Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3230382e302f32312d3234203d3e203237373936.roa
File: 3230302e31322e3230382e302f32312d3234203d3e203237373936.roa (raw, json)
Hash identifier: bKH/idEdC3LJdEk6yiWVmtWtcORDNthe4I2/XWFuMik=
Subject key identifier: 0E:56:6E:4C:89:7A:81:2C:C5:38:77:27:A9:AA:55:C9:BA:3E:C5:91
Certificate issuer: /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial: 0D3E4A5BD3CCB04F180FFF7BF737598617833116
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3230382e302f32312d3234203d3e203237373936.roa
Signing time: Tue 04 Feb 2025 18:04:01 +0000
ROA not before: Tue 04 Feb 2025 17:59:01 +0000
ROA not after: Tue 03 Feb 2026 18:04:01 +0000
asID: 27796
IP address blocks: 200.12.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3e:4a:5b:d3:cc:b0:4f:18:0f:ff:7b:f7:37:59:86:17:83:31:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Validity
Not Before: Feb 4 17:59:01 2025 GMT
Not After : Feb 3 18:04:01 2026 GMT
Subject: CN=0E566E4C897A812CC5387727A9AA55C9BA3EC591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:51:37:1b:19:b1:5a:e0:d0:20:0d:c0:f1:
ba:e1:1c:73:04:3f:36:14:1a:83:96:40:f9:f5:d5:
6a:7f:e7:a4:3d:f0:a7:cc:53:74:00:c7:c4:5e:44:
a7:09:f1:9b:39:5c:ce:60:99:fc:9b:ce:da:ee:f5:
7d:80:1d:d5:53:7a:b6:05:60:ba:8e:58:b2:c6:66:
3c:8e:fd:36:0b:ce:2e:6f:5a:40:f5:56:40:9b:2a:
43:b4:07:0d:e1:1a:e1:4f:a1:c4:7e:c0:10:fa:8d:
91:cd:71:8b:09:3d:9a:72:ec:9e:af:93:9e:f5:07:
4c:9b:3b:dc:37:31:42:33:24:73:67:97:66:aa:d7:
d8:f5:fe:79:aa:65:a0:25:b9:4c:9b:d2:15:cf:ff:
04:cf:bd:a5:b7:40:55:03:0b:0c:e0:ca:5a:c5:be:
33:4c:4a:03:1b:35:18:c2:91:af:22:3d:b8:3c:af:
05:9d:7e:b9:fe:d6:c7:0b:65:bd:23:ef:58:57:cd:
aa:e5:70:cb:ff:39:3d:0d:80:86:29:79:ac:d3:65:
4a:d9:b8:b1:6b:6b:b4:23:48:cf:66:8b:6d:d3:6a:
de:3a:32:cc:f5:d2:ea:bf:e6:6a:50:23:56:d0:56:
94:db:5a:b8:bd:da:5f:70:49:04:11:b5:1a:0d:12:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:56:6E:4C:89:7A:81:2C:C5:38:77:27:A9:AA:55:C9:BA:3E:C5:91
X509v3 Authority Key Identifier:
keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3230382e302f32312d3234203d3e203237373936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.208.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:ee:db:b0:20:a1:45:98:a7:00:89:67:11:ee:a4:52:66:7c:
74:3f:52:38:09:f3:65:40:ad:19:ab:d9:92:d9:3c:37:20:9e:
ff:98:e9:ad:e8:db:19:59:db:c1:9f:82:20:5f:b3:7c:28:78:
ef:aa:e5:dd:0d:74:fd:69:7b:5b:41:0c:52:f8:f5:3c:c3:22:
8d:45:d9:1e:75:52:a6:08:83:df:06:aa:99:1f:08:09:b7:c3:
1f:cb:ea:41:7e:f0:a7:5f:6a:0c:83:3f:f5:27:f6:12:e9:ef:
9f:de:7d:51:4d:92:77:bb:d2:7f:db:90:a6:45:5a:64:8b:5c:
fe:91:02:82:42:1c:6d:da:8c:57:33:da:89:15:b6:2d:8d:14:
db:3a:ee:91:1e:09:95:19:66:3d:44:e1:e2:07:81:dd:22:ec:
95:62:40:00:38:76:ab:1f:21:1a:ac:f8:21:46:0a:f8:93:e9:
9e:37:e9:43:8d:b4:2f:00:ee:af:08:93:be:6c:ad:f9:13:fa:
79:33:de:9e:37:b4:5d:12:d8:80:d4:f7:0e:39:92:7a:91:11:
50:3a:a5:47:80:ce:1c:a9:a2:a3:5e:51:25:75:c3:e0:99:b2:
54:db:d5:18:08:92:a2:d2:82:0a:42:40:08:a8:75:a7:ee:2e:
35:33:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:51:28 2025 by rpki-client