Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa
File: 3230302e34322e3232342e302f32302d3234203d3e203132303636.roa (raw, json)
Hash identifier: TKqfFQXftG7Ens4J/yyjBy36UL8j1mTqmAitbs59LcM=
Subject key identifier: E2:93:F6:F6:C2:46:20:7C:91:B3:50:14:50:3E:9D:38:4E:77:F7:64
Certificate issuer: /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial: 544D2E1A425A715D68A7286EC70F2A1AA15DB9F6
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa
Signing time: Tue 04 Feb 2025 18:46:58 +0000
ROA not before: Tue 04 Feb 2025 18:41:58 +0000
ROA not after: Tue 03 Feb 2026 18:46:58 +0000
asID: 12066
IP address blocks: 200.42.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4d:2e:1a:42:5a:71:5d:68:a7:28:6e:c7:0f:2a:1a:a1:5d:b9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Validity
Not Before: Feb 4 18:41:58 2025 GMT
Not After : Feb 3 18:46:58 2026 GMT
Subject: CN=E293F6F6C246207C91B35014503E9D384E77F764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:96:7a:a7:a3:ef:28:aa:1f:0b:43:e1:4a:
25:a5:d5:46:56:1b:86:8d:90:77:2a:45:a9:10:e1:
d1:e3:9f:f5:eb:82:55:71:c7:06:a8:40:c5:a5:d5:
c0:61:1d:3c:4d:8b:1a:02:7f:cf:cf:1e:46:f3:f4:
12:8e:21:9b:ea:33:8b:7c:c3:95:a6:8d:6f:bf:dc:
3c:70:10:65:98:31:6b:ad:2b:d9:38:90:b5:e1:ee:
bd:9b:58:3b:26:cf:ca:3a:d1:9b:ce:6a:7c:04:d6:
f6:c3:03:b3:57:93:3f:bc:9c:17:79:8b:20:c9:98:
7f:9d:a0:b8:71:be:16:17:85:3d:04:65:8e:03:c9:
23:57:24:f8:77:93:a9:55:27:e8:0d:e9:68:c9:55:
ab:b3:76:1a:3c:19:d3:9f:85:bd:65:ec:72:49:55:
39:bd:38:58:c6:9d:9c:7e:ee:af:c3:f5:08:ae:19:
cd:d0:85:32:d6:19:df:8c:91:03:cd:ab:65:af:b9:
78:97:ce:ca:cf:92:84:62:fe:3b:30:2f:b1:44:b8:
49:0c:42:28:e1:f5:68:20:24:ad:ec:b4:e6:57:c6:
53:bd:21:f1:1a:de:fc:a6:f4:72:c7:88:5a:1d:f3:
22:d8:e4:bf:7b:06:70:34:95:71:b3:db:dc:22:e8:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:93:F6:F6:C2:46:20:7C:91:B3:50:14:50:3E:9D:38:4E:77:F7:64
X509v3 Authority Key Identifier:
keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.42.224.0/20
Signature Algorithm: sha256WithRSAEncryption
54:31:38:2c:7a:03:d6:bd:52:94:0a:74:9c:99:2d:74:ca:34:
85:0c:00:a2:2d:7f:6a:30:e2:a9:1f:d1:c5:c8:2b:9b:0b:85:
5e:c8:1e:90:20:83:41:f6:3f:b5:3d:a2:88:69:16:d6:5e:b5:
f8:c0:a0:29:96:7a:52:c2:83:07:9a:f1:03:26:09:23:b6:d1:
df:15:88:d7:6d:5b:8d:fc:b6:4a:e2:85:a5:25:91:ab:11:ed:
83:92:19:3d:0f:6b:bb:08:fb:1d:be:76:ef:c6:97:d1:20:24:
3b:ba:8a:c8:71:9d:29:c5:52:74:b3:b9:e4:fe:1f:6a:91:06:
4f:b1:e4:ed:f2:91:97:e6:41:8f:25:72:2b:26:ba:a9:20:f8:
ba:ca:66:ef:71:90:b9:40:e0:9e:bc:9d:e9:62:0b:7a:7c:86:
8b:4e:33:6c:e8:b1:0e:9c:9e:ef:d3:f8:6b:52:3f:74:12:d4:
5b:9b:88:c6:1a:92:36:11:d1:bd:ac:cc:a7:7e:d9:3f:ff:00:
e4:67:b5:d3:05:4f:c6:40:6b:3c:70:87:a2:5c:09:3c:02:98:
ad:f2:9c:7b:a3:9e:75:f8:2e:94:c2:df:8d:9b:66:2c:78:ca:
6d:18:b9:fb:db:32:01:f3:38:0d:ed:b6:71:de:5f:97:f0:dc:
fa:4c:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:01 2025 by rpki-client