Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133352e302f32342d3234203d3e2038303438.roa
File: 3230302e33352e3133352e302f32342d3234203d3e2038303438.roa (raw, json)
Hash identifier: V7lMf5CSkkBuMEiLQ3+mR8S/CZn5u59G4yTs6gzi0UM=
Subject key identifier: EB:7F:40:01:80:5A:8C:B9:F9:3A:E8:83:80:F7:5C:2F:FC:69:7D:BE
Certificate issuer: /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial: 531056900A6A77720D108BA7B24E7745F8EEB4CD
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133352e302f32342d3234203d3e2038303438.roa
Signing time: Fri 14 Mar 2025 13:45:00 +0000
ROA not before: Fri 14 Mar 2025 13:40:00 +0000
ROA not after: Fri 13 Mar 2026 13:45:00 +0000
asID: 8048
IP address blocks: 200.35.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:10:56:90:0a:6a:77:72:0d:10:8b:a7:b2:4e:77:45:f8:ee:b4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
Validity
Not Before: Mar 14 13:40:00 2025 GMT
Not After : Mar 13 13:45:00 2026 GMT
Subject: CN=EB7F4001805A8CB9F93AE88380F75C2FFC697DBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:c7:88:aa:c1:2e:8c:d6:42:39:82:cd:b4:
ca:17:55:d8:14:c6:e3:b1:26:28:ae:37:84:24:a8:
5f:e4:4a:ad:2e:f0:9b:b0:45:23:2c:00:47:28:dd:
a6:f1:e5:51:f4:d9:1f:49:6d:91:93:85:6e:ca:bd:
2e:4f:7f:96:04:14:17:8f:b5:0a:87:dd:f5:c1:8d:
cc:b7:73:68:61:a3:7d:e6:1d:f3:63:cd:f9:eb:0b:
d0:d9:01:62:71:c2:c1:12:41:b4:53:1b:60:34:73:
00:b4:5d:d4:4f:a0:87:dc:15:f0:d7:8b:da:5a:a9:
26:53:89:3b:88:de:f2:df:30:34:b3:a2:6c:95:46:
32:96:52:ca:ae:93:f1:19:2b:6c:02:5e:3f:66:04:
fe:25:ce:a0:96:92:cf:dc:5c:03:fb:7c:b5:aa:66:
ec:63:bc:c4:2a:6b:7e:f9:e1:a8:a8:ab:a2:79:1d:
38:5f:08:23:ba:e1:ca:2f:35:4e:19:ee:c1:fa:40:
8e:91:50:e8:8d:e3:7d:f4:1f:b1:ec:3c:98:4e:2a:
db:d7:49:c0:24:5b:11:d4:0d:97:2d:e7:3d:25:a7:
e4:24:c9:82:e2:2b:b7:18:ea:37:ca:01:bd:a9:ee:
c1:6d:54:91:b0:1b:f8:72:f0:36:a5:18:8d:58:9a:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:40:01:80:5A:8C:B9:F9:3A:E8:83:80:F7:5C:2F:FC:69:7D:BE
X509v3 Authority Key Identifier:
keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133352e302f32342d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:26:a5:30:6a:6b:65:11:7d:4e:fb:aa:1d:1b:66:44:6d:42:
47:6d:d8:cf:ab:50:b5:b1:dd:e1:be:0d:93:e4:8d:75:db:20:
bb:51:4c:17:55:ae:64:b8:29:e3:07:aa:12:ce:b8:08:35:5d:
b1:3d:67:94:02:a5:63:00:77:bc:e7:95:18:42:9d:5a:16:d6:
b1:c2:b3:09:1a:94:5a:21:87:32:c8:28:e0:63:57:50:f5:29:
00:0f:02:2d:2d:fd:bd:44:e3:94:c0:8f:a4:e5:a6:f5:8b:a2:
84:cc:a8:70:cb:22:0c:3a:30:88:9d:bd:ed:c6:be:41:9c:cf:
66:46:d8:21:9d:9a:87:fb:97:e6:14:c7:81:e5:8d:0d:f6:73:
e1:cd:8a:9c:8a:90:af:4f:fe:fe:7b:9c:6e:1c:57:35:6b:d4:
d7:ca:4e:66:2f:12:33:01:24:69:1d:4d:36:be:4b:f1:95:02:
87:22:8b:5b:11:0e:d5:56:88:e8:f5:7a:32:d6:3a:33:5d:11:
96:7d:93:80:e3:85:d6:3f:f4:32:bd:1b:38:a2:b1:06:42:b4:
28:30:b1:75:68:2a:4f:f9:7c:59:09:f9:ac:b7:9d:4d:79:26:
7f:05:c2:f2:cd:11:cf:f6:5d:13:97:b7:26:f2:1d:83:79:3c:
b4:ab:12:b5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUxBWkApqd3INEIunsk53RfjutM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI5Q0E3QkI0MzgyQTY0ODMzMkZEMzc3Njg5RTA0MDE2
NkM1MDVCNTAeFw0yNTAzMTQxMzQwMDBaFw0yNjAzMTMxMzQ1MDBaMDMxMTAvBgNV
BAMTKEVCN0Y0MDAxODA1QThDQjlGOTNBRTg4MzgwRjc1QzJGRkM2OTdEQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCseIqsEujNZCOYLNtMoXVdgU
xuOxJiiuN4QkqF/kSq0u8JuwRSMsAEco3abx5VH02R9JbZGThW7KvS5Pf5YEFBeP
tQqH3fXBjcy3c2hho33mHfNjzfnrC9DZAWJxwsESQbRTG2A0cwC0XdRPoIfcFfDX
i9paqSZTiTuI3vLfMDSzomyVRjKWUsquk/EZK2wCXj9mBP4lzqCWks/cXAP7fLWq
ZuxjvMQqa3754aioq6J5HThfCCO64covNU4Z7sH6QI6RUOiN4330H7HsPJhOKtvX
ScAkWxHUDZct5z0lp+QkyYLiK7cY6jfKAb2p7sFtVJGwG/hy8DalGI1YmqQJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU639AAYBajLn5OuiDgPdcL/xpfb4wHwYDVR0j
BBgwFoAUgpynu0OCpkgzL9N3aJ4EAWbFBbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTIwMjlGNjM3NDUwNjc4NUYzOTExMTFGMTA0RTY1NjA3
MDFBOUE0RDI3QkQzNkZDRkZGODE2QzBGRTYyNkQ4LzAvODI5Q0E3QkI0MzgyQTY0
ODMzMkZEMzc3Njg5RTA0MDE2NkM1MDVCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjlDQTdCQjQzODJBNjQ4MzMy
RkQzNzc2ODlFMDQwMTY2QzUwNUI1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDEyMDI5RjYzNzQ1MDY3ODVGMzkxMTExRjEwNEU2NTYwNzAxQTlBNEQy
N0JEMzZGQ0ZGRjgxNkMwRkU2MjZEOC8wLzMyMzAzMDJlMzMzNTJlMzEzMzM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMDM0Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADII4cwDQYJ
KoZIhvcNAQELBQADggEBAJompTBqa2URfU77qh0bZkRtQkdt2M+rULWx3eG+DZPk
jXXbILtRTBdVrmS4KeMHqhLOuAg1XbE9Z5QCpWMAd7znlRhCnVoW1rHCswkalFoh
hzLIKOBjV1D1KQAPAi0t/b1E45TAj6TlpvWLooTMqHDLIgw6MIidve3GvkGcz2ZG
2CGdmof7l+YUx4HljQ32c+HNipyKkK9P/v57nG4cVzVr1NfKTmYvEjMBJGkdTTa+
S/GVAocii1sRDtVWiOj1ejLWOjNdEZZ9k4DjhdY/9DK9GziisQZCtCgwsXVoKk/5
fFkJ+ay3nU15Jn8FwvLNEc/2XROXtybyHYN5PLSrErU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:36 2025 by rpki-client