Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e302e302f31392d3234203d3e203231353735.roa
File: 3230302e3131302e302e302f31392d3234203d3e203231353735.roa (raw, json)
Hash identifier: Cbobs/o3xG/A1m5MkdvFiOBdVHYy1IYDsTe4WkqNulA=
Subject key identifier: 9E:B7:D5:BC:2A:5B:2C:7B:86:8B:6B:F8:8D:20:C4:0C:2D:B9:2E:05
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 61E6B4CE1AC4461FD6522FB0A5B806B369B274CE
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e302e302f31392d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:18:13 +0000
ROA not before: Tue 04 Feb 2025 18:13:13 +0000
ROA not after: Tue 03 Feb 2026 18:18:13 +0000
asID: 21575
IP address blocks: 200.110.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e6:b4:ce:1a:c4:46:1f:d6:52:2f:b0:a5:b8:06:b3:69:b2:74:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Feb 4 18:13:13 2025 GMT
Not After : Feb 3 18:18:13 2026 GMT
Subject: CN=9EB7D5BC2A5B2C7B868B6BF88D20C40C2DB92E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:9f:5b:20:41:12:92:23:50:51:74:42:88:
49:4c:24:47:41:19:d9:14:f3:91:74:ca:37:15:39:
b2:47:7e:92:2d:c0:4a:f8:20:65:60:6f:65:d2:2d:
1d:53:57:f0:0e:ab:15:7e:cb:26:5c:c1:09:a0:1d:
09:41:1b:9b:80:47:9b:4a:5a:05:91:82:9b:ac:3b:
b8:ca:02:33:20:35:bf:d4:be:96:b7:1e:10:56:bc:
1f:e9:76:5e:03:ca:a8:c1:71:3c:d8:b6:8a:2e:cc:
d7:21:9b:55:b1:4b:66:50:67:58:b1:68:a2:f5:a6:
c5:58:de:55:88:70:09:cc:a4:d4:b5:5b:ac:fd:3f:
90:22:a9:d9:c9:17:ff:bf:65:0a:44:3d:95:a3:b3:
3b:71:11:c7:42:df:89:12:08:bb:0a:d4:18:5d:3f:
45:2e:eb:8c:ac:93:14:07:c0:04:5c:18:b6:bc:d8:
a3:cb:2a:03:a6:37:56:7b:be:db:ad:e3:61:c9:4e:
25:a0:b3:66:68:b8:72:a6:3f:a3:bf:35:80:45:38:
20:3f:e2:2e:f8:40:94:77:ec:c6:47:97:2b:ed:e2:
e7:c2:b7:97:14:de:13:e1:f4:69:f2:fb:95:cc:58:
8f:86:8c:2a:cd:11:34:cd:9a:e7:87:6c:ea:6d:d9:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B7:D5:BC:2A:5B:2C:7B:86:8B:6B:F8:8D:20:C4:0C:2D:B9:2E:05
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e302e302f31392d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.110.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:a4:10:52:a0:af:6a:16:47:27:45:8c:a5:e6:a0:59:4e:20:
39:35:83:5b:a9:b5:ac:78:93:21:a6:81:a3:cb:d0:f2:10:a7:
4e:10:9d:e8:cd:15:85:f3:c6:7f:63:73:b8:8f:32:4a:f8:68:
12:d0:21:fc:f0:90:35:77:61:ed:f8:31:77:62:aa:43:b5:d2:
7b:10:a9:a0:bd:3d:f0:55:d6:07:3b:24:9e:d4:c3:9a:62:4e:
1c:94:45:5e:05:8b:2f:2b:16:f4:85:46:ac:e7:15:6e:1e:55:
8e:fb:c1:bd:3c:21:45:1c:7d:b2:fe:f0:da:59:c5:94:bf:61:
4c:45:5a:26:cc:81:f8:d7:61:5b:f4:c7:81:ee:c7:ac:0a:fd:
2b:56:c9:0a:76:da:f9:c9:3a:08:52:d2:0a:03:84:3b:26:3f:
65:62:74:6c:b5:e3:9c:9c:ed:d7:85:fe:9f:6a:3e:7e:60:30:
ab:50:be:bb:ec:e0:4c:b7:a3:91:b1:b6:49:57:8b:6f:ad:ea:
da:0f:f5:85:8f:dd:42:49:92:4c:b7:2d:1b:71:c5:11:78:af:
80:06:6a:89:06:3a:91:f7:4f:da:ea:7d:2a:70:a5:b2:a7:7a:
79:0e:2c:f4:91:30:ac:c6:dc:a0:68:6e:31:66:a8:1a:7d:91:
23:6e:d2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:29 2025 by rpki-client