Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e31362e3131332e302f32342d3234203d3e203237363738.roa
File: 3230302e31362e3131332e302f32342d3234203d3e203237363738.roa (raw, json)
Hash identifier: NMgHP9WclwEMeC8lzQ+OKMCt0F5tvcJsLJezVzMk+ZA=
Subject key identifier: A2:23:74:5A:01:C4:4A:C8:1E:B0:F9:89:F4:BB:5D:0A:D7:B5:0C:71
Certificate issuer: /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial: 582884AC9AA16E683C75E84202095754294DF84F
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e31362e3131332e302f32342d3234203d3e203237363738.roa
Signing time: Tue 04 Feb 2025 20:05:52 +0000
ROA not before: Tue 04 Feb 2025 20:00:52 +0000
ROA not after: Tue 03 Feb 2026 20:05:52 +0000
asID: 27678
IP address blocks: 200.16.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:28:84:ac:9a:a1:6e:68:3c:75:e8:42:02:09:57:54:29:4d:f8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Validity
Not Before: Feb 4 20:00:52 2025 GMT
Not After : Feb 3 20:05:52 2026 GMT
Subject: CN=A223745A01C44AC81EB0F989F4BB5D0AD7B50C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:da:7a:34:3f:06:ae:bd:0e:4d:5c:e7:be:
b4:6b:cb:e1:ce:05:f4:2d:c3:6a:f3:d9:64:2d:af:
be:bd:a5:4b:3d:a3:5b:18:45:20:e9:21:5f:1a:71:
3b:ea:c2:dd:14:90:da:87:8f:24:79:de:56:0f:10:
78:b8:cf:04:ce:2a:50:0b:0c:17:3a:3c:5c:10:e9:
4d:60:69:5f:4c:85:75:88:91:e3:47:02:71:54:d3:
69:97:48:15:b5:bd:2e:35:9f:3b:ac:e0:bd:ae:c3:
a5:1b:8d:19:a2:a1:39:5c:36:13:81:fc:0e:79:9f:
39:18:65:7a:25:4e:b1:8d:96:10:8d:d7:26:61:95:
35:6b:fe:ac:f7:97:57:70:a2:c9:01:ba:d3:67:ba:
42:74:06:09:58:51:9b:6b:72:29:46:e4:67:98:3c:
25:e9:d2:d0:9b:37:99:1e:82:1a:e6:53:5d:a1:70:
cc:04:4c:47:4a:b1:2c:a5:c7:41:63:1f:ad:54:f4:
c4:4a:3e:80:72:f5:a3:cd:4c:30:19:51:a2:5e:41:
50:78:94:42:91:f0:ae:1e:61:64:be:38:3f:98:72:
cb:51:45:5a:1e:82:5f:9c:e6:de:28:0e:e4:95:94:
1d:cf:81:bc:3a:d3:0d:65:d1:dd:6a:0e:2f:ed:b2:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:23:74:5A:01:C4:4A:C8:1E:B0:F9:89:F4:BB:5D:0A:D7:B5:0C:71
X509v3 Authority Key Identifier:
keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e31362e3131332e302f32342d3234203d3e203237363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.16.113.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:24:db:35:23:eb:9e:25:1c:68:70:14:0e:8e:a4:9e:78:91:
65:4b:d6:37:2d:59:c3:98:a6:46:89:19:0d:17:8a:5f:d2:73:
3b:85:fb:85:6b:3b:08:2c:0e:06:2d:03:69:b5:9d:10:d0:0c:
ac:a7:af:df:eb:cc:61:4c:c9:02:8c:a3:e4:47:2d:da:92:95:
f3:29:87:d8:cc:46:95:f8:2d:f9:3d:4b:72:0a:f3:f1:dd:c0:
ff:e5:55:7a:2c:ec:6e:f3:2a:7b:2d:f6:a8:51:89:c6:83:10:
0d:ba:f5:65:ac:d3:20:1e:3c:26:54:23:60:be:26:e8:6a:70:
f3:3a:73:6d:74:e4:14:ac:09:46:13:ed:a0:c5:4b:a8:37:de:
f8:d5:32:c2:30:c2:f8:66:50:33:d6:01:8c:3b:99:68:62:c3:
b4:86:0b:ac:31:4d:1e:06:12:69:81:8b:06:65:fc:95:d3:5e:
c9:ba:34:a6:c7:e2:d7:cc:b3:64:ad:16:1b:72:22:1a:76:6b:
b8:00:30:89:06:1f:af:64:36:a7:6d:66:f8:78:ec:ff:d7:2c:
fe:66:5b:9b:d3:dd:98:cb:29:ac:82:d7:ca:3e:01:ed:79:3c:
76:8e:64:eb:0b:57:0a:a7:71:27:3a:73:66:41:2e:d3:f6:e6:
09:d6:29:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:30 2025 by rpki-client