Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3232322e302f32342d3234203d3e203230303135.roa
File: 3230302e37312e3232322e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier: t4fOvxv8Qyloouj3xoTBBqdoCzVIntF5juEyALG17Wk=
Subject key identifier: A4:D8:36:D1:8E:AA:BE:76:74:42:CF:79:95:00:C6:CB:6D:D8:9D:A4
Certificate issuer: /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial: 2902307A1335510FBF17087F6D0543280E9AA086
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3232322e302f32342d3234203d3e203230303135.roa
Signing time: Tue 04 Feb 2025 18:52:16 +0000
ROA not before: Tue 04 Feb 2025 18:47:16 +0000
ROA not after: Tue 03 Feb 2026 18:52:16 +0000
asID: 20015
IP address blocks: 200.71.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:02:30:7a:13:35:51:0f:bf:17:08:7f:6d:05:43:28:0e:9a:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Validity
Not Before: Feb 4 18:47:16 2025 GMT
Not After : Feb 3 18:52:16 2026 GMT
Subject: CN=A4D836D18EAABE767442CF799500C6CB6DD89DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:04:85:f2:c9:e6:88:e9:c7:59:67:b8:91:
8c:44:e4:78:fd:83:b5:da:ff:7d:74:6e:d8:83:b0:
f3:70:36:2b:7f:c3:43:f0:51:94:d9:99:4f:33:96:
77:0f:63:c7:95:88:a6:21:5c:27:00:db:b2:7e:dd:
f3:5f:37:3d:97:ad:da:34:d8:fa:d6:b8:96:8f:14:
e2:04:9c:33:db:56:08:93:3c:22:4e:a3:2a:7d:4a:
e4:a6:9e:4d:16:ef:e4:fd:cb:9c:d0:19:8d:c8:e1:
b9:08:83:0a:c8:ed:b4:26:1b:07:cf:0a:5c:be:32:
2e:ee:a2:28:de:68:0d:50:73:fb:44:82:81:0f:d4:
be:31:17:37:ef:dc:0b:2c:d5:a1:cb:db:82:02:6f:
d1:18:2e:ca:de:ff:80:76:eb:f9:ff:4c:60:62:d4:
aa:9e:86:f3:10:39:cc:ec:1b:a2:0c:8d:76:b9:59:
25:9d:9b:85:74:38:9c:19:a6:d0:a1:dc:48:4e:1a:
06:0b:54:0c:eb:7e:60:93:db:e3:cb:05:ae:2b:a0:
fc:a3:0e:93:2a:4e:ca:f3:f9:4d:10:50:e0:06:f9:
ed:98:ea:08:a1:a6:6e:c8:d2:3c:0c:07:85:f6:4a:
79:be:c1:9b:1e:71:01:a1:5f:07:fa:1a:b2:ad:ea:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D8:36:D1:8E:AA:BE:76:74:42:CF:79:95:00:C6:CB:6D:D8:9D:A4
X509v3 Authority Key Identifier:
keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3232322e302f32342d3234203d3e203230303135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.222.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1b:3f:cd:91:66:64:ec:89:f1:dd:28:e0:93:82:ab:9e:c8:
19:28:59:7f:2e:e3:ce:c9:cb:14:79:1a:96:49:2a:2e:88:6c:
74:8b:91:3a:68:91:78:f4:35:06:88:e9:5e:e9:92:38:73:8f:
91:96:c9:15:11:67:cb:38:08:33:4c:f9:8a:5d:59:b1:15:14:
82:d6:9d:c1:e3:03:03:50:38:70:ea:66:4c:42:4d:3d:cb:6f:
e8:68:62:f8:3c:bd:2f:a9:37:90:ea:13:d6:07:2d:08:35:d9:
80:3f:75:5f:01:13:e9:6b:db:a5:a6:02:58:9a:10:f4:73:82:
aa:fc:14:15:a1:f9:e5:23:73:9c:f4:5e:d7:8a:d4:69:cd:3d:
f0:af:24:fe:aa:fe:38:2b:f8:1d:ec:32:78:25:69:89:96:de:
d1:5a:54:94:e4:6f:02:35:af:ac:4e:7e:b9:fc:97:7a:1f:d1:
a9:6b:f6:4b:db:53:0b:ef:67:6c:36:04:87:07:53:67:11:df:
e4:52:c4:6c:9a:df:67:22:94:e6:5a:9d:59:12:42:7c:36:ce:
33:c1:54:62:47:d5:69:3e:2c:87:38:ac:7a:ec:16:ea:9f:27:
96:77:44:e1:ad:9e:9a:32:f1:4e:31:fc:37:8f:d0:a3:3a:18:
7f:8a:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:19 2025 by rpki-client