Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/3230302e362e31372e302f32342d3234203d3e203233303331.roa
File: 3230302e362e31372e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier: dIEVjdb3lQCo9g9fO5GmMpWFti9yLYGOF7cFBhbUkAQ=
Subject key identifier: 7F:1B:9B:BF:4C:20:E9:14:0A:5E:12:A9:B2:E4:64:CC:04:8A:60:18
Certificate issuer: /CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833
Certificate serial: 4993C6376FDBEE6218DB715129B5001CF08D74D9
Authority key identifier: FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/3230302e362e31372e302f32342d3234203d3e203233303331.roa
Signing time: Tue 04 Feb 2025 18:27:38 +0000
ROA not before: Tue 04 Feb 2025 18:22:38 +0000
ROA not after: Tue 03 Feb 2026 18:27:38 +0000
asID: 23031
IP address blocks: 200.6.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:93:c6:37:6f:db:ee:62:18:db:71:51:29:b5:00:1c:f0:8d:74:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833
Validity
Not Before: Feb 4 18:22:38 2025 GMT
Not After : Feb 3 18:27:38 2026 GMT
Subject: CN=7F1B9BBF4C20E9140A5E12A9B2E464CC048A6018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:a3:11:ce:bb:a4:ed:4a:b6:8a:14:19:af:
24:58:8b:5c:3d:85:71:d0:07:e6:9d:49:ed:7c:33:
43:7e:3b:75:66:5b:2c:d5:39:4f:41:2a:91:40:d2:
36:76:9d:9d:0d:d3:2b:02:ff:7c:34:24:dd:1a:4e:
97:c5:ba:c3:03:14:8c:8a:6f:1b:4f:fb:ae:93:a0:
08:fe:ba:c4:02:71:46:30:88:a2:cf:04:16:a5:75:
56:bc:b4:07:61:bb:a8:2c:23:60:8e:33:1e:42:2b:
aa:3e:7d:6a:13:cb:31:d9:6f:ab:0b:6e:87:fb:40:
20:04:36:f7:28:81:57:4f:c0:fe:07:6a:39:65:0b:
e6:0a:26:41:c7:39:a0:ea:6e:cc:9d:fe:00:b7:34:
6d:22:90:de:61:10:fb:de:e3:97:a2:77:de:e8:04:
64:c0:d8:f1:22:6d:ee:bd:b0:26:73:32:69:08:56:
83:39:fa:95:a9:81:86:1d:d9:df:65:f8:63:5b:1a:
48:bb:d5:4f:56:a4:99:fb:96:e7:ea:a5:11:3d:39:
e1:ca:f1:8e:a4:f9:d6:62:0b:ac:3f:29:68:d7:c5:
40:3b:58:9c:8a:fa:e1:f2:23:40:37:7a:0a:27:7e:
8d:8d:1b:15:86:87:f6:84:55:1e:e3:fb:35:7e:64:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1B:9B:BF:4C:20:E9:14:0A:5E:12:A9:B2:E4:64:CC:04:8A:60:18
X509v3 Authority Key Identifier:
keyid:FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/3230302e362e31372e302f32342d3234203d3e203233303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.6.17.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ce:28:a3:b9:3b:e0:22:5f:63:48:11:41:11:34:52:b3:25:
bf:0c:c2:f2:98:94:51:b0:1c:78:91:be:f6:4d:9c:15:f2:e5:
80:17:43:28:9b:9c:6b:98:49:be:d2:cd:e2:c6:6e:4f:c3:8c:
7b:1f:0e:68:4d:5b:af:c3:0a:d1:de:be:9a:6c:7b:36:0d:3f:
10:ec:91:05:07:3a:f1:01:99:2e:a7:e3:ff:d3:68:73:56:6c:
2d:86:36:b3:a9:8a:63:c0:eb:51:f5:2b:5a:3f:44:a5:f1:bd:
e0:78:03:d4:fd:a6:16:ad:1a:18:a7:3f:bb:a7:db:91:8d:cc:
e0:7f:b1:e9:20:b8:bb:00:74:9b:10:e3:31:0c:94:87:f8:d9:
18:a2:3a:ba:c8:32:58:bb:40:fa:ec:25:76:f5:f8:fe:75:a6:
e3:a7:d8:9c:7f:81:ee:5f:92:0c:5e:e0:8b:34:b1:b6:f9:90:
d5:71:78:32:31:8d:42:bd:24:41:8d:0e:c9:fe:15:fa:03:f7:
58:f1:9a:cc:62:0a:da:d4:12:c9:d6:1c:89:81:e8:b5:41:b1:
6d:ef:3a:29:f5:e0:96:b4:98:14:df:f5:ba:03:9d:d4:85:99:
0a:42:1c:de:32:6f:e8:fb:fb:89:98:b0:6c:cb:cd:cd:e0:af:
e8:00:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:01 2025 by rpki-client