Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e33322e302f31392d3234203d3e203136363239.roa
File: 3230302e3131322e33322e302f31392d3234203d3e203136363239.roa (raw, json)
Hash identifier: V1drZIqJFbj4FI5GiM+MxJ7uGMkYgHLvyH3RoY8Yjn0=
Subject key identifier: 21:F3:8A:C2:F4:CF:5A:42:08:E7:1A:3E:D9:C0:67:92:E9:96:3A:4A
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 1B1122516CBE76686ABBE85E9335E394054BAC40
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e33322e302f31392d3234203d3e203136363239.roa
Signing time: Tue 04 Feb 2025 18:30:00 +0000
ROA not before: Tue 04 Feb 2025 18:25:00 +0000
ROA not after: Tue 03 Feb 2026 18:30:00 +0000
asID: 16629
IP address blocks: 200.112.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:11:22:51:6c:be:76:68:6a:bb:e8:5e:93:35:e3:94:05:4b:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Feb 4 18:25:00 2025 GMT
Not After : Feb 3 18:30:00 2026 GMT
Subject: CN=21F38AC2F4CF5A4208E71A3ED9C06792E9963A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:b1:4e:ea:32:6d:a2:5e:07:de:f0:0e:ea:
f8:ca:57:9f:47:11:d7:a3:9e:d2:65:b2:26:de:c1:
0e:05:c3:97:31:10:e0:da:0d:b1:d0:67:30:38:1c:
bf:ac:53:ac:6c:bf:8f:d3:26:63:f5:b5:36:79:6b:
1b:78:f0:20:05:d2:d9:5c:6e:4c:c6:ae:72:0b:5f:
3d:f1:80:63:50:6f:2f:22:04:54:2b:4a:6d:ab:fa:
c0:09:72:67:c6:40:0e:26:ce:2f:e0:1c:aa:5c:0c:
0f:8f:cd:e8:18:f0:13:25:55:0c:90:e7:23:73:09:
f7:0e:37:66:7b:ca:d3:46:71:eb:2c:e6:b6:c9:aa:
85:d2:67:fb:75:12:02:47:82:ba:c3:91:72:e6:54:
9d:89:85:2d:76:07:42:b0:ba:b8:0e:d8:48:39:d5:
24:19:27:ab:63:91:e3:a0:90:e3:7f:a9:f3:36:01:
d6:63:47:89:df:5a:31:0d:14:1b:01:cb:60:fe:c2:
65:51:99:00:2e:8d:02:b4:8b:68:bc:70:c0:d9:bd:
50:f8:69:62:8c:8b:b8:c2:cc:7b:17:4f:65:c1:c5:
67:be:13:ba:1d:03:3f:81:1e:17:c3:0f:f7:5a:16:
58:6e:2f:71:08:f7:d8:b4:42:06:08:c8:20:42:c0:
e4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:8A:C2:F4:CF:5A:42:08:E7:1A:3E:D9:C0:67:92:E9:96:3A:4A
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e33322e302f31392d3234203d3e203136363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.32.0/19
Signature Algorithm: sha256WithRSAEncryption
83:51:27:2e:85:94:ee:d1:eb:d7:03:c4:b5:85:c1:c0:09:7e:
40:d9:0a:35:8d:72:05:9e:e6:11:f5:fa:e4:b4:4a:c2:ee:5b:
bd:55:45:2e:c4:27:4b:f6:16:94:4e:db:04:d4:35:c7:6b:44:
20:70:3b:d9:c1:35:59:3c:8e:50:ef:83:83:3a:63:b8:38:59:
cc:f3:e8:c6:39:30:04:e8:ea:8b:f3:1d:60:f1:8d:d8:b7:86:
67:89:90:ad:f9:b3:f4:e4:be:40:79:d4:68:31:d0:c9:23:ec:
eb:25:cc:52:00:41:59:f1:d7:b4:c3:52:c1:59:58:06:5a:9f:
39:f2:52:65:63:e1:fd:f4:24:00:a3:9a:4f:8d:7d:e0:90:bb:
b5:75:cb:8d:ad:b1:6a:da:8a:24:34:ad:d5:4d:61:4d:9c:f6:
82:65:ea:5c:9f:45:8d:7a:a9:45:d0:a4:e8:41:f9:ad:76:91:
48:b6:c5:0d:e6:cd:82:4f:b8:f0:71:0d:4d:2e:a0:a5:7a:50:
19:92:89:1c:b3:b0:b9:5f:5d:df:72:47:38:a1:b7:16:87:49:
8c:6b:45:4f:f2:e6:b2:3a:2b:cb:83:0d:ed:6f:a4:74:f9:a5:
ed:7b:ff:8b:e6:56:a9:5b:49:71:88:0b:71:1e:72:eb:f0:3d:
95:63:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:17 2025 by rpki-client