Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e372e342e302f32342d3234203d3e203532323334.roa
File: 3230302e372e342e302f32342d3234203d3e203532323334.roa (raw, json)
Hash identifier: nnqyMajTAEknm+0ZzC9SUJDud3XSSes+AobltyTNm4Q=
Subject key identifier: 03:F8:F9:B6:97:D1:15:CF:1C:D1:AB:26:E4:66:65:59:30:88:22:5A
Certificate issuer: /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial: 21FB3C376307F93133B2C1EAC8A919963E211359
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e372e342e302f32342d3234203d3e203532323334.roa
Signing time: Tue 04 Feb 2025 20:05:49 +0000
ROA not before: Tue 04 Feb 2025 20:00:49 +0000
ROA not after: Tue 03 Feb 2026 20:05:49 +0000
asID: 52234
IP address blocks: 200.7.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:fb:3c:37:63:07:f9:31:33:b2:c1:ea:c8:a9:19:96:3e:21:13:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Validity
Not Before: Feb 4 20:00:49 2025 GMT
Not After : Feb 3 20:05:49 2026 GMT
Subject: CN=03F8F9B697D115CF1CD1AB26E46665593088225A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:93:1f:57:69:ea:e6:a1:71:22:76:69:e1:
f1:96:bd:4b:b2:88:89:3e:68:b3:1b:59:10:9a:31:
df:f0:8c:e0:a4:1b:8b:2b:50:6d:17:94:bd:9e:94:
ae:d7:a7:72:a1:50:88:5c:bf:47:ca:52:e3:f3:cc:
a4:45:50:9f:52:63:30:f1:4e:e0:c0:42:e4:c7:12:
e9:29:35:65:ee:cb:18:b9:53:a7:ed:81:6b:e6:2b:
a1:4d:b5:59:22:85:46:8d:89:91:55:a5:da:a5:18:
b6:8b:bc:ef:4c:d2:9f:6e:1b:38:56:23:5d:09:19:
7d:e1:c3:b4:2e:b1:8b:9d:cd:b1:88:d9:5f:6a:79:
ad:b1:6c:7d:0b:fa:ba:73:48:5d:19:7e:ca:f0:fc:
0d:7b:05:3f:ab:c5:1b:02:5f:3b:95:07:29:88:67:
cf:84:9d:44:88:73:1c:bd:0c:ab:60:9a:06:32:b5:
e1:af:f9:8d:59:ab:3e:bd:81:5a:c4:20:d7:bd:29:
d1:18:6c:e7:4f:fc:72:52:6d:b2:98:08:3a:6d:13:
49:ee:05:2e:65:57:b8:24:b4:f6:8b:39:eb:a2:2e:
7f:b7:dd:6e:9f:06:bb:94:9d:db:75:7c:da:28:7e:
4c:1f:f6:9a:36:62:1f:8b:d2:f0:b5:2f:48:22:3d:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F8:F9:B6:97:D1:15:CF:1C:D1:AB:26:E4:66:65:59:30:88:22:5A
X509v3 Authority Key Identifier:
keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e372e342e302f32342d3234203d3e203532323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:64:dd:78:89:e3:09:04:06:85:02:0d:51:42:ed:9d:73:c9:
2d:a8:78:1b:b1:1b:ca:e8:11:09:95:ed:2a:da:7d:29:75:6f:
e3:42:a8:fe:ba:54:fd:b8:12:2e:7e:99:26:dd:2a:b6:a2:81:
8a:1a:39:c6:4b:cf:db:73:60:81:e6:30:b6:56:75:d2:45:5d:
30:b2:38:34:c3:98:f2:ff:d9:66:a9:18:ae:b0:02:b9:c3:ca:
40:f8:87:d6:51:90:75:da:ff:5c:31:04:71:7a:cb:b4:cd:0b:
8c:4e:03:0c:6e:4d:87:13:a8:fc:0f:ba:b6:e6:ed:59:f6:50:
4f:ae:1d:ed:74:e4:54:69:67:8c:8e:08:7a:41:fd:10:27:be:
c2:1f:ba:d0:c7:58:26:5e:b6:2f:28:19:83:fd:b6:f7:f2:8a:
4a:cc:4a:b6:c8:15:b6:96:f5:37:28:c3:4a:9a:69:36:92:17:
e5:6e:97:50:e3:b3:7f:36:61:f6:89:73:94:81:e9:33:6d:0c:
bb:12:21:37:56:3e:f0:cd:bc:3c:a6:93:eb:48:70:36:96:26:
9f:ee:7b:f6:76:e8:55:8e:a9:d4:f4:dc:48:bc:f4:10:0e:c0:
b9:56:a2:28:98:60:45:a0:df:1f:c0:7d:f3:e1:6a:aa:c9:a2:
1a:63:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:08:08 2025 by rpki-client