Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C99C83624A3C8DC01D91F37B50FF72ABC656E59F605BBF6061B7AD7349F02FB/0/3230302e36332e39362e302f32312d3234203d3e20323635383331.roa
File: 3230302e36332e39362e302f32312d3234203d3e20323635383331.roa (raw, json)
Hash identifier: dhcMb2stSV9MsEE4rrEytPMfQSO+x9f9O1XF5l0K6yQ=
Subject key identifier: 8C:F7:46:25:8F:97:76:90:93:BD:94:4D:D4:B0:9C:9C:37:ED:D9:06
Certificate issuer: /CN=02E31D06146FCD6AE4D718DA467E60060D036810
Certificate serial: 44E36E9BC3E302D180ECD30B1C47D52A4C9D5457
Authority key identifier: 02:E3:1D:06:14:6F:CD:6A:E4:D7:18:DA:46:7E:60:06:0D:03:68:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02E31D06146FCD6AE4D718DA467E60060D036810.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7C99C83624A3C8DC01D91F37B50FF72ABC656E59F605BBF6061B7AD7349F02FB/0/3230302e36332e39362e302f32312d3234203d3e20323635383331.roa
Signing time: Tue 04 Feb 2025 18:55:42 +0000
ROA not before: Tue 04 Feb 2025 18:50:42 +0000
ROA not after: Tue 03 Feb 2026 18:55:42 +0000
asID: 265831
IP address blocks: 200.63.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e3:6e:9b:c3:e3:02:d1:80:ec:d3:0b:1c:47:d5:2a:4c:9d:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02E31D06146FCD6AE4D718DA467E60060D036810
Validity
Not Before: Feb 4 18:50:42 2025 GMT
Not After : Feb 3 18:55:42 2026 GMT
Subject: CN=8CF746258F97769093BD944DD4B09C9C37EDD906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:e5:eb:9c:65:82:39:39:94:5e:5b:54:bc:
34:8d:1d:6a:94:07:60:8f:d0:bf:80:22:28:a9:11:
5e:2c:de:a8:d9:32:74:80:45:54:e3:b6:3e:45:ae:
8c:8b:ad:fa:fc:7b:a1:b4:1a:35:53:99:ab:a7:e2:
4b:6b:0d:e3:b7:91:e3:50:98:b6:66:e0:ed:ce:be:
70:3b:4b:5b:d2:f5:28:0f:59:36:ce:10:25:e6:48:
c1:d6:82:0e:71:3c:69:5e:be:40:66:a7:dd:8f:f0:
5f:0d:2a:75:1d:65:42:f2:c5:d6:f4:53:8b:70:68:
29:9f:7a:15:3b:50:b7:0d:3d:7a:ae:0f:81:22:e1:
fe:fc:3c:8f:9b:ff:78:b9:9e:17:25:c8:e8:04:e2:
69:33:4e:ac:ae:ae:b4:15:78:6e:bb:a5:f5:15:0f:
02:eb:07:4b:21:df:42:b8:1d:62:e9:72:f3:22:d2:
b0:c5:1a:10:40:da:a0:38:55:4c:a7:4b:28:cd:29:
e1:2b:ea:b4:21:15:ad:bf:fe:f2:2a:30:c8:02:a3:
26:04:74:61:e0:04:5b:61:f4:85:9a:38:9c:31:2a:
6d:66:13:c1:ab:a0:b5:60:47:50:19:fe:e1:a7:4a:
b6:0b:d1:ff:b3:ce:78:bc:c0:1c:d8:92:7d:fd:05:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F7:46:25:8F:97:76:90:93:BD:94:4D:D4:B0:9C:9C:37:ED:D9:06
X509v3 Authority Key Identifier:
keyid:02:E3:1D:06:14:6F:CD:6A:E4:D7:18:DA:46:7E:60:06:0D:03:68:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7C99C83624A3C8DC01D91F37B50FF72ABC656E59F605BBF6061B7AD7349F02FB/0/02E31D06146FCD6AE4D718DA467E60060D036810.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02E31D06146FCD6AE4D718DA467E60060D036810.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C99C83624A3C8DC01D91F37B50FF72ABC656E59F605BBF6061B7AD7349F02FB/0/3230302e36332e39362e302f32312d3234203d3e20323635383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.63.96.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:06:83:c4:da:53:af:4b:85:95:22:e6:73:2f:f7:f6:c9:22:
01:66:05:a0:7d:f8:53:e0:5b:34:76:be:ce:9d:db:fe:f3:ec:
25:9a:b7:86:d8:6e:ce:c9:bb:d6:81:57:c9:57:88:cb:d7:e5:
d9:8f:02:ad:03:fe:c2:d0:a4:97:16:f6:46:e9:9f:b6:fb:0a:
4c:94:88:a7:ed:20:36:d4:f5:69:fe:f8:a5:c5:00:8d:d3:22:
98:0c:8b:f7:7a:fb:36:d9:8a:77:a6:c6:fa:c5:24:0e:1b:b3:
55:41:30:08:a1:58:3c:92:30:ab:cb:ce:51:46:95:62:e1:ad:
29:1d:15:72:c9:68:af:e2:f1:bd:3f:d8:ff:23:48:4c:43:c8:
3d:98:46:cd:d9:b8:44:77:1e:cc:d6:b3:0d:56:a8:cf:4d:8b:
38:30:30:80:89:75:89:d3:30:0a:10:59:87:82:1b:5e:fc:9b:
bc:40:cd:54:9d:3c:7c:8b:64:d5:e0:51:a1:a1:14:f9:2e:18:
b5:7b:c9:23:05:5c:e3:88:b4:0f:3c:50:95:f5:4b:1a:22:6c:
2b:45:dd:08:7d:71:06:7b:aa:dc:79:b4:15:04:4c:6f:b5:cb:
a6:d1:bc:b0:4a:ce:d1:13:72:50:b7:a4:0f:80:93:1c:ec:95:
d2:49:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:55 2025 by rpki-client