Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa
File: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier: yn6Nu655v9mUSksEI4cIktvdx/yTjs2oRj5bZMAfrfk=
Subject key identifier: 30:79:62:16:40:B3:0D:F5:E6:37:D4:3A:28:DF:97:69:BC:9C:EF:5A
Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Certificate serial: 3B6675FE98C8579A1EB69E739D5F5EE22CD99C4B
Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa
Signing time: Tue 04 Feb 2025 18:16:56 +0000
ROA not before: Tue 04 Feb 2025 18:11:56 +0000
ROA not after: Tue 03 Feb 2026 18:16:56 +0000
asID: 27947
IP address blocks: 200.9.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:66:75:fe:98:c8:57:9a:1e:b6:9e:73:9d:5f:5e:e2:2c:d9:9c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA
Validity
Not Before: Feb 4 18:11:56 2025 GMT
Not After : Feb 3 18:16:56 2026 GMT
Subject: CN=3079621640B30DF5E637D43A28DF9769BC9CEF5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:0b:5b:a4:cb:2c:d7:f5:f2:f1:6c:4a:0a:
15:c6:43:6e:d0:43:a8:0e:57:38:e6:51:ec:12:73:
c8:f5:00:35:9a:25:ee:9f:8a:23:76:cf:a4:94:c3:
36:ac:80:77:03:9a:57:8e:15:1d:f0:70:18:62:67:
c8:d9:e4:19:ad:9f:5c:f5:5f:dd:f1:09:40:db:f0:
a6:a5:ca:56:7b:61:28:c2:a0:80:d4:4d:80:61:64:
91:13:20:47:f7:f0:0e:3a:9b:cc:06:60:ee:dd:c1:
71:54:8e:9e:3b:12:f4:85:7d:fc:c3:23:23:e3:f6:
39:78:89:89:91:86:37:f1:c2:b7:73:a8:be:0b:90:
68:e6:24:0a:09:38:22:07:d8:d7:23:bd:a6:e6:83:
ec:c8:17:d9:4c:da:a5:63:fe:89:b5:c5:77:e7:6f:
b5:52:da:cc:e9:5c:ff:44:a6:82:84:04:75:7d:84:
05:a0:04:43:8d:d5:75:22:a9:5f:e9:d3:76:1d:b8:
53:5c:61:cd:4f:8e:9b:aa:1e:3c:02:7c:af:57:22:
71:32:f6:17:4f:30:bf:80:f7:86:72:87:c3:20:d1:
30:83:6e:2b:0c:c4:c3:fb:15:1a:52:d1:8b:9b:01:
3a:49:f3:09:71:5a:72:df:8f:dd:eb:8b:82:f0:fc:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:79:62:16:40:B3:0D:F5:E6:37:D4:3A:28:DF:97:69:BC:9C:EF:5A
X509v3 Authority Key Identifier:
keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/3230302e392e39362e302f32342d3234203d3e203237393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.96.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9b:1f:82:28:4c:d7:cb:03:7a:3e:1e:bb:53:2a:0d:52:2a:
25:95:ab:cf:04:fe:11:6a:8d:9e:36:76:3f:da:a2:67:93:65:
bb:03:cb:84:52:b1:59:74:1a:7c:87:42:e0:8d:70:85:48:47:
15:d6:66:15:20:d3:18:43:37:c3:60:9c:3d:14:3f:6c:9d:a9:
4e:1b:dc:43:fc:08:10:4b:73:ac:3c:13:cb:d2:80:ff:09:d2:
9a:fd:85:95:12:a6:6e:06:31:85:59:7c:03:bc:1f:df:96:0b:
a9:1e:27:f8:7b:b0:b3:3a:27:80:09:80:6d:d4:8f:ad:14:cb:
53:ce:e0:1b:90:ea:9c:bb:6e:8a:69:a8:13:4a:e2:8b:31:bb:
bc:54:74:87:8c:91:67:d5:2e:b5:49:4f:59:a9:5f:81:b7:00:
e4:26:93:ac:a0:aa:b3:8e:6a:a6:80:54:52:48:35:60:98:f5:
bd:fb:db:4b:b0:13:9b:1e:ab:5e:88:bd:a5:e1:21:73:29:24:
43:ec:98:a3:b6:3f:56:60:67:79:4c:92:1a:01:51:f5:a7:0d:
b2:24:89:98:ba:14:de:4c:76:9d:8c:c4:c7:03:e4:b3:d7:d5:
08:73:42:6a:79:dd:d5:02:b6:f4:f6:f4:ea:7b:18:1b:2c:97:
e8:4a:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:24 2025 by rpki-client