Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32392e302f32342d3234203d3e203237373638.roa
File: 3230312e3231372e32392e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier: bePD9R1sCPEjwURVnHjM1j4WzYdMESVPIatEpFi7Xyc=
Subject key identifier: 89:FC:A7:23:02:C0:0E:31:70:6D:E2:6A:BD:65:F4:7E:B5:0B:BD:18
Certificate issuer: /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial: 348D7C4FE298C0689B50EA8376BC78A20EEAFE3F
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32392e302f32342d3234203d3e203237373638.roa
Signing time: Tue 04 Feb 2025 18:31:18 +0000
ROA not before: Tue 04 Feb 2025 18:26:18 +0000
ROA not after: Tue 03 Feb 2026 18:31:18 +0000
asID: 27768
IP address blocks: 201.217.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:8d:7c:4f:e2:98:c0:68:9b:50:ea:83:76:bc:78:a2:0e:ea:fe:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Validity
Not Before: Feb 4 18:26:18 2025 GMT
Not After : Feb 3 18:31:18 2026 GMT
Subject: CN=89FCA72302C00E31706DE26ABD65F47EB50BBD18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:6a:f8:41:ef:d6:9d:60:47:16:b3:ae:82:
c4:d5:9d:d7:51:2c:76:45:60:25:aa:67:40:09:36:
7c:ea:ba:5c:7f:58:a1:30:6e:aa:eb:03:f4:3f:66:
38:ae:40:9f:b4:f3:70:03:02:f3:2e:58:a7:60:55:
e0:b1:9c:65:7c:a5:8b:14:e2:00:78:d3:fe:37:54:
40:00:78:eb:c7:b8:9c:1e:e0:20:6c:f7:39:03:42:
bb:c1:18:8d:05:6f:26:82:eb:e1:a4:03:58:1e:f0:
44:45:3a:a1:bb:19:e4:3d:b4:56:64:84:11:5b:23:
22:ee:66:62:c6:3a:45:63:b6:64:0d:ce:8a:f1:d4:
c2:73:c0:2e:18:50:b8:f4:f2:05:e9:f7:5c:0d:e4:
d6:76:7f:2c:8b:f7:89:50:fe:87:75:89:bc:31:f5:
7d:66:63:fc:1b:48:7a:c8:7f:db:ba:bd:c0:39:6f:
81:ec:61:6d:bf:d4:60:85:0d:3f:47:37:25:84:80:
88:a3:9a:42:f2:ce:88:4b:17:8b:ba:37:88:3c:1c:
92:37:b2:99:ce:a3:86:0d:ed:47:f1:18:82:f4:22:
ba:9f:90:75:4e:66:b4:fd:b9:2b:d9:d6:18:3b:fe:
ab:c5:2c:00:9c:bc:65:06:ca:15:c3:5e:29:ab:da:
de:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FC:A7:23:02:C0:0E:31:70:6D:E2:6A:BD:65:F4:7E:B5:0B:BD:18
X509v3 Authority Key Identifier:
keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32392e302f32342d3234203d3e203237373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.29.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a7:f6:df:ad:48:14:84:e2:a6:54:d9:dc:44:4d:3e:f4:96:
01:0d:80:df:1b:5c:5d:0b:f3:51:42:77:97:b5:b0:e4:c4:73:
26:34:a8:0a:ed:5c:f2:b7:e8:8a:21:36:e6:40:71:70:93:c7:
2a:37:7f:6c:d9:65:0f:6b:34:34:e1:88:2b:07:04:bd:43:7e:
e1:0b:8c:48:a3:ed:e1:2e:ca:17:49:bc:5c:1b:f4:2a:2e:c0:
ee:02:6f:b2:55:f1:ce:2f:5c:80:c6:55:da:ed:9b:b2:d9:3b:
4b:10:5d:10:e5:3c:b9:88:c3:31:74:8e:d7:b4:68:8f:5c:a2:
82:5f:b1:25:89:8a:48:8c:8b:9d:43:1d:4d:fc:15:b5:76:42:
9f:81:e1:af:ec:00:f9:f8:f7:ed:22:87:05:80:b8:60:5a:37:
d6:fb:bb:eb:41:0a:d1:d9:bc:ed:03:a3:8f:3b:e6:4b:f6:34:
c9:de:db:e5:ec:2e:4a:b3:98:16:57:c7:24:1b:67:c0:bb:53:
99:6e:f0:a2:dc:a4:7d:fa:df:1c:1b:64:4a:90:0d:12:b6:43:
6d:58:79:8a:d0:27:54:7a:1e:44:da:75:00:41:09:3b:ac:f4:
1f:79:3e:cd:f9:b8:5f:85:e1:c8:45:27:e6:80:c7:84:8b:95:
ba:9b:11:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:41 2025 by rpki-client