Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e312e302f32342d3234203d3e203237393537.roa
File: 3230302e332e312e302f32342d3234203d3e203237393537.roa (raw, json)
Hash identifier: 0owUVYnHBRTS3+73wlj/Tydt7337lECLqx9GKO9IsWs=
Subject key identifier: 21:6E:F3:48:46:52:8E:8A:A7:5E:11:CA:20:03:CD:FC:73:A1:0F:6C
Certificate issuer: /CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
Certificate serial: 70C178AF008679D38E0F81686C54AA6CBB8F13E0
Authority key identifier: 50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e312e302f32342d3234203d3e203237393537.roa
Signing time: Tue 04 Feb 2025 18:47:54 +0000
ROA not before: Tue 04 Feb 2025 18:42:54 +0000
ROA not after: Tue 03 Feb 2026 18:47:54 +0000
asID: 27957
IP address blocks: 200.3.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c1:78:af:00:86:79:d3:8e:0f:81:68:6c:54:aa:6c:bb:8f:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
Validity
Not Before: Feb 4 18:42:54 2025 GMT
Not After : Feb 3 18:47:54 2026 GMT
Subject: CN=216EF34846528E8AA75E11CA2003CDFC73A10F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:46:44:d0:95:fe:f0:46:d9:df:2f:e9:77:97:
0f:bb:e6:4b:27:59:98:f8:fa:a4:d9:ad:a1:1b:51:
f8:85:71:14:b6:6b:ab:48:43:ce:9e:01:97:a4:d0:
88:9c:7f:80:49:5e:59:ff:a7:bd:f5:3c:92:b7:7b:
74:0e:c5:13:6d:ca:c2:1c:cc:69:c5:7c:00:db:e4:
1d:85:66:b3:63:5f:b0:1d:3a:ff:90:07:80:8c:a6:
1c:16:4e:82:82:7b:9d:af:de:6c:ff:ee:12:d5:23:
1c:53:92:ff:2f:44:62:56:e8:65:b2:0c:55:bb:ea:
7d:66:9f:de:ab:74:34:f2:53:1e:d6:db:5f:9f:37:
dc:9b:31:ed:0c:a5:e1:7f:dd:23:59:46:c4:3f:2b:
68:fb:d6:57:6d:7e:56:30:a0:ca:47:f4:29:5f:cf:
09:62:c7:bc:a6:1e:45:32:25:f9:69:89:71:81:bc:
fa:c4:c4:27:34:56:70:2e:a8:09:fd:68:b8:cf:bf:
e4:4b:30:31:cd:71:f8:64:c2:7e:24:6c:87:6c:a6:
8e:a8:91:b8:2d:c6:4c:64:d6:ec:a0:d7:cc:c4:bc:
c3:60:cc:d7:17:b3:0b:ef:12:2e:cd:49:9c:84:d4:
68:23:80:46:b5:c9:69:e0:48:aa:4d:e6:d6:32:10:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:F3:48:46:52:8E:8A:A7:5E:11:CA:20:03:CD:FC:73:A1:0F:6C
X509v3 Authority Key Identifier:
keyid:50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e312e302f32342d3234203d3e203237393537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.1.0/24
Signature Algorithm: sha256WithRSAEncryption
02:51:97:c4:60:f7:d1:a7:dc:7f:4c:92:86:4a:06:d7:ca:29:
01:e9:d0:23:7d:e0:bc:cf:38:d3:18:85:f6:c8:5a:49:ba:7a:
ee:60:90:7e:80:ad:32:63:fc:21:5a:90:96:7f:18:44:01:b6:
17:29:da:53:ed:cd:ca:06:f1:56:d5:05:c2:51:7d:64:8e:82:
db:70:ce:a5:65:e9:8e:39:8b:82:77:48:c3:b6:4b:77:f8:9f:
c2:60:9e:53:d6:e1:a2:ff:bf:cc:ac:7d:74:6d:3a:16:f4:2b:
8e:a3:10:2d:3e:88:e0:ed:70:34:46:94:71:8f:8b:51:06:e4:
05:fc:30:45:79:bf:b5:0c:00:60:34:1d:15:f2:fd:95:42:c8:
99:28:f2:ca:96:b3:46:76:c1:61:96:cc:f5:e1:78:8d:23:8d:
cc:e9:5f:5d:c1:98:8e:dd:f6:ff:55:3e:f0:72:99:31:ac:ce:
15:af:57:75:4b:ee:d6:18:c3:57:4c:c9:60:47:f0:63:be:58:
ad:73:01:35:8c:2a:54:a0:d9:57:7b:a1:d2:64:00:ee:b2:56:
2c:e8:f7:c2:bb:5e:9c:7e:7c:46:77:10:0f:8a:1b:b3:79:0e:
ce:f4:86:d7:07:df:26:60:ab:0f:51:49:ea:49:bd:91:20:79:
c4:5a:a6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:43 2025 by rpki-client