Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133342e302f32342d3234203d3e203238303839.roa
File: 3230302e33352e3133342e302f32342d3234203d3e203238303839.roa (raw, json)
Hash identifier: RwtqOPjmlaG2jF+SDnbxMpyYCaBIfNNBfmfMU8KmUP4=
Subject key identifier: A8:D3:93:EA:E2:F6:E1:20:E3:C7:74:21:DA:D7:EA:8A:FE:00:89:51
Certificate issuer: /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial: 638BFCC522331CBDD1D540B536BAECA47C63CC56
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133342e302f32342d3234203d3e203238303839.roa
Signing time: Fri 14 Mar 2025 13:45:00 +0000
ROA not before: Fri 14 Mar 2025 13:40:00 +0000
ROA not after: Fri 13 Mar 2026 13:45:00 +0000
asID: 28089
IP address blocks: 200.35.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8b:fc:c5:22:33:1c:bd:d1:d5:40:b5:36:ba:ec:a4:7c:63:cc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
Validity
Not Before: Mar 14 13:40:00 2025 GMT
Not After : Mar 13 13:45:00 2026 GMT
Subject: CN=A8D393EAE2F6E120E3C77421DAD7EA8AFE008951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:c7:08:0a:55:f6:e1:aa:4f:88:17:0a:55:
e9:fe:f3:d9:4f:10:43:38:1b:9f:88:ca:83:41:00:
c1:2f:9d:ea:2e:bb:38:3c:e5:cc:75:c1:a1:ca:71:
3b:0d:d2:57:45:3c:4d:e6:67:d5:0d:27:d7:64:13:
d3:97:ef:e4:e7:72:05:a2:6b:0a:87:89:79:e9:0f:
b0:62:01:4f:fb:0a:69:9b:d0:c7:c7:75:aa:04:25:
01:e2:fd:b2:e5:4c:88:54:60:06:c8:d0:86:42:df:
f1:13:f8:b7:6d:e6:2d:a0:e8:b6:a0:ca:16:ca:d8:
18:85:fb:0c:96:50:bf:c4:bc:36:32:99:7c:a5:33:
d7:f1:88:7c:71:40:3a:16:3c:1b:17:ea:87:9c:ca:
47:e7:0e:d5:4d:54:56:63:c2:b1:3a:5d:17:c8:04:
f5:24:51:9d:08:8e:1b:41:95:15:08:ba:07:d9:68:
99:f3:25:12:2a:47:60:2c:67:16:c1:cd:d4:01:76:
e3:8f:34:62:e9:01:2e:bc:bf:73:67:2b:c8:8f:50:
ec:ac:06:a6:6a:d9:e0:73:66:f6:64:c8:c0:c2:18:
64:e6:a5:a9:53:59:1e:b7:06:0a:7f:0c:1c:2d:06:
f8:04:69:0f:64:de:2f:43:a1:86:d5:37:1c:bd:b5:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:93:EA:E2:F6:E1:20:E3:C7:74:21:DA:D7:EA:8A:FE:00:89:51
X509v3 Authority Key Identifier:
keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133342e302f32342d3234203d3e203238303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.134.0/24
Signature Algorithm: sha256WithRSAEncryption
26:12:f7:e5:f5:8d:5a:90:d5:a7:af:d7:ae:f7:36:62:93:2f:
da:f3:fd:ed:59:ab:60:59:20:e3:01:a6:b3:12:fc:8f:01:d9:
ab:6a:d8:25:a0:ae:f1:6c:4e:7b:9a:87:d0:36:c9:91:d9:95:
55:e3:e0:e6:20:ca:75:23:cf:01:88:21:9d:13:04:c2:5d:57:
fe:29:77:22:41:90:7c:73:22:64:3d:c0:8a:91:01:55:fb:10:
54:c5:f4:ce:bd:a5:62:f0:64:f8:6d:49:40:20:23:c3:ad:b0:
45:c7:be:b1:43:17:da:89:11:79:67:21:ad:dd:54:37:27:45:
0c:c7:a5:59:30:7d:cf:eb:7a:6a:6e:20:e7:d4:5d:6c:15:1c:
2e:ff:6f:24:a5:ca:e0:48:28:90:18:e7:c3:55:c9:dc:b2:99:
ac:7a:ee:c8:5a:96:c2:a4:f8:61:02:90:97:d3:16:eb:4a:60:
74:e7:63:11:13:c0:57:6d:5a:9f:eb:74:89:5f:bd:91:38:51:
e0:0f:9e:47:c0:35:a2:b9:f9:04:40:45:a4:98:da:be:9d:f0:
4c:1c:68:57:0c:b4:db:7d:6c:51:84:d2:57:0c:7e:f2:fe:01:
d7:c2:c4:e8:bf:db:41:ea:90:29:8d:57:d4:5d:bc:93:e2:c4:
13:f0:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:12:53 2025 by rpki-client