Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230312e3233382e3132382e302f31382d3234203d3e203237363638.roa
File: 3230312e3233382e3132382e302f31382d3234203d3e203237363638.roa (raw, json)
Hash identifier: Irvj2KPglk8hFDNMxyuJimjosf/zUI6hR1LiRx9QsBs=
Subject key identifier: 15:99:02:E0:3D:C8:FD:4A:89:27:E4:56:82:D1:E9:08:3A:D6:32:BE
Certificate issuer: /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial: 66AC8ACF6ED38655820CE1E7D1468AAF9E98993C
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230312e3233382e3132382e302f31382d3234203d3e203237363638.roa
Signing time: Tue 04 Feb 2025 19:57:47 +0000
ROA not before: Tue 04 Feb 2025 19:52:47 +0000
ROA not after: Tue 03 Feb 2026 19:57:47 +0000
asID: 27668
IP address blocks: 201.238.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ac:8a:cf:6e:d3:86:55:82:0c:e1:e7:d1:46:8a:af:9e:98:99:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Validity
Not Before: Feb 4 19:52:47 2025 GMT
Not After : Feb 3 19:57:47 2026 GMT
Subject: CN=159902E03DC8FD4A8927E45682D1E9083AD632BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:75:9c:26:03:a3:ec:b2:a0:6c:12:17:fe:
f4:d3:2c:8e:b7:53:22:4a:f4:72:57:4e:7a:80:ba:
51:d2:fb:b6:78:79:f7:ef:90:6e:4c:1b:06:50:3e:
a0:2f:1b:1d:57:0d:b0:bf:fd:c6:a3:ca:60:60:8c:
c2:3a:e2:41:94:0e:cf:52:fa:73:7d:0c:d4:f6:71:
4b:1e:1d:52:12:04:54:d7:4c:e6:47:f4:1e:ed:ee:
45:a5:c1:86:ea:fe:ef:91:60:96:58:73:6d:8d:59:
69:0e:2f:f6:20:69:be:03:b5:5b:99:0c:f5:30:08:
58:a8:da:03:4a:a9:58:2a:a3:65:9b:b8:ba:ea:91:
dc:c7:c0:1c:5a:c4:91:68:16:63:c3:6c:fa:53:07:
aa:3b:d8:99:5c:14:af:3e:93:9d:1b:d1:0b:c8:b1:
c1:9a:e0:90:41:10:72:1e:ee:17:09:c6:37:fd:e5:
d2:db:6c:09:1e:b0:bf:a9:59:d9:ba:1b:3e:2c:a0:
44:09:7e:6c:c2:87:78:be:fe:0c:38:cd:bb:51:62:
b9:fc:e9:46:76:bc:0a:ea:9e:4f:91:cd:c3:71:72:
45:cc:d6:2f:21:64:86:3b:83:01:5f:8f:d5:8f:99:
81:6a:20:d8:22:19:09:2e:a7:92:ea:ed:58:d2:68:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:99:02:E0:3D:C8:FD:4A:89:27:E4:56:82:D1:E9:08:3A:D6:32:BE
X509v3 Authority Key Identifier:
keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230312e3233382e3132382e302f31382d3234203d3e203237363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.238.128.0/18
Signature Algorithm: sha256WithRSAEncryption
41:93:ad:ec:9b:ea:e6:af:ba:fa:13:71:fb:bd:01:e2:7a:d5:
7d:ef:31:43:f4:1f:dd:4f:fc:d8:c9:b3:fd:37:4e:4f:86:20:
04:f6:9f:77:0c:f7:56:c0:1a:6e:61:8c:c0:ac:57:58:0e:8f:
d1:27:4c:08:26:e5:85:9e:a9:99:e4:37:88:25:a2:7f:b2:47:
4d:7a:d4:73:96:be:91:db:72:55:38:8d:d3:f1:cd:d2:4e:f9:
85:fd:d1:b2:ed:3a:bd:02:da:50:82:44:43:14:3b:18:91:2b:
af:62:34:d1:62:50:fe:4b:da:33:07:c9:7f:f1:af:ec:06:4d:
be:07:a6:b3:ea:29:ee:2d:32:e3:1d:a3:99:9b:5b:ea:16:58:
98:89:d2:af:34:73:32:ce:cd:e1:6c:e5:f4:38:f9:7b:be:c6:
4a:92:7c:e1:63:e1:e8:6f:b3:4d:97:3d:8c:8b:3b:b2:5f:3b:
ee:f6:ca:5e:ed:d9:de:74:2e:ae:72:16:43:08:58:8f:c9:b2:
7b:ae:f0:fc:20:85:5c:bd:b9:2a:f8:13:1f:71:07:47:cc:63:
43:26:ec:ba:b7:07:98:0f:59:ca:c5:c6:f6:d8:ef:88:f7:85:
95:e8:d6:a4:af:60:91:0a:d9:3f:f4:da:b8:f6:a2:fe:20:1e:
c9:ce:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:40:52 2025 by rpki-client