8LWDTI131AhFcN+7YNmjC1VblGUonzpjQRjWXpEKqllYKM/AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUdPjvkv0JdLa1fVc4PzAdZo5e61owHwYDVR0j
BBgwFoAUMZ1iZFhx07JMM68k6PHDB5SllHYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MzRCODRFRDM2RDM5N0QxQ0NCRTE0RjA4Mzk1MzkzMEM4
QzIwOTc0RjJGRTg2M0FBREVERDhGNTEzNDY5NEMxLzAvMzE5RDYyNjQ1ODcxRDNC
MjRDMzNBRjI0RThGMUMzMDc5NEE1OTQ3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTlENjI2NDU4NzFEM0IyNEMz
M0FGMjRFOEYxQzMwNzk0QTU5NDc2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM0Qjg0RUQzNkQzOTdEMUNDQkUxNEYwODM5NTM5MzBDOEMyMDk3NEYy
RkU4NjNBQURFREQ4RjUxMzQ2OTRDMS8wLzMyMzAzMDJlMzcyZTMxMzQzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczNzM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIB5QwDQYJ
KoZIhvcNAQELBQADggEBABatpFJojZ4rzOXKtqTybW3fOR/Ct/Lw0yV8DfZBdfSN
F0gijRXptWad4RPlS1MAtSdITG06nHOd0xv+rZ7uWCbwdVcpCJQTQh/K3lcpTGkL
qy/E7IRZXOrnDxKW1sraj4al5O1HMVFLr3GvT0i6fjaTnHByCicmMIej2NdWWxr+
Xk9WtnQlRVhg6G7XNmun8oK1ggyGUVuzcjSoV5uoVOIgAvzQpuukPuY8PnczJtDi
lTapKyUx8pogkAHhurCw0pruLonUR6ThPs/bqRstJsOo6j3jn6OR1xa4D5zQG/kB
5bJry8iVhhCgCtoFNTP1RQqRpSV98DCLiDgiR4qU6Es=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:35:11 2025 by rpki-client