Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e31362e3131342e302f32332d3234203d3e203237363738.roa
File: 3230302e31362e3131342e302f32332d3234203d3e203237363738.roa (raw, json)
Hash identifier: ZepwrNBOED7R2K8QkGAssfL7hyYp7jich/fx7iX9DaI=
Subject key identifier: 75:6A:A1:E6:A2:62:BF:6D:8F:01:6C:86:86:AB:11:67:9F:04:15:CF
Certificate issuer: /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial: 13C7D24FC65C8014E0B2A442DCE0E2E3FE9DFC8C
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e31362e3131342e302f32332d3234203d3e203237363738.roa
Signing time: Tue 04 Feb 2025 20:05:50 +0000
ROA not before: Tue 04 Feb 2025 20:00:50 +0000
ROA not after: Tue 03 Feb 2026 20:05:50 +0000
asID: 27678
IP address blocks: 200.16.114.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c7:d2:4f:c6:5c:80:14:e0:b2:a4:42:dc:e0:e2:e3:fe:9d:fc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Validity
Not Before: Feb 4 20:00:50 2025 GMT
Not After : Feb 3 20:05:50 2026 GMT
Subject: CN=756AA1E6A262BF6D8F016C8686AB11679F0415CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:dc:7c:ee:ae:c7:80:0a:3e:e1:cd:03:49:
6c:cc:d7:02:25:e9:3e:8d:40:98:e5:bf:9d:de:d3:
ad:1f:96:2c:b4:ad:2a:de:3a:d7:76:a7:25:9c:a5:
6d:b3:99:69:8a:f5:dc:97:34:a5:d0:c8:4a:33:1b:
42:ea:37:31:78:a2:f5:a7:33:d4:b3:e6:bd:d2:3a:
2f:26:7b:c9:14:6b:9d:c3:e9:f9:e7:54:fd:43:b2:
06:2b:28:88:fd:69:f1:30:19:bc:00:9d:fc:64:a1:
5e:87:99:1e:8d:42:ec:05:ef:0f:75:1e:2f:41:be:
e9:5c:4c:a5:45:79:85:f5:c4:30:bd:5f:d8:8d:97:
ea:5e:d8:19:fb:d5:d7:37:3c:74:da:08:91:3a:d7:
17:37:ab:ab:e4:52:37:e7:28:4d:59:af:dc:e5:f4:
20:af:d9:81:33:a8:ce:02:bd:d8:8f:69:92:79:41:
13:6f:37:fa:d6:fd:6e:70:36:60:0f:ea:85:04:c6:
4c:34:3e:14:3f:40:8e:8d:62:45:ac:08:77:f5:fd:
9e:f3:3b:87:43:01:8d:09:2a:15:78:7e:6e:40:4f:
e3:9d:d7:f9:2e:5b:11:5e:03:c5:5e:7a:4d:83:0e:
b2:84:cd:10:73:dd:d9:9d:a1:53:e4:27:69:f5:d4:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6A:A1:E6:A2:62:BF:6D:8F:01:6C:86:86:AB:11:67:9F:04:15:CF
X509v3 Authority Key Identifier:
keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e31362e3131342e302f32332d3234203d3e203237363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.16.114.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:71:3c:9d:52:6d:5e:bd:62:25:2f:49:97:b8:fa:8a:98:f8:
e9:93:9c:91:77:bf:68:7e:12:d3:0d:c8:39:64:55:fb:38:7f:
64:47:a1:f3:69:ba:00:cc:58:77:c8:d2:3e:6c:e7:f3:69:18:
f1:0b:8c:bc:f3:84:d6:0d:40:5f:22:45:45:8c:01:1e:d9:4a:
e2:0a:ce:10:52:f0:c5:4d:0a:8a:19:18:87:66:83:23:37:65:
01:58:ae:15:b0:51:66:48:0c:01:7c:49:81:28:eb:91:87:77:
bf:b7:93:8a:99:96:01:21:1a:14:ff:0c:04:58:f7:5d:b1:40:
0e:10:fb:d1:b1:56:8c:1e:99:03:a6:cb:df:d5:75:6a:a5:13:
42:15:02:27:5b:9a:de:ec:21:e0:d3:49:7a:cc:ce:34:a6:7f:
96:90:d8:ec:7e:68:7e:1a:5d:73:59:e0:62:cc:ff:1b:f0:00:
a2:bf:f9:76:41:57:55:1e:ae:d6:27:0e:f5:91:c6:1a:2e:07:
43:fd:74:4f:fb:9c:8b:96:82:53:d2:96:32:26:dd:36:ed:a6:
12:07:2c:25:60:34:c1:94:20:9b:b8:36:50:ef:44:9f:55:11:
c6:68:1e:db:85:2b:7b:43:9b:88:e6:b4:43:05:2a:f3:2b:6b:
56:4a:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:55:31 2025 by rpki-client