Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3230302e31342e3131362e302f32342d3234203d3e203532333134.roa
File: 3230302e31342e3131362e302f32342d3234203d3e203532333134.roa (raw, json)
Hash identifier: YkyfFp5LZfnQcHslAN6Ws7Q0lYqX1IfjfoNa+VRsHLA=
Subject key identifier: 83:3E:6D:DD:BE:B8:CD:5C:AA:B2:34:92:CA:C6:48:71:EA:85:17:5F
Certificate issuer: /CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Certificate serial: 02ADA709DA4ABD21E5EDB7EC8C74536593A98876
Authority key identifier: 99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3230302e31342e3131362e302f32342d3234203d3e203532333134.roa
Signing time: Tue 04 Feb 2025 20:06:49 +0000
ROA not before: Tue 04 Feb 2025 20:01:49 +0000
ROA not after: Tue 03 Feb 2026 20:06:49 +0000
asID: 52314
IP address blocks: 200.14.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ad:a7:09:da:4a:bd:21:e5:ed:b7:ec:8c:74:53:65:93:a9:88:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Validity
Not Before: Feb 4 20:01:49 2025 GMT
Not After : Feb 3 20:06:49 2026 GMT
Subject: CN=833E6DDDBEB8CD5CAAB23492CAC64871EA85175F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:cb:5b:14:41:c4:6b:71:4f:e2:59:db:5a:
c7:21:d5:d9:75:f0:03:b8:eb:34:06:74:d1:bf:2a:
0a:95:72:1a:38:23:a0:47:26:6d:84:aa:4c:f3:5a:
42:03:16:4b:3a:d3:6e:38:43:49:6b:42:91:ae:7f:
49:07:e5:fc:97:ea:9d:68:1c:2e:b4:e1:80:e3:bb:
bd:19:4f:21:8c:1d:92:7b:9b:a3:ac:46:6e:b8:fb:
08:1f:7c:cd:3b:fe:86:fa:94:63:d7:44:65:b7:a5:
5b:a3:8a:d0:bb:61:1c:25:49:eb:0d:fa:ab:12:88:
97:7b:bf:44:99:15:74:3b:d2:10:9d:5c:de:51:c2:
36:04:e3:65:11:69:8c:1b:d2:0d:2b:28:2b:09:07:
cd:cd:42:0b:50:9f:9f:b3:7e:aa:22:87:6d:a4:1e:
b7:11:dd:83:37:1c:de:62:17:78:89:66:3a:96:53:
74:0f:a6:e9:17:23:41:4b:23:85:3a:bb:05:16:f9:
18:21:b4:91:41:32:20:3f:a5:7e:78:36:07:41:1e:
76:91:4d:f6:40:27:16:15:a1:2c:6e:28:c3:fa:4f:
f5:4b:f6:e9:df:33:39:b2:91:49:0c:5e:5d:18:0f:
91:1f:45:ba:4d:61:f2:46:d9:5b:87:25:3a:95:98:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:6D:DD:BE:B8:CD:5C:AA:B2:34:92:CA:C6:48:71:EA:85:17:5F
X509v3 Authority Key Identifier:
keyid:99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3230302e31342e3131362e302f32342d3234203d3e203532333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.116.0/24
Signature Algorithm: sha256WithRSAEncryption
51:cc:98:43:27:d6:c5:a0:2f:99:b6:a3:59:07:98:88:8b:49:
f3:52:21:98:3d:1e:54:96:43:7d:f4:c3:76:66:0e:88:45:63:
93:a4:74:2c:47:40:5e:3c:04:3d:83:06:a3:45:4c:10:18:71:
fa:a9:3f:66:cd:eb:d3:8e:b7:23:78:52:e7:44:87:d3:0c:fd:
ad:53:ee:d7:08:e0:33:ba:a1:af:eb:86:ae:c4:16:7b:58:01:
a6:ae:cd:9d:6c:36:a8:d8:8b:2c:dc:11:e2:bb:89:b0:bc:d0:
f7:48:0a:6d:54:b9:71:fd:9e:12:2f:f8:c5:bd:47:07:2a:7d:
da:16:12:82:57:f4:07:05:17:3b:10:d0:db:8e:e7:21:31:52:
69:e3:57:ae:59:08:1b:4f:af:b4:b5:01:6f:07:97:e0:51:ff:
ab:18:8e:83:36:bb:a9:8c:09:2d:05:7f:67:f4:6f:37:d0:58:
06:cc:13:3e:f1:a7:5c:31:01:87:93:47:0e:93:19:00:9b:7a:
8e:4d:d4:ab:c2:73:d4:6b:22:e0:62:68:ea:0e:4b:84:f9:c3:
5f:15:8d:dd:7c:c7:fc:bd:d0:be:45:ab:90:9c:0d:b5:43:b7:
26:ae:f5:6c:15:94:e2:60:44:c9:00:c7:fe:0b:77:4a:ec:e8:
72:42:ee:39
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAq2nCdpKvSHl7bfsjHRTZZOpiHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlBNEI2NDVCQ0UxQTZGQTc0NkM4OUEzRjZFMjI4ODlG
OEYyMDg4QzAeFw0yNTAyMDQyMDAxNDlaFw0yNjAyMDMyMDA2NDlaMDMxMTAvBgNV
BAMTKDgzM0U2REREQkVCOENENUNBQUIyMzQ5MkNBQzY0ODcxRUE4NTE3NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQctbFEHEa3FP4lnbWsch1dl1
8AO46zQGdNG/KgqVcho4I6BHJm2EqkzzWkIDFks60244Q0lrQpGuf0kH5fyX6p1o
HC604YDju70ZTyGMHZJ7m6OsRm64+wgffM07/ob6lGPXRGW3pVujitC7YRwlSesN
+qsSiJd7v0SZFXQ70hCdXN5RwjYE42URaYwb0g0rKCsJB83NQgtQn5+zfqoih22k
HrcR3YM3HN5iF3iJZjqWU3QPpukXI0FLI4U6uwUW+RghtJFBMiA/pX54NgdBHnaR
TfZAJxYVoSxuKMP6T/VL9unfMzmykUkMXl0YD5EfRbpNYfJG2VuHJTqVmDynAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgz5t3b64zVyqsjSSysZIceqFF18wHwYDVR0j
BBgwFoAUmaS2Rbzhpvp0bImj9uIoifjyCIwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQTRFMjA1OTg2NzREQzlEQTgwRTE3NkQ4MzVBRDI3MTY4
QzZDQjgwMjg5RTY0RTIxQzE2MTVCMzVFNTdBMUMwLzAvOTlBNEI2NDVCQ0UxQTZG
QTc0NkM4OUEzRjZFMjI4ODlGOEYyMDg4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUE0QjY0NUJDRTFBNkZBNzQ2
Qzg5QTNGNkUyMjg4OUY4RjIwODhDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkE0RTIwNTk4Njc0REM5REE4MEUxNzZEODM1QUQyNzE2OEM2Q0I4MDI4
OUU2NEUyMUMxNjE1QjM1RTU3QTFDMC8wLzMyMzAzMDJlMzEzNDJlMzEzMTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgOdDAN
BgkqhkiG9w0BAQsFAAOCAQEAUcyYQyfWxaAvmbajWQeYiItJ81IhmD0eVJZDffTD
dmYOiEVjk6R0LEdAXjwEPYMGo0VMEBhx+qk/Zs3r0463I3hS50SH0wz9rVPu1wjg
M7qhr+uGrsQWe1gBpq7NnWw2qNiLLNwR4ruJsLzQ90gKbVS5cf2eEi/4xb1HByp9
2hYSglf0BwUXOxDQ247nITFSaeNXrlkIG0+vtLUBbweX4FH/qxiOgza7qYwJLQV/
Z/RvN9BYBswTPvGnXDEBh5NHDpMZAJt6jk3Uq8Jz1Gsi4GJo6g5LhPnDXxWN3XzH
/L3QvkWrkJwNtUO3Jq71bBWU4mBEyQDH/gt3SuzockLuOQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:24 2025 by rpki-client