Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e382e302f32342d3234203d3e2038313531.roa
File: 3230302e33332e382e302f32342d3234203d3e2038313531.roa (raw, json)
Hash identifier: PHBs0IqBonOIHnPodJyvrTMB0ToUOlk4en11TBmiaXc=
Subject key identifier: 33:D4:7F:82:D5:41:1A:4B:E2:F3:F6:DC:C0:E0:26:19:0C:E9:C4:94
Certificate issuer: /CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Certificate serial: 66C39713E02B111CA059D128016CC8C25ACA9D21
Authority key identifier: B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e382e302f32342d3234203d3e2038313531.roa
Signing time: Tue 04 Feb 2025 18:21:17 +0000
ROA not before: Tue 04 Feb 2025 18:16:17 +0000
ROA not after: Tue 03 Feb 2026 18:21:17 +0000
asID: 8151
IP address blocks: 200.33.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c3:97:13:e0:2b:11:1c:a0:59:d1:28:01:6c:c8:c2:5a:ca:9d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Validity
Not Before: Feb 4 18:16:17 2025 GMT
Not After : Feb 3 18:21:17 2026 GMT
Subject: CN=33D47F82D5411A4BE2F3F6DCC0E026190CE9C494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:11:e8:31:af:0e:80:8e:1d:06:fe:14:ec:
6b:90:ad:6b:60:f8:46:03:fb:a6:16:b0:91:de:14:
a5:60:b2:ea:a8:78:ae:cb:ad:bf:c9:dd:82:74:3d:
60:f4:de:9b:fc:6d:dd:1f:fe:9f:33:aa:ef:da:5d:
5a:64:b0:6c:34:40:d8:de:5b:db:30:8d:e4:91:69:
a4:c2:72:a1:7e:a2:99:8e:35:ff:36:ea:b2:df:ed:
46:31:c7:f5:6f:63:2a:eb:15:49:7d:60:4a:55:95:
76:77:e0:2c:43:a3:38:15:66:b0:ce:df:d0:b0:d9:
83:f5:6d:75:da:3c:9f:62:a0:0a:17:c2:08:69:54:
8c:28:01:8c:5c:50:95:a8:27:09:44:bf:5b:4f:e0:
93:57:eb:45:b3:87:26:02:07:ce:4f:4d:8a:e3:58:
a4:51:e9:c1:87:88:46:3e:77:1e:17:2e:0d:e4:29:
40:91:47:4e:b4:3b:ca:c9:1f:1f:bb:bc:a0:b6:8c:
ce:f1:9c:e3:07:8e:63:27:fd:1c:1a:e9:3a:5e:b3:
90:6b:20:d2:98:a2:28:99:82:89:dd:9f:46:73:ba:
8b:97:29:0c:39:dd:d2:ac:a8:b4:8c:e3:72:d2:a8:
64:ce:de:7d:e2:2d:f3:fd:ad:51:f9:1c:8f:91:6b:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D4:7F:82:D5:41:1A:4B:E2:F3:F6:DC:C0:E0:26:19:0C:E9:C4:94
X509v3 Authority Key Identifier:
keyid:B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e382e302f32342d3234203d3e2038313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.8.0/24
Signature Algorithm: sha256WithRSAEncryption
88:14:65:66:61:9a:82:c7:96:52:63:17:e2:0a:c1:e0:da:d7:
03:59:46:8c:7a:19:8e:0e:2b:3c:ad:e2:8d:5e:08:8c:f8:85:
f3:5b:47:ad:6b:4d:f4:d5:0c:2e:04:1b:14:45:89:38:7c:dc:
07:36:ac:dd:59:17:6a:4e:e9:be:d8:f4:86:6f:dc:11:8b:b4:
79:86:6e:47:bd:b6:d1:b8:22:3a:3b:32:66:d1:4c:0c:0f:c9:
87:26:21:20:8d:af:ec:bc:39:d0:90:fc:d9:8b:ca:d7:a2:0f:
9b:8d:82:91:25:f0:85:2b:f3:00:f8:6a:3a:0c:df:c7:8c:d4:
20:9c:54:3a:f7:8c:56:ea:4b:d3:50:a9:0a:bf:51:ba:5e:6d:
18:c8:79:e4:ba:bf:4b:0f:b1:21:e5:6e:74:46:6b:fe:8a:29:
fc:da:00:bf:2c:ae:c7:e2:4c:21:5d:a7:f6:31:cb:a3:65:32:
6e:05:4f:ad:52:85:71:99:6e:a8:ba:e1:f7:47:fc:1e:95:a4:
9e:8c:02:0d:03:3a:b4:38:ff:c7:82:36:8f:da:21:85:b8:48:
f0:17:9f:80:e5:96:d9:d2:64:26:39:ce:a8:16:79:70:3d:de:
ad:dc:2e:23:9a:79:1a:db:10:5f:d7:c3:09:e7:30:2d:55:c6:
35:f5:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:18 2025 by rpki-client