Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/3230302e332e3132302e302f32312d3234203d3e20323632313536.roa
File: 3230302e332e3132302e302f32312d3234203d3e20323632313536.roa (raw, json)
Hash identifier: kjk6LY9ysQAVeyb5CZeVo5Eb4pV0tcrvvy3do21QCp8=
Subject key identifier: 1E:F7:14:A1:85:E9:D0:4D:D6:5F:9C:5F:95:4E:17:FC:71:3C:EB:07
Certificate issuer: /CN=98AB850008F15375E57FFE47589A85AE20920744
Certificate serial: 113852F8CBDB8C1C6A49DD65C5A13E03FA75CE65
Authority key identifier: 98:AB:85:00:08:F1:53:75:E5:7F:FE:47:58:9A:85:AE:20:92:07:44
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98AB850008F15375E57FFE47589A85AE20920744.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/3230302e332e3132302e302f32312d3234203d3e20323632313536.roa
Signing time: Tue 04 Feb 2025 18:00:19 +0000
ROA not before: Tue 04 Feb 2025 17:55:19 +0000
ROA not after: Tue 03 Feb 2026 18:00:19 +0000
asID: 262156
IP address blocks: 200.3.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:38:52:f8:cb:db:8c:1c:6a:49:dd:65:c5:a1:3e:03:fa:75:ce:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98AB850008F15375E57FFE47589A85AE20920744
Validity
Not Before: Feb 4 17:55:19 2025 GMT
Not After : Feb 3 18:00:19 2026 GMT
Subject: CN=1EF714A185E9D04DD65F9C5F954E17FC713CEB07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:b7:c0:06:f8:c8:08:da:f5:e7:d9:33:1f:
46:53:54:f0:8b:77:3c:8d:ee:e0:22:0a:e8:0b:13:
0c:43:60:0f:de:5b:64:12:de:57:c8:83:33:85:c5:
9a:2d:75:ce:ea:0b:c6:44:eb:84:fd:8f:91:f7:b0:
7c:5c:b6:01:1f:91:67:f9:3a:f6:04:b6:38:5e:ca:
15:d9:af:b7:d4:79:03:b9:c8:73:07:23:b1:ad:26:
9b:2f:21:ca:0e:21:9a:6b:23:e9:8a:ef:28:b9:6f:
b7:45:bc:87:2a:1a:6b:82:3d:86:b6:f3:4d:77:0c:
3b:63:58:32:aa:bb:94:bd:2d:ce:f3:97:c7:76:5f:
31:21:1d:b2:36:70:ed:b2:5d:6c:f5:45:4d:8f:79:
43:d1:bc:f3:75:e0:b1:29:a1:26:c0:48:4b:e5:0e:
71:1f:0e:22:85:6a:54:91:7d:7e:e7:d3:68:c8:24:
18:0b:4f:31:e4:51:70:b4:12:5d:86:c8:a8:b6:24:
77:aa:fb:aa:79:47:42:fc:cc:81:fe:38:89:62:38:
c4:e5:fb:82:bc:10:97:db:68:b2:3d:4f:8c:13:c7:
36:9f:52:e3:21:8b:f6:47:9f:ba:21:2c:66:16:cd:
52:2e:eb:dc:cb:08:34:20:1f:f9:b0:df:c2:90:90:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F7:14:A1:85:E9:D0:4D:D6:5F:9C:5F:95:4E:17:FC:71:3C:EB:07
X509v3 Authority Key Identifier:
keyid:98:AB:85:00:08:F1:53:75:E5:7F:FE:47:58:9A:85:AE:20:92:07:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/98AB850008F15375E57FFE47589A85AE20920744.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98AB850008F15375E57FFE47589A85AE20920744.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/3230302e332e3132302e302f32312d3234203d3e20323632313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.120.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:c1:b5:79:1a:79:b9:4c:10:7a:f6:f9:8c:8c:a2:5a:2c:76:
d0:db:97:a5:31:3d:64:f4:2e:65:9c:5e:f5:4d:8a:0e:25:6d:
70:5c:46:3b:ca:0a:eb:7a:d2:c6:f9:83:a3:11:98:bd:9c:2b:
65:aa:d3:e5:c9:7d:15:96:3d:d2:9b:fb:0b:91:30:f5:5e:90:
7e:cc:68:0c:03:d3:2b:ce:32:e1:5e:63:02:73:c9:c2:f1:03:
16:45:05:55:84:fb:db:60:b6:0f:6f:1b:79:c6:83:47:cd:64:
35:1a:e6:e8:b0:0e:96:3e:84:a3:02:1e:07:55:f5:ee:8e:fc:
75:b2:d4:f7:c5:22:0d:29:76:c1:c9:a8:2f:9b:51:91:0e:dc:
43:b7:38:cd:94:40:8a:84:07:fd:06:ba:eb:a0:2a:34:d3:9c:
3b:7c:78:c5:d1:00:2c:05:cb:ac:1a:12:c3:a1:e8:33:17:0a:
ca:c5:e8:d1:b7:92:58:a2:32:3c:eb:27:fe:f4:cb:ef:ea:e7:
e3:ad:46:8c:10:41:22:36:ea:a0:4b:3b:32:19:64:7f:13:6d:
f1:e9:ef:79:c0:aa:eb:ef:57:e8:67:bd:e4:00:77:28:b0:5c:
ef:22:c8:1f:e7:02:0c:10:f2:80:7f:2b:fe:b2:ea:ba:3c:80:
59:28:61:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:26 2025 by rpki-client