Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/3230302e352e34382e302f32302d3234203d3e20323633373632.roa
File: 3230302e352e34382e302f32302d3234203d3e20323633373632.roa (raw, json)
Hash identifier: GpYkM92BGOefAMyqN+IffNq1Hi9qkTQWfoaJXV0VWGE=
Subject key identifier: D1:1A:A2:67:EA:46:26:DA:6F:BC:FD:BE:38:0B:91:DF:E4:46:51:A1
Certificate issuer: /CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Certificate serial: 51BCEDFDC3773CC61F505769BD2EC0634A18264E
Authority key identifier: F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/3230302e352e34382e302f32302d3234203d3e20323633373632.roa
Signing time: Tue 04 Feb 2025 18:52:30 +0000
ROA not before: Tue 04 Feb 2025 18:47:30 +0000
ROA not after: Tue 03 Feb 2026 18:52:30 +0000
asID: 263762
IP address blocks: 200.5.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:bc:ed:fd:c3:77:3c:c6:1f:50:57:69:bd:2e:c0:63:4a:18:26:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F560245552ABA4019972F9F5D1842354FC2CDB48
Validity
Not Before: Feb 4 18:47:30 2025 GMT
Not After : Feb 3 18:52:30 2026 GMT
Subject: CN=D11AA267EA4626DA6FBCFDBE380B91DFE44651A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:28:99:83:17:93:50:f9:a3:8e:25:8b:68:
03:cd:bd:8a:5c:93:71:7b:94:6b:c7:1a:5d:19:95:
51:d0:4a:ea:d9:52:47:15:ed:5b:fe:ab:46:21:fa:
2c:05:44:71:8e:7a:0a:ef:85:ef:8d:f3:3d:b4:05:
ea:e7:03:cc:69:9c:66:5f:e8:e2:dc:2a:11:46:36:
5f:87:be:f0:d4:37:67:95:00:46:97:2b:0a:bf:e2:
ad:43:04:24:00:75:c9:7b:f4:88:1b:f1:6b:f7:dc:
80:53:4c:f3:24:d9:71:42:d1:67:60:c8:2d:dc:ae:
91:dc:d2:3b:05:f7:86:5f:13:dc:33:01:72:ef:68:
d5:c5:b0:03:52:36:6f:e1:bf:23:bc:ca:19:79:42:
6a:58:83:45:de:e1:49:59:96:00:e6:6a:bd:7f:e0:
a0:f0:52:67:49:f1:a2:6a:5c:be:e4:6c:fc:83:12:
b5:e6:00:f1:22:71:20:18:15:1f:c8:49:e0:45:d2:
cf:14:9f:8e:83:23:59:09:6c:94:d2:60:37:c6:e1:
76:b6:7a:20:c7:e2:86:a0:f5:9b:ac:fa:0e:c2:66:
e1:b5:9d:19:ae:cc:f9:d8:d1:53:0b:a4:cf:f9:cc:
a1:1d:48:4e:2f:9e:8a:a4:22:3a:ff:78:43:74:af:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1A:A2:67:EA:46:26:DA:6F:BC:FD:BE:38:0B:91:DF:E4:46:51:A1
X509v3 Authority Key Identifier:
keyid:F5:60:24:55:52:AB:A4:01:99:72:F9:F5:D1:84:23:54:FC:2C:DB:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/F560245552ABA4019972F9F5D1842354FC2CDB48.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F560245552ABA4019972F9F5D1842354FC2CDB48.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D688DEEEB6EE470E2F40641231B2C389CC65C0AFA5BA6CB5A6E5229D3A463479/0/3230302e352e34382e302f32302d3234203d3e20323633373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.5.48.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:e0:58:5e:37:d0:e9:39:76:0f:1d:42:6a:1a:c9:f7:a0:90:
78:11:f5:df:29:41:6c:14:b9:16:82:39:c7:9b:90:27:a5:e9:
20:87:e5:88:fa:9e:24:36:97:d0:67:a3:57:4e:81:63:53:7c:
51:f8:d1:b1:2c:f5:25:6b:76:eb:4a:d7:46:93:b4:91:de:ce:
1a:9c:c4:22:1c:11:71:aa:13:1e:00:64:f3:e4:86:0d:99:d7:
8d:ca:47:72:68:2a:ad:32:19:12:62:ea:b9:52:e9:b0:10:3f:
89:3f:32:b9:0b:79:36:67:b9:0c:74:73:3e:63:ec:24:12:b7:
1b:79:65:0a:f2:43:7e:c8:b1:0d:6b:e6:fa:8b:e3:b3:17:75:
64:30:e5:f6:fd:58:cc:ef:b2:1f:57:b3:01:09:2b:b6:3c:df:
2a:34:ee:52:84:80:8f:d3:e9:dd:9f:11:6a:8e:7d:45:31:9d:
7d:4b:19:07:2f:47:ca:26:03:74:1a:52:6b:31:9b:da:a9:e8:
a0:25:7c:35:7c:4c:57:57:0d:26:b3:bf:28:6f:6f:c8:0b:ae:
1f:8c:0d:86:6a:3d:2d:5f:f4:c2:96:33:9a:02:b5:5f:0b:0e:
8b:52:ca:b6:b6:8e:2f:39:86:7a:bd:83:6e:b7:75:a4:ce:d8:
b5:58:76:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:21 2025 by rpki-client