Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e37342e302e302f31372d3234203d3e203232303437.roa
File: 3230302e37342e302e302f31372d3234203d3e203232303437.roa (raw, json)
Hash identifier: CTIeNsTLDFCCmhpuLzukKyE8coHgEHxQxUNwl7RJRuE=
Subject key identifier: 69:77:20:2D:DA:E3:F2:BA:F9:05:13:BF:C7:25:85:69:36:EE:84:7B
Certificate issuer: /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial: 03D99C46CBF8C1CD1FA01DD7FF82FB805BD17317
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e37342e302e302f31372d3234203d3e203232303437.roa
Signing time: Tue 04 Feb 2025 18:19:13 +0000
ROA not before: Tue 04 Feb 2025 18:14:13 +0000
ROA not after: Tue 03 Feb 2026 18:19:13 +0000
asID: 22047
IP address blocks: 200.74.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d9:9c:46:cb:f8:c1:cd:1f:a0:1d:d7:ff:82:fb:80:5b:d1:73:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Validity
Not Before: Feb 4 18:14:13 2025 GMT
Not After : Feb 3 18:19:13 2026 GMT
Subject: CN=6977202DDAE3F2BAF90513BFC725856936EE847B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:a3:b1:d0:ce:df:0d:26:2a:64:88:10:71:
af:12:e7:8b:b1:fa:9d:3c:6c:7e:c3:f2:37:4a:ab:
e3:c8:5f:54:1c:9e:99:a8:f1:c3:fb:db:dc:31:98:
e8:49:0e:61:92:c0:84:96:1f:4e:1b:b9:cd:9a:7b:
56:78:bc:54:ff:7e:6e:6e:74:2f:10:05:13:25:5e:
98:b2:27:60:39:93:a9:08:63:0d:74:05:68:b0:17:
e2:34:df:b8:15:b3:9c:2a:d1:40:5e:99:ae:a8:94:
f7:f9:f2:4f:65:1b:1f:16:a0:67:6c:c8:f3:23:95:
44:1f:7c:0e:73:d4:b1:d4:81:b6:7d:b5:c3:89:b2:
1c:fa:ac:54:f2:64:7d:d5:fc:77:90:eb:bf:97:c3:
29:ea:33:8f:84:e3:b3:c9:1b:d2:73:ea:b3:e9:85:
bd:56:fc:43:79:85:cb:55:ef:57:d7:a7:5e:09:76:
28:18:0c:d7:9e:6f:16:54:c8:4b:22:76:c8:f6:e7:
20:c8:98:1f:09:fe:6b:e9:15:a5:78:aa:bc:72:92:
b3:f7:aa:d4:4c:49:61:97:09:7d:b7:b8:2f:6e:a8:
f3:f4:ec:5e:db:2b:2a:16:8a:b8:6e:22:1b:55:16:
59:0a:34:e6:93:42:14:4c:b5:6c:be:1b:03:0f:6e:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:77:20:2D:DA:E3:F2:BA:F9:05:13:BF:C7:25:85:69:36:EE:84:7B
X509v3 Authority Key Identifier:
keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e37342e302e302f31372d3234203d3e203232303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.74.0.0/17
Signature Algorithm: sha256WithRSAEncryption
60:92:22:3c:01:f7:ba:53:0a:06:c2:7d:59:d5:da:e3:1e:48:
e4:1f:4d:4a:c5:58:fd:c8:c7:f4:b8:95:af:5c:24:6c:b8:8f:
3a:39:bf:51:d0:8d:e3:0d:c3:ec:a1:f9:35:05:35:82:22:7b:
cc:bb:5f:e2:78:8b:2b:be:c6:e5:ef:8d:7a:77:0e:5c:1e:67:
51:c8:a9:2d:9c:57:c1:57:b9:a3:9b:2f:66:cb:32:a4:a0:64:
26:5c:1a:72:5b:58:a0:0f:54:ac:64:64:5d:6c:ff:9d:5b:24:
89:e9:b8:11:48:2d:8b:5d:26:77:f5:cc:d0:45:4d:fc:07:1f:
47:e3:42:0d:09:6a:f9:e0:d2:89:87:51:54:51:d2:d5:4a:07:
95:c3:5c:2b:b3:69:50:2c:9c:0d:9a:26:de:44:29:42:27:16:
30:fb:a0:ba:c0:41:3d:24:64:f5:3a:31:c7:4c:76:e2:96:c4:
2b:f6:61:10:0c:89:f6:63:05:6c:2c:f4:19:18:bd:95:f1:bd:
db:a1:ef:66:cb:d7:a5:f2:c2:69:27:53:6b:23:d1:b9:a2:06:
d8:84:c5:f7:e6:46:bf:7b:b9:91:f1:ea:5f:dd:35:62:02:cd:
4b:6f:7a:a9:3f:ef:6e:fb:59:70:92:48:79:3b:d9:9e:71:c8:
6c:0e:18:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:47 2025 by rpki-client