Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e31362e3131322e302f32342d3234203d3e203532333036.roa
File: 3230302e31362e3131322e302f32342d3234203d3e203532333036.roa (raw, json)
Hash identifier: mNVMigIkTpeQx1VhMH0AtXf1mbaDRrpGv4TU2s7vsmg=
Subject key identifier: 64:F1:FF:96:99:9B:25:A2:2A:F2:54:54:4E:5C:C2:9E:D7:2B:C4:E1
Certificate issuer: /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial: 2A0315FE07AC3083453486F4681F0ADEDB090248
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e31362e3131322e302f32342d3234203d3e203532333036.roa
Signing time: Tue 04 Feb 2025 20:05:52 +0000
ROA not before: Tue 04 Feb 2025 20:00:52 +0000
ROA not after: Tue 03 Feb 2026 20:05:52 +0000
asID: 52306
IP address blocks: 200.16.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:03:15:fe:07:ac:30:83:45:34:86:f4:68:1f:0a:de:db:09:02:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Validity
Not Before: Feb 4 20:00:52 2025 GMT
Not After : Feb 3 20:05:52 2026 GMT
Subject: CN=64F1FF96999B25A22AF254544E5CC29ED72BC4E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:60:80:93:2a:96:9b:ef:ce:ab:79:eb:ef:
4d:3e:7d:ed:39:67:c3:5f:9d:87:44:9a:f6:e7:c2:
50:ac:51:83:dd:ef:c5:07:fa:a6:e3:7b:d1:5b:3b:
f9:68:db:2a:bf:0e:0a:58:b9:a8:ba:86:45:cb:b4:
d0:36:b9:97:4a:e5:13:89:80:09:20:00:c6:7e:b0:
29:b9:f8:09:18:f5:d6:5b:e8:7e:a3:92:ca:28:e3:
7c:da:4f:33:ad:b4:63:b9:ba:ce:89:31:55:36:8c:
3e:ea:3b:ae:4c:6b:8a:47:f0:f9:01:bb:ea:49:0c:
e8:2c:05:90:c5:b6:d6:12:40:af:79:e5:ce:6c:ea:
7d:9d:6b:c5:1f:e9:b2:6d:78:19:a1:cc:b0:6b:05:
4d:8d:79:d3:72:86:98:31:98:10:fd:47:6f:7c:c6:
75:c5:8c:2a:da:0c:e4:e5:86:bb:8d:45:48:ee:aa:
f0:98:20:bc:72:c7:32:da:0a:c6:30:aa:ed:56:42:
e5:19:6c:9b:28:f7:3c:7c:ea:83:41:89:ee:35:23:
a6:92:43:03:17:c8:7c:c7:a2:bf:2f:33:c3:2f:cd:
38:26:0b:16:04:10:67:ff:2d:62:ee:a1:5c:5b:4a:
8d:d3:f4:db:d5:b4:3d:e9:a0:77:dd:e0:b3:44:ed:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:FF:96:99:9B:25:A2:2A:F2:54:54:4E:5C:C2:9E:D7:2B:C4:E1
X509v3 Authority Key Identifier:
keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e31362e3131322e302f32342d3234203d3e203532333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.16.112.0/24
Signature Algorithm: sha256WithRSAEncryption
90:30:77:76:2a:2c:c3:96:33:33:73:c5:be:ae:41:13:c8:a6:
80:cf:7a:d3:6f:3d:e9:99:f0:48:5b:3d:8b:69:76:42:55:3d:
dd:b5:54:f4:81:b1:f8:49:a8:1b:db:51:6b:ba:81:95:f9:09:
4c:72:4b:9a:26:5c:ab:7a:ef:43:d9:74:d5:d0:8f:0c:2f:79:
34:ca:f4:d3:2a:d6:f5:85:81:27:ae:29:df:ff:17:b3:6f:d2:
4c:9f:fa:85:93:37:d8:98:05:20:63:b0:e7:e0:ef:8e:98:ff:
23:78:c7:8e:ed:53:28:80:d7:0a:8f:4f:84:9a:19:f7:b0:d3:
d4:27:25:5f:2c:b9:7a:45:a8:66:80:fc:a8:01:a8:02:ba:1a:
f3:78:3b:97:c7:e0:a5:cb:0c:ba:16:b1:45:a9:3e:a1:71:ae:
48:cb:f1:7c:8e:f0:c7:46:e5:7f:f6:09:9d:ca:33:aa:5d:c7:
42:ed:a0:38:c3:b3:e8:6d:a1:c3:a0:c4:cf:44:3c:e6:ca:50:
f7:d6:e7:fd:a9:37:7f:27:37:44:70:e8:7b:28:06:71:82:6e:
c8:39:60:6b:eb:72:20:e5:75:43:4c:ee:be:96:d7:b0:4d:44:
a5:27:2c:4e:f8:c0:06:c0:32:ff:a9:e4:c3:ef:3a:cd:75:bb:
59:2f:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:36 2025 by rpki-client