Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133302e302f32342d3234203d3e2038303438.roa
File: 3230302e33352e3133302e302f32342d3234203d3e2038303438.roa (raw, json)
Hash identifier: 13pWcJK3GXikL45Ehi4wCPZGftBSgFDbehaP6imOt8k=
Subject key identifier: FD:81:A0:F4:8C:31:AF:50:7E:AA:1D:F2:9A:F2:EF:0D:76:B8:09:AF
Certificate issuer: /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial: 137D3D65BC0F34BD2DD0376872D7D87B9822D4E9
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133302e302f32342d3234203d3e2038303438.roa
Signing time: Thu 27 Mar 2025 16:15:00 +0000
ROA not before: Thu 27 Mar 2025 16:10:00 +0000
ROA not after: Thu 26 Mar 2026 16:15:00 +0000
asID: 8048
IP address blocks: 200.35.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7d:3d:65:bc:0f:34:bd:2d:d0:37:68:72:d7:d8:7b:98:22:d4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
Validity
Not Before: Mar 27 16:10:00 2025 GMT
Not After : Mar 26 16:15:00 2026 GMT
Subject: CN=FD81A0F48C31AF507EAA1DF29AF2EF0D76B809AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:21:80:ae:93:62:45:2b:0e:b6:2a:b3:7f:
31:4e:ba:1b:86:ca:11:78:fc:54:6d:9f:71:8a:37:
ce:b0:69:f7:1d:25:5c:07:dd:10:64:c7:09:a4:15:
e0:d4:a6:d5:5c:32:95:83:dd:21:73:16:be:70:f9:
62:7e:21:91:c2:88:d7:d1:04:e1:d4:2e:29:68:40:
32:dc:bf:6b:c8:f0:d1:93:07:14:97:75:b3:18:da:
f0:32:d7:a4:21:7e:b7:20:14:e0:fb:81:62:72:3d:
0a:09:9f:aa:a5:71:c3:7d:ce:13:0b:80:6a:21:a7:
50:dc:24:d1:e7:8c:78:c3:bf:7d:ca:70:01:c0:f9:
80:f1:4c:9a:4d:b3:be:cf:0a:0f:d0:a6:91:11:11:
ab:dd:c8:f6:0f:58:c9:4c:01:04:a7:71:93:02:dd:
a4:49:b3:c4:4d:12:0b:f2:49:a8:84:35:c9:df:b8:
ab:f5:a0:9b:05:0e:99:e8:3d:63:b6:7c:fe:b5:89:
b4:12:f8:39:a3:a3:3b:8f:47:c1:65:87:d3:9d:78:
a3:8b:e2:3e:c1:dc:04:39:a2:06:04:f0:aa:95:2f:
ef:f2:dd:76:da:38:18:c9:9d:28:f5:fb:7f:38:f9:
c2:13:91:07:e1:3e:00:b4:ee:0c:b8:e1:82:a2:e3:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:81:A0:F4:8C:31:AF:50:7E:AA:1D:F2:9A:F2:EF:0D:76:B8:09:AF
X509v3 Authority Key Identifier:
keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133302e302f32342d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.130.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ca:d3:2c:7a:77:b9:74:77:46:5f:7c:7f:e9:a5:c9:ad:da:
cd:66:17:42:61:69:0b:f7:a5:e1:0f:5a:8b:0c:3b:44:91:75:
5f:4d:3f:91:a5:e7:7d:43:39:5f:ed:c0:a8:6a:ad:5a:5d:70:
09:31:72:fb:82:80:b1:c4:8f:17:9e:ce:1e:98:4e:cf:25:ae:
0c:d1:ae:12:bc:1a:6b:70:f4:8f:d6:c4:9d:3b:8a:4b:14:04:
b4:d8:5a:3f:15:56:1f:c3:f3:1a:c4:29:ee:5e:1e:75:18:36:
f6:14:11:71:45:45:c4:9a:62:3e:43:91:4c:7e:f2:ca:0f:41:
62:39:1e:69:26:a9:3c:ed:e1:20:bb:00:e0:ff:ad:ec:d6:2a:
11:8b:96:ef:2d:03:ad:66:2a:b8:30:1c:57:2b:1c:bf:92:21:
02:5c:3a:d2:8a:99:af:c0:9f:f9:51:62:f3:aa:e5:2a:2b:6c:
2e:d2:9a:13:66:bd:7f:ea:ea:d7:7f:05:ca:b8:ad:c6:61:38:
fe:d6:fa:11:f9:08:f7:78:3e:06:9f:53:7f:7a:af:ff:7a:14:
17:f5:f4:bf:65:52:2f:8f:f8:65:a3:c5:5a:c8:59:4a:22:7c:
25:e9:f4:90:60:00:69:00:3e:d9:f6:d6:43:3f:30:5f:32:dc:
70:9a:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:33 2025 by rpki-client