Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235342e302f32342d3234203d3e20323633323432.roa
File: 3230302e31322e3235342e302f32342d3234203d3e20323633323432.roa (raw, json)
Hash identifier: ByZ6eWAQ4YPnnoAUYf3V/98QJ2bvAnMp9z5guwvyOvk=
Subject key identifier: 40:22:6E:39:6A:1F:8C:4B:EC:CD:D9:E5:33:A6:54:54:76:A8:9E:72
Certificate issuer: /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial: 13038CDC125818C091754252F316D7EC541E2D1C
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235342e302f32342d3234203d3e20323633323432.roa
Signing time: Tue 04 Feb 2025 18:25:27 +0000
ROA not before: Tue 04 Feb 2025 18:20:27 +0000
ROA not after: Tue 03 Feb 2026 18:25:27 +0000
asID: 263242
IP address blocks: 200.12.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:03:8c:dc:12:58:18:c0:91:75:42:52:f3:16:d7:ec:54:1e:2d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
Validity
Not Before: Feb 4 18:20:27 2025 GMT
Not After : Feb 3 18:25:27 2026 GMT
Subject: CN=40226E396A1F8C4BECCDD9E533A6545476A89E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:d9:10:c3:87:02:f3:86:86:e6:d5:ff:bb:
ea:54:f6:7e:82:9b:53:a5:6a:07:19:a3:21:59:f7:
23:90:dd:99:d1:6b:60:35:3a:af:cc:0d:ba:c1:74:
da:5a:84:21:a4:cd:0c:f8:0d:d0:30:f6:ce:2d:e0:
2e:82:7f:55:15:41:5b:35:c5:ef:73:b8:7d:4f:e0:
c1:a0:f0:43:ea:e5:d2:cb:af:62:af:7a:60:a6:e6:
68:18:8b:15:6b:43:18:c4:93:b1:42:43:61:bc:79:
35:1b:e4:5f:f3:2c:be:0f:f6:db:d2:92:0e:81:77:
91:3a:99:e1:05:a4:04:31:d4:0a:ae:59:91:3d:ce:
c5:c1:16:44:3d:cb:b5:80:cc:65:ea:98:12:1d:17:
61:b7:f3:d5:bc:b6:55:20:ba:19:af:4c:4b:90:7f:
54:22:d8:35:49:8b:8b:52:54:b4:8e:d4:e9:84:05:
d2:54:01:6e:cd:76:40:17:28:6b:6b:af:3f:f7:5a:
5f:3d:69:a5:e8:9c:f8:a0:3b:4c:8e:dd:64:1b:df:
b5:ef:5c:51:f0:c3:c3:bd:e6:e2:66:e6:ec:bc:63:
7e:95:ff:7e:fc:e0:c9:df:56:9f:39:e9:f7:ce:aa:
7a:37:b8:65:f6:fd:a1:a6:94:93:3b:5e:c1:d4:63:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:6E:39:6A:1F:8C:4B:EC:CD:D9:E5:33:A6:54:54:76:A8:9E:72
X509v3 Authority Key Identifier:
keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235342e302f32342d3234203d3e20323633323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.254.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c8:44:6b:2b:0e:3f:f2:53:e5:65:5e:93:77:05:12:57:2b:
8d:b8:77:92:32:7e:94:97:bd:85:65:96:d5:a0:22:43:54:9c:
08:7d:cc:99:51:eb:f2:78:9a:a7:6c:4c:bb:54:92:ba:fe:20:
76:32:98:7d:a1:e7:c6:87:5f:5d:2f:11:d6:35:ca:a2:0c:ba:
2c:4d:34:ac:10:2d:60:3b:1d:e8:68:d8:c7:98:c5:f4:93:3b:
ce:cf:2c:5a:0f:f0:66:c3:40:27:35:7b:e4:7a:e6:5e:60:77:
3c:fd:86:a5:aa:ba:42:93:29:be:89:ce:32:97:66:88:e3:63:
14:80:72:5a:12:07:fd:a0:fd:8f:5e:4a:9f:e2:75:d9:c0:6d:
d2:51:33:51:b4:cf:a5:e3:70:3c:c5:81:36:f8:0f:32:ae:ab:
39:90:c5:77:7d:1c:27:df:00:0d:e2:8e:46:29:0e:44:ca:69:
8a:ca:0c:bc:ec:30:22:ac:7e:e4:94:0e:d5:73:05:a2:77:af:
b8:33:6c:bf:40:84:4b:f4:94:c3:38:3b:20:aa:82:ec:ec:5a:
5d:b0:b0:d7:40:e6:84:cf:60:8f:cd:9d:11:78:97:55:66:04:
5d:e9:c2:46:27:b5:ec:b5:f4:16:7e:af:68:68:ed:cf:f9:a6:
0f:a3:b1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:15:24 2025 by rpki-client