Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3133382e302f32342d3234203d3e2036333036.roa
File: 3230302e33312e3133382e302f32342d3234203d3e2036333036.roa (raw, json)
Hash identifier: efYIe0u2KBEVi5+Y+AokorkNkvr/r1h74mxgXOP1cKk=
Subject key identifier: F6:35:BD:AD:97:D3:C2:FB:65:49:77:C2:B8:36:34:DA:A4:C8:FB:F3
Certificate issuer: /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial: 5C66903694307C67FF76266D218F1C0E3F3F3403
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3133382e302f32342d3234203d3e2036333036.roa
Signing time: Tue 04 Feb 2025 18:32:57 +0000
ROA not before: Tue 04 Feb 2025 18:27:57 +0000
ROA not after: Tue 03 Feb 2026 18:32:57 +0000
asID: 6306
IP address blocks: 200.31.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:66:90:36:94:30:7c:67:ff:76:26:6d:21:8f:1c:0e:3f:3f:34:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Validity
Not Before: Feb 4 18:27:57 2025 GMT
Not After : Feb 3 18:32:57 2026 GMT
Subject: CN=F635BDAD97D3C2FB654977C2B83634DAA4C8FBF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:85:8a:fe:a2:43:43:42:25:b1:a9:6d:74:
e0:83:cf:0c:95:17:ce:2a:5e:dc:3f:c6:8d:fc:19:
99:d2:b2:d1:a8:12:9e:54:52:a2:1b:4a:19:b0:45:
0c:ac:2c:ce:fd:da:96:a2:ea:21:07:ab:91:96:f9:
7f:cf:59:51:88:fd:e6:7f:ec:76:90:59:df:8a:dd:
2d:85:52:f6:ee:87:a1:dc:7b:75:cb:e1:38:a6:8e:
10:b2:68:75:4f:6b:33:53:ab:c9:7e:0f:e1:48:2e:
88:3f:3f:3d:04:11:66:e7:4d:32:59:74:00:87:56:
35:3c:68:d6:fb:b0:fb:a2:81:d5:b2:f2:07:6d:0d:
d9:4c:c9:9f:6f:43:3f:7c:56:05:65:72:99:7e:e3:
8a:84:9a:c0:34:9c:6e:c2:92:44:c7:f6:ae:c5:cb:
d5:fc:6d:b9:46:62:8e:c9:3f:52:48:6a:da:35:33:
f3:8d:0b:79:27:21:e6:ee:a8:33:b3:fe:8f:56:1a:
3e:0a:25:c7:f9:b1:31:67:25:b4:20:6f:2c:2c:81:
b6:ef:40:e0:7b:b4:46:d1:a9:89:d4:eb:fd:bd:7a:
ce:e6:18:ba:e9:e1:37:70:e7:be:4a:5f:57:3b:92:
59:48:d7:11:ea:0c:03:0d:c9:56:a2:f0:9c:72:09:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:35:BD:AD:97:D3:C2:FB:65:49:77:C2:B8:36:34:DA:A4:C8:FB:F3
X509v3 Authority Key Identifier:
keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3133382e302f32342d3234203d3e2036333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c7:a7:24:28:18:7c:aa:b8:84:37:7d:c4:b9:a7:b7:9a:0a:
ff:a1:6e:07:3c:56:f3:d9:9a:e6:1a:ec:ce:d0:5a:39:6c:0d:
5a:69:92:54:2a:60:18:e9:64:7f:4c:ce:26:b0:be:a4:28:80:
2e:07:55:53:d3:33:1e:e8:c9:0b:7f:c3:0f:42:9f:3b:c5:42:
32:88:ae:cd:94:cc:5f:04:23:cb:73:cc:e5:85:26:3b:a4:b6:
34:30:20:9e:93:91:c2:45:73:7e:35:e7:91:0b:3d:c5:18:a7:
ae:c1:25:30:44:eb:58:e9:bb:15:18:3b:8f:90:68:5d:20:fb:
74:2e:ab:c7:39:e5:4f:9c:36:df:cd:e6:d0:aa:40:91:0f:7d:
89:da:d3:fb:67:45:46:f3:3a:8a:11:64:be:a1:2d:ab:03:80:
ba:c6:e4:68:c4:cd:3e:52:df:52:fe:87:40:ee:92:f5:a6:bf:
00:d1:78:08:73:37:21:70:b9:02:ba:19:1e:b9:28:51:26:84:
23:ef:0c:08:96:78:29:8a:91:97:1b:9f:54:02:8e:31:eb:50:
16:30:41:50:d3:00:49:48:12:ba:f4:cd:d1:d7:47:ff:a4:23:
b8:2c:5e:21:d5:9d:2c:10:40:e2:00:2d:97:7f:2e:fc:cd:44:
7a:34:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:09 2025 by rpki-client