Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e3132332e3134342e302f32342d3234203d3e203237363932.roa
File: 3230302e3132332e3134342e302f32342d3234203d3e203237363932.roa (raw, json)
Hash identifier: nDua5tJdwPkr7ECIT+CzN/m0rk65nZ2xMM9hbjr611I=
Subject key identifier: 9D:83:BF:81:43:2F:EB:07:48:98:17:A9:37:38:C1:40:4A:F4:F8:57
Certificate issuer: /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial: 3FC4B4DC4305A81F8830F4801DD8DA2AD13E5E81
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e3132332e3134342e302f32342d3234203d3e203237363932.roa
Signing time: Tue 04 Feb 2025 20:04:10 +0000
ROA not before: Tue 04 Feb 2025 19:59:10 +0000
ROA not after: Tue 03 Feb 2026 20:04:10 +0000
asID: 27692
IP address blocks: 200.123.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c4:b4:dc:43:05:a8:1f:88:30:f4:80:1d:d8:da:2a:d1:3e:5e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Validity
Not Before: Feb 4 19:59:10 2025 GMT
Not After : Feb 3 20:04:10 2026 GMT
Subject: CN=9D83BF81432FEB07489817A93738C1404AF4F857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:bc:d8:6b:40:8f:b8:63:37:fb:25:47:2f:
36:d8:89:b8:3d:be:46:4b:17:88:77:10:b4:27:d1:
c7:7c:5f:ab:9c:fc:82:5e:4b:04:ee:ef:f4:82:ed:
57:59:0f:c9:ce:c0:3a:a4:94:11:fb:03:4a:8f:86:
8f:47:be:1d:f5:78:17:a2:d7:81:5a:25:c8:a2:c8:
97:d7:e5:3f:58:55:ea:97:b0:62:46:9c:83:4d:35:
0a:9f:7b:69:aa:72:cd:e1:d2:10:22:9c:3e:a9:08:
29:c1:be:ac:d0:04:dd:5b:2f:43:8f:0a:d2:98:96:
57:fb:63:d0:7c:82:5d:21:af:d7:17:59:90:c7:42:
23:d5:d9:e7:5e:b2:34:26:aa:ad:bc:5f:31:a9:43:
94:b6:7d:61:7b:a0:36:f4:b3:52:a6:5e:8c:73:d8:
83:5c:49:92:f2:f9:0c:81:a9:33:56:32:12:3c:e5:
13:92:f4:7a:7a:64:f3:f4:6d:6b:fa:f3:7a:bd:cf:
48:2e:1f:fa:2a:14:99:af:17:cc:bc:20:56:b2:2a:
72:3d:93:0e:b5:7a:52:b2:d9:83:22:4b:22:a0:c5:
92:94:47:14:35:90:f8:c3:1d:2b:99:54:7a:e7:53:
22:e8:ca:8c:c6:a6:d5:2f:80:57:e4:1c:91:1d:27:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:83:BF:81:43:2F:EB:07:48:98:17:A9:37:38:C1:40:4A:F4:F8:57
X509v3 Authority Key Identifier:
keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e3132332e3134342e302f32342d3234203d3e203237363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f0:5d:39:63:d9:cf:0a:ad:21:c4:0f:2c:43:3f:b6:c5:0f:
4b:ea:7b:f0:42:ed:dc:e2:bf:23:9b:99:2f:87:04:89:a7:4a:
7e:29:06:9f:08:16:75:4e:ae:59:f3:e0:78:85:f0:2b:f4:09:
4e:9b:da:4f:b3:11:ce:a2:91:e9:15:a1:2f:35:78:d1:8d:36:
1f:55:c0:64:f7:6e:89:ad:f1:8c:f3:ac:18:46:b1:40:79:5b:
7b:2c:d0:53:e5:9d:c8:2b:0e:1c:6c:29:f0:6c:87:9c:c4:89:
61:c7:b6:88:00:fa:81:66:ec:80:62:83:fc:79:c1:3c:06:de:
e0:3d:b6:e5:00:48:ef:69:26:43:5d:09:c9:fe:3d:7f:82:47:
6e:7c:16:18:58:b8:8a:82:db:f3:55:54:ff:31:f1:98:5b:36:
1a:80:04:a9:2f:6b:50:00:e4:46:61:fa:16:3b:a1:d9:20:7e:
69:d1:78:3e:6c:35:19:eb:1d:cc:61:96:6d:cf:0e:67:77:ab:
e5:9d:6d:76:02:2d:48:c9:82:0c:3d:60:24:6e:23:7a:e8:ea:
d7:0b:18:3f:34:1d:ac:fa:10:29:e2:f1:36:4c:ce:63:94:d0:
77:bb:c7:bc:de:a0:6d:46:41:83:f1:86:45:cc:a4:3a:90:34:
6b:9e:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:40:25 2025 by rpki-client