Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132332e302f32342d3234203d3e203237383236.roa
File: 3230302e31362e3132332e302f32342d3234203d3e203237383236.roa (raw, json)
Hash identifier: GSYYweWbxGi1WKAl4N8JRHdnQEfDGgYGVg8YGIu0KY8=
Subject key identifier: D6:FE:28:A7:F2:E9:2B:03:4E:8D:DA:89:E2:7A:F3:DD:FA:0B:B7:CD
Certificate issuer: /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial: 2E38C1BAAEFC7DBFE224613D3FE49BB0A493D2D3
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132332e302f32342d3234203d3e203237383236.roa
Signing time: Tue 04 Feb 2025 18:26:42 +0000
ROA not before: Tue 04 Feb 2025 18:21:42 +0000
ROA not after: Tue 03 Feb 2026 18:26:42 +0000
asID: 27826
IP address blocks: 200.16.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:38:c1:ba:ae:fc:7d:bf:e2:24:61:3d:3f:e4:9b:b0:a4:93:d2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Validity
Not Before: Feb 4 18:21:42 2025 GMT
Not After : Feb 3 18:26:42 2026 GMT
Subject: CN=D6FE28A7F2E92B034E8DDA89E27AF3DDFA0BB7CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:bc:e3:72:9e:94:e2:ea:64:ba:e7:cc:09:
24:5f:90:7b:97:24:f5:da:a9:25:04:91:47:52:05:
19:84:ad:46:36:c8:b2:b6:4b:64:fb:4d:80:ce:ff:
60:6d:e6:2b:04:65:46:13:7d:46:8c:5a:28:8d:60:
c0:92:12:2f:25:1e:5e:75:e2:1e:98:5f:7e:ba:69:
1c:bd:7b:56:55:35:a3:6d:7a:15:28:f3:a1:0f:f7:
3d:3b:da:17:c8:18:99:db:14:dc:f1:b7:ce:6f:dd:
0e:0b:fe:c5:10:df:d9:7a:a4:76:b0:e8:c6:19:b6:
b5:4b:ff:eb:35:c0:25:e4:64:e6:c5:df:56:3f:a9:
3b:a1:ad:40:75:5f:f2:38:2b:b6:d7:a1:fd:16:2a:
b6:28:b2:09:a3:50:ad:07:45:b9:c3:14:83:fc:2e:
b1:cc:95:2c:41:d4:f1:8c:39:07:14:af:a2:ed:03:
8d:f6:d0:7f:76:2e:d1:0c:66:08:c5:bd:5f:33:9f:
90:aa:e7:86:87:48:94:b7:6d:58:29:61:35:e3:7f:
63:42:38:ef:70:35:57:1e:ce:9a:f0:2b:56:3c:50:
90:33:1f:0b:6f:48:57:84:fd:28:1a:6c:56:ea:a4:
63:b3:2c:96:6e:d6:62:6c:a4:1a:01:9e:2c:10:11:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FE:28:A7:F2:E9:2B:03:4E:8D:DA:89:E2:7A:F3:DD:FA:0B:B7:CD
X509v3 Authority Key Identifier:
keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132332e302f32342d3234203d3e203237383236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
61:46:33:b5:02:59:87:ef:22:24:26:53:08:51:b2:92:f4:15:
b6:75:13:5c:23:a6:d4:4e:0c:43:6c:1c:4b:2d:2a:9c:93:b5:
97:4f:c1:2f:ac:4d:10:76:db:75:96:16:38:eb:b6:05:f7:f5:
3a:73:f7:ab:d1:b9:80:bb:f4:99:95:8c:26:5c:c0:eb:cd:eb:
b5:ee:59:09:a9:66:53:97:04:8b:d1:69:db:45:8c:7c:99:53:
26:8f:99:17:3c:6c:54:68:f7:2a:7d:96:94:ec:9d:7b:34:a1:
b0:bf:45:b3:1b:34:04:ba:18:11:54:f7:0b:e9:02:a2:5e:fd:
00:f7:fb:85:c4:5e:d8:ad:01:8c:e5:5a:ba:a5:d3:00:54:4b:
97:2b:18:cf:4f:da:89:07:c2:07:7a:2e:06:85:15:27:d4:7e:
26:47:e6:f2:cc:1b:32:4c:ad:61:62:fe:2a:24:17:6f:ab:6e:
ee:34:3b:9f:66:9f:7e:2e:89:45:8e:07:5a:64:aa:11:c3:71:
30:df:d5:0d:a3:53:a4:5a:71:c4:27:7a:94:28:89:43:29:87:
ea:d2:b3:ca:fc:83:09:fb:11:a7:40:28:85:f2:b0:57:29:2b:
31:f3:3c:42:b7:eb:6f:07:76:24:8d:0c:b3:94:0d:e0:96:63:
d1:18:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:16 2025 by rpki-client