Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/3230302e3231392e34342e302f32322d3232203d3e203332303938.roa
File: 3230302e3231392e34342e302f32322d3232203d3e203332303938.roa (raw, json)
Hash identifier: SObCJypddCVHjWwXsZ72BrURpueB7FDh8zZxEAN1+d0=
Subject key identifier: F1:5A:6C:9F:92:D3:B4:3A:B9:C6:3F:A7:9D:09:4E:B2:4B:98:99:8F
Certificate issuer: /CN=FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD
Certificate serial: 12CB81FAB0743D5A4CF311E747F1DD106C1168C2
Authority key identifier: FD:71:77:B4:4A:01:57:53:B2:E7:4C:CE:6E:5F:FC:84:38:D4:F4:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/3230302e3231392e34342e302f32322d3232203d3e203332303938.roa
Signing time: Tue 31 Dec 2024 20:20:00 +0000
ROA not before: Tue 31 Dec 2024 20:15:00 +0000
ROA not after: Tue 30 Dec 2025 20:20:00 +0000
asID: 32098
IP address blocks: 200.219.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cb:81:fa:b0:74:3d:5a:4c:f3:11:e7:47:f1:dd:10:6c:11:68:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD
Validity
Not Before: Dec 31 20:15:00 2024 GMT
Not After : Dec 30 20:20:00 2025 GMT
Subject: CN=F15A6C9F92D3B43AB9C63FA79D094EB24B98998F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:68:a4:0f:80:74:7b:85:b1:be:b6:1b:80:
2f:04:5d:cd:d2:8b:0d:c5:6e:ab:81:f2:d7:fd:fa:
e6:c2:e1:7f:79:ba:a7:df:61:65:12:4e:19:f8:13:
47:e7:41:eb:2b:65:b2:24:d4:13:2e:ef:eb:23:43:
af:34:33:03:e0:67:6e:ee:64:00:d3:6b:63:74:21:
3d:d2:d8:06:20:8d:8e:2c:b2:94:9c:0b:ea:12:4b:
37:0b:d3:53:9b:43:e3:1e:de:6e:f5:81:d3:d9:36:
47:d9:19:45:43:87:32:db:d9:80:12:55:4a:a3:3e:
52:83:5f:cc:e0:92:c2:6b:59:c2:b6:6a:12:08:0b:
19:5b:f0:e4:05:4a:bf:71:8a:57:ac:56:97:63:2e:
56:36:74:a7:c0:5e:64:92:71:3e:bf:46:4b:0c:b1:
ec:4c:fe:79:53:c7:98:3f:9a:e4:cd:57:f3:2c:fa:
b4:d7:fc:2f:df:e2:0f:3e:4c:9e:21:30:95:16:f5:
cd:20:af:03:b0:19:78:a6:c1:d9:b2:b1:0f:10:ba:
58:23:f0:96:bc:d8:f2:fd:c8:91:eb:c1:cf:5e:79:
87:2c:0a:27:31:58:70:3d:55:dd:25:a4:34:70:ee:
9a:77:f9:ef:70:b7:9b:8b:d0:89:1e:2e:49:13:b8:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5A:6C:9F:92:D3:B4:3A:B9:C6:3F:A7:9D:09:4E:B2:4B:98:99:8F
X509v3 Authority Key Identifier:
keyid:FD:71:77:B4:4A:01:57:53:B2:E7:4C:CE:6E:5F:FC:84:38:D4:F4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/3230302e3231392e34342e302f32322d3232203d3e203332303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.44.0/22
Signature Algorithm: sha256WithRSAEncryption
76:35:f7:e1:bc:bc:90:b4:c8:83:8c:c8:8f:6f:93:ba:14:44:
6c:09:46:ad:8d:d2:0c:9b:e3:5d:e3:c4:21:a5:66:e4:24:5d:
29:04:8a:f8:6a:7e:0b:67:e5:78:2a:f3:1c:f9:11:c4:75:20:
50:dc:75:14:79:4f:3b:1b:9b:c9:62:03:ec:b4:bf:ce:dc:9d:
96:f4:8f:e6:d6:02:a9:b1:c9:a2:72:43:b5:56:17:c9:58:2a:
3c:03:16:d7:c3:2c:70:e8:bd:9a:76:54:40:e0:b1:b8:ec:c2:
a4:15:b8:76:e3:15:75:69:53:f4:2b:6e:ad:74:2f:25:cb:25:
fa:40:f0:d4:06:c4:c0:d4:3d:81:4a:34:9e:75:f7:f9:18:36:
97:98:d0:5f:d1:e0:32:85:61:59:a3:b1:88:40:ac:0d:55:9b:
e3:69:5c:a5:ed:2b:bb:98:6f:6a:16:19:40:9d:a4:a4:d4:06:
86:9a:61:64:7b:cf:f5:db:1d:f7:91:72:e6:ac:35:35:34:d2:
b0:f5:29:05:12:3d:04:66:32:3d:75:3d:80:53:ae:9a:94:5f:
b5:70:46:9a:e6:14:ed:23:4a:2a:b7:f6:ef:0d:ed:d0:48:f3:
76:3a:d8:a0:9c:8b:77:ea:3d:2e:4d:f4:e2:53:4e:2b:86:e3:
96:19:10:91
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEsuB+rB0PVpM8xHnR/HdEGwRaMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ3MTc3QjQ0QTAxNTc1M0IyRTc0Q0NFNkU1RkZDODQz
OEQ0RjRBRDAeFw0yNDEyMzEyMDE1MDBaFw0yNTEyMzAyMDIwMDBaMDMxMTAvBgNV
BAMTKEYxNUE2QzlGOTJEM0I0M0FCOUM2M0ZBNzlEMDk0RUIyNEI5ODk5OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+WikD4B0e4WxvrYbgC8EXc3S
iw3FbquB8tf9+ubC4X95uqffYWUSThn4E0fnQesrZbIk1BMu7+sjQ680MwPgZ27u
ZADTa2N0IT3S2AYgjY4sspScC+oSSzcL01ObQ+Me3m71gdPZNkfZGUVDhzLb2YAS
VUqjPlKDX8zgksJrWcK2ahIICxlb8OQFSr9xilesVpdjLlY2dKfAXmSScT6/RksM
sexM/nlTx5g/muTNV/Ms+rTX/C/f4g8+TJ4hMJUW9c0grwOwGXimwdmysQ8Qulgj
8Ja82PL9yJHrwc9eeYcsCicxWHA9Vd0lpDRw7pp3+e9wt5uL0IkeLkkTuBRxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8Vpsn5LTtDq5xj+nnQlOskuYmY8wHwYDVR0j
BBgwFoAU/XF3tEoBV1Oy50zObl/8hDjU9K0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRTczRjJGQjFDQ0IwOEIxNDY1QjgyNDdCMzZFNEQ2NEY5
NjUzMTlCMEY1RkM2RTE1MEE3Rjk1RkFCMjc4MkRFLzAvRkQ3MTc3QjQ0QTAxNTc1
M0IyRTc0Q0NFNkU1RkZDODQzOEQ0RjRBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRDcxNzdCNDRBMDE1NzUzQjJF
NzRDQ0U2RTVGRkM4NDM4RDRGNEFELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUU3M0YyRkIxQ0NCMDhCMTQ2NUI4MjQ3QjM2RTRENjRGOTY1MzE5QjBG
NUZDNkUxNTBBN0Y5NUZBQjI3ODJERS8wLzMyMzAzMDJlMzIzMTM5MmUzNDM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzMjMwMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsjbLDAN
BgkqhkiG9w0BAQsFAAOCAQEAdjX34by8kLTIg4zIj2+TuhREbAlGrY3SDJvjXePE
IaVm5CRdKQSK+Gp+C2fleCrzHPkRxHUgUNx1FHlPOxubyWID7LS/ztydlvSP5tYC
qbHJonJDtVYXyVgqPAMW18MscOi9mnZUQOCxuOzCpBW4duMVdWlT9CturXQvJcsl
+kDw1AbEwNQ9gUo0nnX3+Rg2l5jQX9HgMoVhWaOxiECsDVWb42lcpe0ru5hvahYZ
QJ2kpNQGhpphZHvP9dsd95Fy5qw1NTTSsPUpBRI9BGYyPXU9gFOumpRftXBGmuYU
7SNKKrf27w3t0EjzdjrYoJyLd+o9Lk304lNOK4bjlhkQkQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:37:51 2025 by rpki-client