Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134382e302f32332d3234203d3e203230323939.roa
File: 3230302e33302e3134382e302f32332d3234203d3e203230323939.roa (raw, json)
Hash identifier: HkcTm7iZRU11h4EXkyy5bYofZ6m0ZIKG1zPsmkBXOXI=
Subject key identifier: E4:01:CA:D0:38:4C:6C:3D:EB:3F:57:D1:1F:96:1A:BD:0B:AF:E7:BA
Certificate issuer: /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial: 198CA976B7A2CA6BBB7EDAD35D887DFA1BF927C8
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134382e302f32332d3234203d3e203230323939.roa
Signing time: Tue 04 Feb 2025 18:38:29 +0000
ROA not before: Tue 04 Feb 2025 18:33:29 +0000
ROA not after: Tue 03 Feb 2026 18:38:29 +0000
asID: 20299
IP address blocks: 200.30.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:8c:a9:76:b7:a2:ca:6b:bb:7e:da:d3:5d:88:7d:fa:1b:f9:27:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
Validity
Not Before: Feb 4 18:33:29 2025 GMT
Not After : Feb 3 18:38:29 2026 GMT
Subject: CN=E401CAD0384C6C3DEB3F57D11F961ABD0BAFE7BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:88:28:23:6f:bb:03:34:0d:c8:6d:e2:c8:
03:e5:15:33:12:33:59:eb:2f:b4:3c:2b:20:fb:9a:
c6:16:60:a0:31:34:95:9f:e3:68:41:63:86:27:9f:
5f:70:11:89:87:f6:78:95:dd:7b:a6:19:1e:84:54:
89:37:a5:dc:d9:3f:c7:91:ba:c5:33:90:29:7f:46:
9c:f5:ee:72:c3:43:8a:95:72:ce:15:23:9d:e6:dd:
00:ef:84:90:e3:db:dc:42:fd:fe:e4:8a:8d:92:e3:
ed:3c:58:06:e2:bc:0c:5f:87:1a:28:44:e1:64:4a:
f7:4a:05:97:a5:73:44:be:42:9b:4e:a2:94:5c:88:
37:aa:db:b8:1a:e7:b4:58:05:94:f7:c7:b7:fd:eb:
d9:e1:32:17:92:93:9c:63:c6:c2:07:dd:f8:b1:bf:
dd:63:95:96:66:ac:59:a8:25:d9:82:53:9a:62:32:
06:44:e3:45:ee:82:79:46:05:7a:e8:90:a0:35:73:
fe:f3:49:60:f6:1c:2f:03:0f:a3:ec:4d:fb:e1:a6:
4c:96:0f:0e:3e:b8:69:2d:ec:5c:1e:47:a7:30:70:
65:c2:f2:6b:d4:75:2e:e0:05:22:e2:eb:c1:57:c6:
16:31:1b:6c:39:aa:ce:5c:2a:e9:f3:68:b0:67:7c:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:01:CA:D0:38:4C:6C:3D:EB:3F:57:D1:1F:96:1A:BD:0B:AF:E7:BA
X509v3 Authority Key Identifier:
keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134382e302f32332d3234203d3e203230323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.148.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:07:b2:65:2b:be:f7:da:d5:79:c5:75:85:7f:c2:28:a1:37:
10:ad:f9:5b:51:33:38:75:66:56:16:8a:15:09:86:57:44:2e:
24:cb:f9:2f:eb:18:b4:e9:ed:0e:57:f5:69:13:14:b8:98:59:
42:f2:f4:53:fa:d4:74:90:2a:5b:89:dc:eb:00:ef:3c:55:bf:
44:86:d1:7f:6c:f4:a5:d3:a5:f4:26:47:66:32:d9:b4:b4:b9:
fa:0a:94:ee:7f:36:50:d1:aa:ff:60:4d:6a:08:1a:75:e1:10:
88:f3:a0:97:b4:80:89:ed:be:78:30:34:c9:73:a6:39:fa:fb:
e6:ed:32:2f:34:35:c8:68:ed:0d:09:0c:77:69:28:45:16:e5:
02:85:be:31:b3:41:e9:e4:f1:e6:95:b0:98:cb:e8:61:21:3a:
62:4f:d1:d8:bb:da:e6:de:20:58:13:2e:a9:5d:2e:5a:f0:a4:
89:0b:87:f8:6d:9f:5e:21:22:3d:28:30:c7:30:ef:50:16:cf:
97:f3:84:7c:bf:d4:c0:3c:3f:df:f4:e8:1b:6a:30:bf:41:b0:
11:6b:d3:0f:33:d2:12:ff:26:9b:e0:de:ab:79:5b:99:55:f3:
0c:7c:9e:f8:5b:8f:7b:72:ab:7c:60:8a:97:68:73:82:43:3d:
ac:8d:ee:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:18 2025 by rpki-client