Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134322e302f32342d3234203d3e203238303839.roa
File: 3230302e33352e3134322e302f32342d3234203d3e203238303839.roa (raw, json)
Hash identifier: Z90O6HEVlK5kbOgiAsNzO/XXhLwZsZ4Oy7vUaGZoFRY=
Subject key identifier: 7D:73:8C:28:21:AD:3C:7E:C7:B7:14:7D:12:E9:FF:7F:B2:D3:9F:B8
Certificate issuer: /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial: 368E12DDF9E770C6E32DBC6FB471428AF60DEA93
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134322e302f32342d3234203d3e203238303839.roa
Signing time: Thu 27 Mar 2025 16:15:00 +0000
ROA not before: Thu 27 Mar 2025 16:10:00 +0000
ROA not after: Thu 26 Mar 2026 16:15:00 +0000
asID: 28089
IP address blocks: 200.35.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8e:12:dd:f9:e7:70:c6:e3:2d:bc:6f:b4:71:42:8a:f6:0d:ea:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
Validity
Not Before: Mar 27 16:10:00 2025 GMT
Not After : Mar 26 16:15:00 2026 GMT
Subject: CN=7D738C2821AD3C7EC7B7147D12E9FF7FB2D39FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bd:76:3d:cd:05:b0:b7:73:c1:cb:d4:12:db:
66:a4:b8:a7:11:c4:2d:7f:e1:2e:a5:e1:ab:8e:4c:
86:2f:04:6b:1a:c1:71:15:75:d1:6c:a6:c2:82:25:
df:5b:a8:ae:b3:bc:e1:49:b1:1d:dc:9b:14:d8:3d:
ad:ff:ca:8f:f4:b7:08:3a:7f:25:5f:ca:ad:b2:90:
3f:33:45:33:db:da:05:ab:a3:69:bc:05:70:b8:6c:
73:69:65:57:d6:27:d5:a7:ee:ff:3c:41:34:2e:16:
ae:ea:7d:50:bf:0e:4e:c8:73:67:7f:36:47:2c:60:
7b:0e:19:83:05:2a:81:0c:81:54:a3:87:0e:bb:bb:
7b:f7:58:d3:6e:39:a4:33:a6:2c:a0:5c:f6:e5:34:
62:bc:99:44:21:0b:08:85:6c:fe:0c:8e:15:12:eb:
85:a4:7e:fd:61:ba:d8:f7:32:40:22:1e:6e:4c:88:
88:33:4c:dc:6c:23:da:c8:27:b6:0f:4d:b4:81:10:
44:f7:61:1c:37:bc:8d:a5:e5:42:35:03:a4:c2:98:
60:b1:55:ad:c1:06:1e:e9:03:e1:7f:04:7b:6e:8f:
ae:a1:ca:e7:5f:af:6b:67:f3:37:c6:17:1d:e9:f6:
49:6c:15:7c:b1:45:d5:f0:01:3d:20:8e:c4:dd:d1:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:8C:28:21:AD:3C:7E:C7:B7:14:7D:12:E9:FF:7F:B2:D3:9F:B8
X509v3 Authority Key Identifier:
keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134322e302f32342d3234203d3e203238303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.142.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4f:c1:7c:41:15:e2:cd:e9:8f:b2:bd:47:54:4c:9b:51:73:
cf:a9:8f:9e:bd:63:b2:97:11:9d:25:fe:d4:8b:be:42:88:d2:
aa:4d:90:09:bb:b1:c1:7c:dc:72:f1:fb:e1:54:33:62:df:94:
d7:74:ce:52:39:eb:83:65:89:4f:df:96:ec:22:b3:eb:40:50:
d6:c8:2d:49:cd:b9:cd:cb:aa:51:c4:bb:f2:7d:21:48:b3:7d:
42:28:0e:44:04:33:a1:44:69:6b:dc:dc:a1:c6:9d:6b:fd:af:
d3:81:a2:fe:0d:58:89:e2:84:4f:53:a2:d3:20:0f:dc:7c:72:
cd:15:b9:80:b5:79:83:a0:cb:7d:ad:f5:8d:ce:d4:ae:e6:a7:
70:76:80:67:a7:08:93:cd:aa:12:26:21:13:20:ff:17:fb:5b:
22:50:18:7d:c5:0b:47:a5:03:d9:69:e0:2a:e6:7b:35:1a:c3:
a0:ba:5b:c5:20:68:20:7d:36:5c:30:7b:c1:d6:49:62:f9:ba:
52:7b:95:06:3d:f6:78:38:58:0e:b7:fa:83:36:01:36:15:0f:
0a:c9:d8:4e:e5:5e:cf:7c:16:5a:5e:f1:9d:df:0d:12:14:5e:
0a:e6:8e:3d:84:3b:2a:d6:05:a9:e6:76:22:3c:d3:79:8c:d4:
9b:10:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:12:25 2025 by rpki-client