Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134302e302f32322d3234203d3e203230323939.roa
File: 3230302e33302e3134302e302f32322d3234203d3e203230323939.roa (raw, json)
Hash identifier: ogYbKlsQR/Do/qTuU7xK6Ztw+cNQzQ8uDbJ0EO60jwQ=
Subject key identifier: 6E:AC:73:14:45:E8:A8:B1:A8:3E:8B:AC:AB:C1:19:77:12:CC:AC:1D
Certificate issuer: /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial: 684CC1308D0F37D63C461AAB87672E40EA3BBFCA
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134302e302f32322d3234203d3e203230323939.roa
Signing time: Tue 04 Feb 2025 18:38:34 +0000
ROA not before: Tue 04 Feb 2025 18:33:34 +0000
ROA not after: Tue 03 Feb 2026 18:38:34 +0000
asID: 20299
IP address blocks: 200.30.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4c:c1:30:8d:0f:37:d6:3c:46:1a:ab:87:67:2e:40:ea:3b:bf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
Validity
Not Before: Feb 4 18:33:34 2025 GMT
Not After : Feb 3 18:38:34 2026 GMT
Subject: CN=6EAC731445E8A8B1A83E8BACABC1197712CCAC1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:aa:f3:aa:5b:25:cd:1d:7f:16:b9:37:4d:
2b:40:c0:d9:de:c4:bc:aa:3f:0a:dd:ad:30:3e:c1:
a1:0b:8a:4b:4f:51:99:ee:43:a1:cf:09:58:e7:45:
b6:e4:10:ff:76:34:af:9d:7f:43:02:59:a7:e8:da:
76:a2:ab:21:dd:6f:48:c3:95:14:54:34:ee:2e:0a:
43:91:6b:03:94:01:8e:90:c4:06:44:17:a5:19:03:
34:f8:73:6e:7d:27:90:87:85:11:82:37:2b:06:ed:
63:bf:06:39:90:d0:23:c9:59:d8:25:ef:a6:67:d5:
fe:cc:c9:a4:03:14:76:99:4c:e4:8f:86:4c:8c:41:
a1:37:a7:ee:11:34:22:5c:c8:82:ba:74:80:e2:63:
20:c6:8e:76:ea:cb:cb:7c:f1:fa:dc:bb:4d:19:41:
ab:d7:d5:bd:12:4a:6e:38:cf:62:20:96:99:77:e9:
b3:bd:90:6a:fe:40:62:b3:61:eb:be:e1:b4:c2:f4:
60:c5:a0:50:05:66:fa:cf:cb:15:80:18:f8:a8:41:
3f:b4:23:aa:9e:04:ff:0f:ef:3a:77:8d:60:87:46:
d3:cc:d9:6b:16:ff:fe:0d:2f:2f:db:41:50:f0:b3:
1a:01:c1:4a:5d:0a:44:66:7c:18:6b:b7:b0:96:66:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AC:73:14:45:E8:A8:B1:A8:3E:8B:AC:AB:C1:19:77:12:CC:AC:1D
X509v3 Authority Key Identifier:
keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134302e302f32322d3234203d3e203230323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.140.0/22
Signature Algorithm: sha256WithRSAEncryption
16:35:60:a7:f8:d0:11:e6:f4:3b:50:66:90:9d:7a:bb:ea:c0:
6f:23:3f:e5:2a:bf:6b:8f:75:6a:c7:53:9c:e2:2d:ad:ef:c7:
b6:9a:28:5c:11:57:e2:8e:ae:78:89:1e:5a:6c:63:3d:28:83:
b3:82:5f:81:b6:66:bf:c9:24:85:41:7f:89:08:b7:82:0f:66:
0a:62:4c:9e:e9:f9:c8:ec:21:09:99:3d:6c:90:34:20:44:67:
8a:c7:9e:4d:10:e8:62:d0:95:58:45:91:20:41:85:8e:99:36:
ec:df:22:84:4c:d3:e6:16:f3:3b:c2:49:c5:91:60:f4:85:53:
73:b5:cc:ad:b4:61:16:1b:b5:60:99:d5:e1:4c:34:4d:16:73:
d4:f9:b0:e3:a8:19:8c:62:e4:bb:e6:51:20:14:ae:19:32:ce:
6e:8e:03:bc:86:6f:5c:29:f7:aa:f7:0e:6e:6f:5e:82:88:93:
42:52:d7:47:f4:dd:f0:7d:8e:3c:36:9c:b6:d7:d4:cd:d5:88:
05:fa:70:5b:e1:10:ce:b8:bb:fc:58:10:80:9d:e0:7f:3b:02:
cf:92:c8:59:bf:84:8a:31:13:cb:bc:30:76:d3:9b:bf:41:c0:
68:71:37:71:a6:f1:0e:aa:08:89:e6:fb:64:fc:61:6f:42:35:
69:23:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:20 2025 by rpki-client