Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3232382e302f32342d3234203d3e203237373237.roa
File: 3230302e36312e3232382e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier: I0HA66tpYHIGq/wkORbLVV2L/YaqdYHoZSpFGVLJ/yc=
Subject key identifier: ED:35:CD:2C:6A:64:B3:2D:1F:A5:49:92:CB:70:00:06:89:1A:B5:0D
Certificate issuer: /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial: 20335892E1B81B46D7C37CE4E97C260B28B37B37
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3232382e302f32342d3234203d3e203237373237.roa
Signing time: Tue 04 Feb 2025 18:03:52 +0000
ROA not before: Tue 04 Feb 2025 17:58:52 +0000
ROA not after: Tue 03 Feb 2026 18:03:52 +0000
asID: 27727
IP address blocks: 200.61.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:33:58:92:e1:b8:1b:46:d7:c3:7c:e4:e9:7c:26:0b:28:b3:7b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Validity
Not Before: Feb 4 17:58:52 2025 GMT
Not After : Feb 3 18:03:52 2026 GMT
Subject: CN=ED35CD2C6A64B32D1FA54992CB700006891AB50D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:ee:94:0b:de:cf:08:3c:c6:2b:91:43:b0:
e4:c3:04:62:78:4d:b3:67:81:74:12:fe:2d:bb:f9:
06:95:4a:11:08:92:93:3f:52:5c:ab:e2:60:99:36:
be:a2:8e:2d:90:88:37:17:80:69:f9:0d:ca:ba:55:
08:85:c3:ee:81:7c:36:f1:b4:68:49:81:d8:17:98:
f9:3c:b1:8d:00:56:d5:2e:a2:55:0c:36:10:64:0f:
7d:91:b8:80:e6:3c:dd:b6:48:36:98:66:e3:4d:e7:
a2:5d:3d:1c:7d:1a:91:67:c2:e1:86:0f:c3:d6:44:
e7:12:3a:57:aa:60:e7:0b:4a:f1:5f:f3:88:b6:ae:
e9:6e:90:8a:cd:08:79:02:cd:e1:c4:95:e5:66:01:
e0:c6:7b:7b:27:a0:c8:3f:6a:04:a0:6d:31:61:d7:
6d:90:3a:2e:3f:42:a1:9f:03:b7:9a:66:e4:c8:09:
6b:61:66:b7:5b:73:96:dd:67:8d:a2:f6:ec:73:d1:
15:18:df:b3:90:fa:52:12:bd:10:db:3b:81:24:7c:
fd:f1:6c:db:b0:81:e0:cc:ed:55:21:eb:34:8c:41:
b4:e6:b0:43:4c:01:1e:20:53:79:b2:4c:8c:3f:14:
8d:95:71:0e:e5:d4:6f:b6:97:f8:89:c1:b7:ab:63:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:35:CD:2C:6A:64:B3:2D:1F:A5:49:92:CB:70:00:06:89:1A:B5:0D
X509v3 Authority Key Identifier:
keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3232382e302f32342d3234203d3e203237373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.61.228.0/24
Signature Algorithm: sha256WithRSAEncryption
07:09:f2:9e:fb:40:ea:fb:d3:ed:24:9c:f6:27:ef:a9:a8:62:
3f:ef:02:af:d9:63:6d:1a:a8:fd:5d:51:42:de:5a:f0:6a:cd:
02:1f:bc:b7:d5:3b:71:42:48:57:97:2d:9b:b3:b4:01:4c:f8:
e1:a6:e0:7d:e2:81:96:1e:40:b1:d1:0c:a5:83:f8:f2:1a:d0:
6b:d6:f6:e8:02:18:ba:27:fd:e2:41:5f:b0:f3:4f:91:04:60:
14:12:a1:ad:87:f4:5f:a3:64:5b:5a:a3:e4:96:9b:0f:39:53:
53:a2:2f:b8:6e:d7:2b:10:ef:eb:cf:ba:ac:0e:20:10:59:22:
75:66:1d:be:94:c6:46:59:e9:c7:53:63:15:f6:a4:b4:04:3b:
6a:6f:03:dc:4f:db:07:53:d5:9b:67:f7:c9:84:47:1a:6b:66:
f7:d4:cf:4d:f9:e6:d2:9f:c2:fc:db:3f:8c:0e:83:ef:51:0a:
12:39:4c:e4:7b:23:aa:f8:b1:fe:82:ea:df:a7:67:9d:db:a1:
e6:73:74:11:90:a4:c3:8c:5e:24:35:16:51:d8:a1:02:ea:6c:
1b:78:34:f9:88:c1:7e:7e:4f:7a:c1:1e:18:b4:2a:0e:ba:70:
7f:2c:3a:12:35:f2:0f:69:2b:88:8f:76:16:01:7d:5d:84:6e:
82:3c:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:58 2025 by rpki-client