Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32322d3232203d3e203139313830.roa
File: 3230302e3131302e33322e302f32322d3232203d3e203139313830.roa (raw, json)
Hash identifier: RnfwhnIL59V8RQHxwHQMkHwV9Q5Q294IfeVXhY4NKnc=
Subject key identifier: 3F:4B:52:8C:A3:F5:F1:4E:22:BB:48:43:CA:5D:79:BC:1E:2C:BB:32
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 13EB6342911C866EEC02FDD66E29BD5954BC32D7
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32322d3232203d3e203139313830.roa
Signing time: Tue 04 Feb 2025 18:18:07 +0000
ROA not before: Tue 04 Feb 2025 18:13:07 +0000
ROA not after: Tue 03 Feb 2026 18:18:07 +0000
asID: 19180
IP address blocks: 200.110.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:eb:63:42:91:1c:86:6e:ec:02:fd:d6:6e:29:bd:59:54:bc:32:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Feb 4 18:13:07 2025 GMT
Not After : Feb 3 18:18:07 2026 GMT
Subject: CN=3F4B528CA3F5F14E22BB4843CA5D79BC1E2CBB32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:00:ba:f6:8f:48:22:d3:c4:97:55:fb:bd:
7e:08:53:c8:5b:a0:55:28:c9:e9:4b:88:24:fd:1d:
70:65:f1:39:b9:c0:8b:66:fe:a1:92:58:1c:d2:dc:
a3:c9:f0:50:70:56:57:0d:41:28:54:3d:79:ee:ac:
24:e9:9a:dc:3d:bf:b2:1d:9e:fa:cd:cc:e7:0b:bf:
8a:71:1f:76:3a:51:cf:42:7f:6b:04:3e:0a:ac:e0:
84:4f:57:34:e1:52:a8:71:3c:fe:9f:61:5f:4e:e2:
2a:5c:d7:80:95:58:59:51:d5:69:4a:0e:e5:c9:50:
ab:11:54:49:4a:a4:41:30:2c:ae:19:c2:4b:d8:c3:
44:be:55:bf:52:d9:da:65:ef:6d:f6:f5:f1:7f:58:
8a:22:62:8f:53:7f:fc:17:5b:7f:f1:55:95:7f:11:
0d:01:28:b3:cc:41:3a:86:58:00:07:61:86:fa:f7:
5c:17:8f:54:b2:0d:02:d3:35:d9:72:85:e8:7b:ee:
d6:48:22:7f:df:06:ad:83:51:8d:b9:cc:e6:af:54:
b0:0c:15:1a:28:f2:7f:cb:de:6e:3b:b5:35:da:3d:
5c:33:16:78:4c:c2:a2:53:0c:40:bd:30:5c:25:e7:
a4:8a:57:93:59:aa:f4:93:ea:14:e8:43:83:b7:69:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:52:8C:A3:F5:F1:4E:22:BB:48:43:CA:5D:79:BC:1E:2C:BB:32
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32322d3232203d3e203139313830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.110.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:13:d0:c3:89:9f:43:e4:0d:95:cc:a8:4a:d4:85:61:a7:f8:
ae:fc:f8:ce:03:60:7f:c4:40:dc:5f:72:88:cb:00:b0:93:d5:
a1:fa:37:e2:9a:e5:f8:36:75:d3:e5:4b:fc:3a:85:ed:d1:66:
2a:7f:05:21:38:00:e4:aa:8e:0b:d8:64:45:de:d8:33:f8:24:
cf:72:fb:c2:c4:47:24:a9:c7:54:88:84:83:9a:d4:75:a9:64:
97:8b:d0:e0:c5:84:8f:f7:f3:5f:98:7a:10:fa:69:49:74:a1:
3c:35:d5:36:df:52:fc:40:ac:0b:97:5b:8a:46:e4:1f:b0:ad:
75:a3:7c:be:82:a9:e0:d4:47:05:02:cf:bc:07:d9:e4:c3:a3:
02:3c:98:a2:91:1c:ff:cc:f2:73:c4:87:81:9f:1d:c8:2e:38:
f2:75:45:12:40:03:6e:1a:72:07:3a:91:b6:3f:31:9c:77:62:
27:6a:90:3d:f8:9c:46:09:20:36:63:bd:da:87:44:1c:df:6e:
78:17:42:0a:46:37:c1:dc:3c:a5:d7:ad:f3:d8:fa:93:3e:12:
99:0c:e9:2c:52:fc:a4:a6:86:10:c0:ab:fd:0d:58:14:7c:21:
75:46:d9:6d:ba:5f:a8:7c:e8:df:79:11:27:94:94:1b:fd:9b:
d3:71:6f:09
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUE+tjQpEchm7sAv3Wbim9WVS8MtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNTAyMDQxODEzMDdaFw0yNjAyMDMxODE4MDdaMDMxMTAvBgNV
BAMTKDNGNEI1MjhDQTNGNUYxNEUyMkJCNDg0M0NBNUQ3OUJDMUUyQ0JCMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2AC69o9IItPEl1X7vX4IU8hb
oFUoyelLiCT9HXBl8Tm5wItm/qGSWBzS3KPJ8FBwVlcNQShUPXnurCTpmtw9v7Id
nvrNzOcLv4pxH3Y6Uc9Cf2sEPgqs4IRPVzThUqhxPP6fYV9O4ipc14CVWFlR1WlK
DuXJUKsRVElKpEEwLK4ZwkvYw0S+Vb9S2dpl72329fF/WIoiYo9Tf/wXW3/xVZV/
EQ0BKLPMQTqGWAAHYYb691wXj1SyDQLTNdlyheh77tZIIn/fBq2DUY25zOavVLAM
FRoo8n/L3m47tTXaPVwzFnhMwqJTDEC9MFwl56SKV5NZqvST6hToQ4O3aXvHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUP0tSjKP18U4iu0hDyl15vB4suzIwHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMyMzAzMDJlMzEzMTMwMmUzMzMyMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzOTMxMzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAshuIDAN
BgkqhkiG9w0BAQsFAAOCAQEAsRPQw4mfQ+QNlcyoStSFYaf4rvz4zgNgf8RA3F9y
iMsAsJPVofo34prl+DZ10+VL/DqF7dFmKn8FITgA5KqOC9hkRd7YM/gkz3L7wsRH
JKnHVIiEg5rUdalkl4vQ4MWEj/fzX5h6EPppSXShPDXVNt9S/ECsC5dbikbkH7Ct
daN8voKp4NRHBQLPvAfZ5MOjAjyYopEc/8zyc8SHgZ8dyC448nVFEkADbhpyBzqR
tj8xnHdiJ2qQPficRgkgNmO92odEHN9ueBdCCkY3wdw8pdet89j6kz4SmQzpLFL8
pKaGEMCr/Q1YFHwhdUbZbbpfqHzo33kRJ5SUG/2b03FvCQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:05:26 2025 by rpki-client