Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/3230302e3231392e34342e302f32322d3332203d3e20323730313137.roa
File: 3230302e3231392e34342e302f32322d3332203d3e20323730313137.roa (raw, json)
Hash identifier: bF3tt+GRqjvcNEX0TWYutdGjlSBxQtYhqjTXmykT+X4=
Subject key identifier: C1:2B:0E:9C:FD:7D:8B:B5:A7:BE:6B:95:F1:9F:E9:23:D6:C9:7C:16
Certificate issuer: /CN=FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD
Certificate serial: 4A78534DEFB73011472C7C6581E3EF9114BC7C9D
Authority key identifier: FD:71:77:B4:4A:01:57:53:B2:E7:4C:CE:6E:5F:FC:84:38:D4:F4:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/3230302e3231392e34342e302f32322d3332203d3e20323730313137.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 23:55:00 +0000
ROA not after: Wed 31 Dec 2025 00:00:00 +0000
asID: 270117
IP address blocks: 200.219.44.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:78:53:4d:ef:b7:30:11:47:2c:7c:65:81:e3:ef:91:14:bc:7c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD
Validity
Not Before: Dec 31 23:55:00 2024 GMT
Not After : Dec 31 00:00:00 2025 GMT
Subject: CN=C12B0E9CFD7D8BB5A7BE6B95F19FE923D6C97C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:62:63:44:3f:73:8a:12:4c:82:5d:4e:fd:
b1:a1:4f:7f:5b:df:4d:35:26:2d:58:58:c8:de:8d:
af:a5:38:1e:74:40:0a:ab:d3:da:ac:70:bc:f0:be:
88:26:0f:ac:02:b9:40:7f:de:87:2e:f4:2f:b7:76:
ad:49:3c:5b:0b:2b:6e:d4:c8:02:8b:7e:cd:c1:e6:
5d:4c:1a:63:12:53:fb:62:9a:b6:76:c6:60:e0:2b:
66:a6:37:a5:74:ea:e1:2b:ba:7b:c4:e8:e9:80:47:
9e:f6:7e:f2:1e:c6:54:4b:7f:d4:a9:a6:5a:c8:72:
12:af:76:95:48:57:35:86:08:0a:cc:46:23:90:c9:
6f:7b:7c:c8:c4:65:b2:75:6a:be:bd:65:ca:e5:57:
d9:a0:14:db:5c:35:96:37:6d:dc:fd:43:99:b9:52:
aa:d5:5f:67:92:53:98:7a:b2:e0:58:aa:ea:61:e8:
c8:c7:25:51:f5:b4:8f:c5:73:87:7c:fd:f4:d9:e3:
76:50:bd:b7:6e:b7:01:16:43:6e:5c:46:cb:43:fb:
ce:aa:21:cc:a9:6d:7c:1c:53:18:83:29:36:5d:4a:
c1:51:8c:45:c9:a3:5f:16:d6:bc:9e:40:16:00:59:
fd:3e:18:d2:9a:21:e5:30:22:44:d1:13:c9:a8:c1:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2B:0E:9C:FD:7D:8B:B5:A7:BE:6B:95:F1:9F:E9:23:D6:C9:7C:16
X509v3 Authority Key Identifier:
keyid:FD:71:77:B4:4A:01:57:53:B2:E7:4C:CE:6E:5F:FC:84:38:D4:F4:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/3230302e3231392e34342e302f32322d3332203d3e20323730313137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.219.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:3e:f9:1f:9a:23:a4:a9:5d:f1:fe:ab:79:56:2f:21:d4:8f:
58:0a:71:ed:75:0a:6d:b9:a0:15:82:d6:89:df:b2:c7:b6:68:
e5:61:63:de:3f:6e:17:a6:b8:0c:08:76:4a:97:dd:3b:71:6c:
5c:41:df:42:79:90:81:82:54:31:1f:f5:e9:27:1b:bc:31:fd:
10:21:5d:b6:1d:7a:a1:dd:fc:14:01:24:ef:b8:6f:f9:d5:a1:
f3:d5:21:14:32:62:19:d2:54:3b:b8:5e:84:9d:eb:e3:1f:ea:
27:f9:48:a5:6e:eb:25:89:ea:e5:f2:4b:0e:da:4f:72:69:fe:
94:a3:fa:f6:71:10:12:82:3c:bf:68:de:d9:c1:4c:64:19:df:
77:6d:5d:ee:7a:f5:19:4a:50:59:b9:ef:37:0f:f2:e9:aa:b4:
44:bd:ed:87:99:92:e7:7f:04:b1:69:82:84:34:07:02:5a:d1:
90:0b:6e:50:2d:30:84:55:72:fe:8b:b7:56:b6:40:bd:a1:db:
28:82:07:09:29:62:76:a4:60:72:98:21:3d:8c:77:73:d5:9a:
2c:b9:b6:5a:41:64:0a:b0:f5:0a:ed:92:88:e2:20:cd:66:8c:
8c:d7:3a:9b:a7:7d:20:2b:e7:1f:1b:d6:ab:05:d4:fd:af:2a:
2b:6e:c7:af
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSnhTTe+3MBFHLHxlgePvkRS8fJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ3MTc3QjQ0QTAxNTc1M0IyRTc0Q0NFNkU1RkZDODQz
OEQ0RjRBRDAeFw0yNDEyMzEyMzU1MDBaFw0yNTEyMzEwMDAwMDBaMDMxMTAvBgNV
BAMTKEMxMkIwRTlDRkQ3RDhCQjVBN0JFNkI5NUYxOUZFOTIzRDZDOTdDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4P2JjRD9zihJMgl1O/bGhT39b
3001Ji1YWMjeja+lOB50QAqr09qscLzwvogmD6wCuUB/3ocu9C+3dq1JPFsLK27U
yAKLfs3B5l1MGmMSU/timrZ2xmDgK2amN6V06uErunvE6OmAR572fvIexlRLf9Sp
plrIchKvdpVIVzWGCArMRiOQyW97fMjEZbJ1ar69ZcrlV9mgFNtcNZY3bdz9Q5m5
UqrVX2eSU5h6suBYquph6MjHJVH1tI/Fc4d8/fTZ43ZQvbdutwEWQ25cRstD+86q
IcypbXwcUxiDKTZdSsFRjEXJo18W1ryeQBYAWf0+GNKaIeUwIkTRE8mowbCHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwSsOnP19i7WnvmuV8Z/pI9bJfBYwHwYDVR0j
BBgwFoAU/XF3tEoBV1Oy50zObl/8hDjU9K0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRTczRjJGQjFDQ0IwOEIxNDY1QjgyNDdCMzZFNEQ2NEY5
NjUzMTlCMEY1RkM2RTE1MEE3Rjk1RkFCMjc4MkRFLzAvRkQ3MTc3QjQ0QTAxNTc1
M0IyRTc0Q0NFNkU1RkZDODQzOEQ0RjRBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRDcxNzdCNDRBMDE1NzUzQjJF
NzRDQ0U2RTVGRkM4NDM4RDRGNEFELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUU3M0YyRkIxQ0NCMDhCMTQ2NUI4MjQ3QjM2RTRENjRGOTY1MzE5QjBG
NUZDNkUxNTBBN0Y5NUZBQjI3ODJERS8wLzMyMzAzMDJlMzIzMTM5MmUzNDM0MmUz
MDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMwMzEzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyNss
MA0GCSqGSIb3DQEBCwUAA4IBAQAKPvkfmiOkqV3x/qt5Vi8h1I9YCnHtdQptuaAV
gtaJ37LHtmjlYWPeP24XprgMCHZKl907cWxcQd9CeZCBglQxH/XpJxu8Mf0QIV22
HXqh3fwUASTvuG/51aHz1SEUMmIZ0lQ7uF6EnevjH+on+Uilbuslierl8ksO2k9y
af6Uo/r2cRASgjy/aN7ZwUxkGd93bV3uevUZSlBZue83D/LpqrREve2HmZLnfwSx
aYKENAcCWtGQC25QLTCEVXL+i7dWtkC9odsoggcJKWJ2pGBymCE9jHdz1ZosubZa
QWQKsPUK7ZKI4iDNZoyM1zqbp30gK+cfG9arBdT9ryorbsev
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:40:26 2025 by rpki-client