Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e33392e39362e302f31392d3234203d3e203139333332.roa
File: 3230302e33392e39362e302f31392d3234203d3e203139333332.roa (raw, json)
Hash identifier: EVPfU/YWHputbtS3Gz8oXsbz8sOoCpjWgF8WJ8FICc4=
Subject key identifier: FF:F1:70:47:F7:AA:AF:91:9A:55:97:B7:3C:FB:92:FD:16:52:E4:C6
Certificate issuer: /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial: 7706D32BC543DA6687AA5C45284961D6B2B6D64F
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e33392e39362e302f31392d3234203d3e203139333332.roa
Signing time: Tue 04 Feb 2025 18:10:52 +0000
ROA not before: Tue 04 Feb 2025 18:05:52 +0000
ROA not after: Tue 03 Feb 2026 18:10:52 +0000
asID: 19332
IP address blocks: 200.39.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:06:d3:2b:c5:43:da:66:87:aa:5c:45:28:49:61:d6:b2:b6:d6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Validity
Not Before: Feb 4 18:05:52 2025 GMT
Not After : Feb 3 18:10:52 2026 GMT
Subject: CN=FFF17047F7AAAF919A5597B73CFB92FD1652E4C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:3f:fa:dc:7f:48:50:9b:53:95:65:ec:f9:
d0:b5:1d:b5:60:aa:b2:1e:a5:f6:24:1e:72:59:17:
a9:18:52:18:40:e6:77:b5:29:e8:cf:e1:ec:b9:2c:
1d:b9:bc:20:18:a0:14:66:f2:87:c8:28:09:58:02:
d5:e6:13:d9:ed:05:e5:b6:f7:65:f2:f2:90:fa:cf:
88:22:71:c3:68:85:3f:c3:ea:e1:16:c3:02:41:6e:
e6:3f:68:40:67:08:87:41:2b:59:54:f2:16:10:d0:
df:ae:ec:63:74:88:99:29:6f:3c:f8:29:fb:5a:fb:
b8:e0:04:2d:c6:cd:93:86:d3:f5:f0:10:59:41:f4:
a4:17:f9:85:6c:b7:a3:b6:7d:91:51:ae:84:6a:d3:
25:37:eb:63:dd:8a:09:f1:d2:66:dc:0e:ce:9f:a8:
4c:b9:b1:2e:17:a7:a9:df:23:5f:9a:17:25:b2:2c:
ec:af:e5:6e:34:19:9b:76:f5:39:8a:b6:4c:40:3e:
5e:a7:53:75:3e:b1:35:d1:a6:ef:e1:a0:3d:d9:fe:
63:ad:1d:b5:67:79:bc:d4:28:28:e3:61:99:36:be:
1a:a3:78:bf:85:87:f2:5a:33:b7:dc:01:65:da:a8:
6e:ed:fc:80:5f:ba:b5:ea:ed:2f:d2:a3:4e:65:e0:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:70:47:F7:AA:AF:91:9A:55:97:B7:3C:FB:92:FD:16:52:E4:C6
X509v3 Authority Key Identifier:
keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e33392e39362e302f31392d3234203d3e203139333332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.39.96.0/19
Signature Algorithm: sha256WithRSAEncryption
45:69:92:d7:26:7f:72:e5:e9:e1:50:3f:3f:0d:a4:c4:9f:47:
46:91:88:25:a5:85:22:e4:b5:1b:88:0f:a2:96:e5:c0:9c:5a:
0e:20:6c:d6:f6:09:6e:36:0a:0b:63:66:33:40:2c:38:a0:02:
a6:f9:60:3d:c6:8e:8b:1c:ff:a7:fc:02:36:03:7f:bc:5d:8d:
04:2e:ac:61:ad:a3:cb:8e:fb:d3:c6:47:68:01:ef:0b:87:db:
3a:a0:90:33:68:94:2e:68:5b:24:54:48:a4:b0:b1:d4:54:a1:
36:b8:c6:20:40:97:86:a4:95:7f:5d:53:2c:38:17:5c:b9:26:
80:f3:a9:57:02:96:48:c7:e7:14:6f:72:02:41:98:f3:fe:43:
42:f0:41:17:4c:7f:95:39:40:b5:a6:c4:b3:bd:c0:d3:9b:42:
09:84:d5:a5:d4:a9:5a:64:87:56:61:a5:5c:37:74:e9:29:d3:
cd:13:8f:0a:98:52:32:aa:98:ce:76:2e:5b:9e:13:e9:ea:49:
26:bb:1a:17:32:45:f7:5e:f8:f3:46:94:bf:37:13:2d:bb:4a:
fe:c3:d6:17:1e:d3:99:9a:57:24:09:84:b1:cc:ab:8e:b8:1c:
5f:0f:02:82:07:d3:a1:e0:70:45:d7:04:d9:17:a5:13:78:57:
b4:2d:04:07
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUdwbTK8VD2maHqlxFKElh1rK21k8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU1REI0NkM0RUZBRUE3NjA1NjEzNzZDOUE1RjM1ODcz
QjlGMTU2NzAeFw0yNTAyMDQxODA1NTJaFw0yNjAyMDMxODEwNTJaMDMxMTAvBgNV
BAMTKEZGRjE3MDQ3RjdBQUFGOTE5QTU1OTdCNzNDRkI5MkZEMTY1MkU0QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFj/63H9IUJtTlWXs+dC1HbVg
qrIepfYkHnJZF6kYUhhA5ne1KejP4ey5LB25vCAYoBRm8ofIKAlYAtXmE9ntBeW2
92Xy8pD6z4giccNohT/D6uEWwwJBbuY/aEBnCIdBK1lU8hYQ0N+u7GN0iJkpbzz4
Kfta+7jgBC3GzZOG0/XwEFlB9KQX+YVst6O2fZFRroRq0yU362Pdignx0mbcDs6f
qEy5sS4Xp6nfI1+aFyWyLOyv5W40GZt29TmKtkxAPl6nU3U+sTXRpu/hoD3Z/mOt
HbVnebzUKCjjYZk2vhqjeL+Fh/JaM7fcAWXaqG7t/IBfurXq7S/So05l4MVfAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU//FwR/eqr5GaVZe3PPuS/RZS5MYwHwYDVR0j
BBgwFoAUlV20bE766nYFYTdsml81hzufFWcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOEJEMzE2RjdBNzAwMjJCMERCNUM1NUExMDc3MUIwMjZC
QTBCODVBNkIzNjg5NTMxQzMyN0NENTk2RDYwNkY1LzAvOTU1REI0NkM0RUZBRUE3
NjA1NjEzNzZDOUE1RjM1ODczQjlGMTU2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTVEQjQ2QzRFRkFFQTc2MDU2
MTM3NkM5QTVGMzU4NzNCOUYxNTY3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQThCRDMxNkY3QTcwMDIyQjBEQjVDNTVBMTA3NzFCMDI2QkEwQjg1QTZC
MzY4OTUzMUMzMjdDRDU5NkQ2MDZGNS8wLzMyMzAzMDJlMzMzOTJlMzkzNjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzkzMzMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXIJ2AwDQYJ
KoZIhvcNAQELBQADggEBAEVpktcmf3Ll6eFQPz8NpMSfR0aRiCWlhSLktRuID6KW
5cCcWg4gbNb2CW42CgtjZjNALDigAqb5YD3Gjosc/6f8AjYDf7xdjQQurGGto8uO
+9PGR2gB7wuH2zqgkDNolC5oWyRUSKSwsdRUoTa4xiBAl4aklX9dUyw4F1y5JoDz
qVcClkjH5xRvcgJBmPP+Q0LwQRdMf5U5QLWmxLO9wNObQgmE1aXUqVpkh1ZhpVw3
dOkp080TjwqYUjKqmM52LlueE+nqSSa7GhcyRfde+PNGlL83Ey27Sv7D1hce05ma
VyQJhLHMq464HF8PAoIH06HgcEXXBNkXpRN4V7QtBAc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:04 2025 by rpki-client