Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e38392e33322e302f31392d3234203d3e2037343138.roa
File: 3230302e38392e33322e302f31392d3234203d3e2037343138.roa (raw, json)
Hash identifier: l3sPk6yGjKmpLvm1myHkYhxhojdxZqsjtLgPyAGLuJ4=
Subject key identifier: 9C:E0:1F:89:E3:1F:98:CD:1E:65:D2:CA:1F:4B:4F:C5:F3:FE:DD:76
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 5032AC1EA33021D3E14DF04CDDF378762A40390C
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e38392e33322e302f31392d3234203d3e2037343138.roa
Signing time: Tue 04 Feb 2025 18:29:55 +0000
ROA not before: Tue 04 Feb 2025 18:24:55 +0000
ROA not after: Tue 03 Feb 2026 18:29:55 +0000
asID: 7418
IP address blocks: 200.89.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:32:ac:1e:a3:30:21:d3:e1:4d:f0:4c:dd:f3:78:76:2a:40:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Feb 4 18:24:55 2025 GMT
Not After : Feb 3 18:29:55 2026 GMT
Subject: CN=9CE01F89E31F98CD1E65D2CA1F4B4FC5F3FEDD76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:90:95:bb:d9:da:ce:7e:2c:60:41:9b:84:
e6:17:8a:33:dc:c0:7d:3c:13:05:97:86:18:1e:4b:
ea:af:7c:35:93:a5:9a:36:96:9c:b9:a5:93:54:77:
84:55:9c:98:67:9b:c5:23:01:2b:f2:ee:76:71:57:
91:7e:5e:26:be:59:94:5e:3f:03:92:cd:00:66:23:
05:42:b9:8b:2c:27:14:1e:04:3d:9a:11:8c:86:24:
df:ff:f0:cd:14:1f:d8:cf:f3:ed:87:1e:a1:f3:e5:
df:d6:44:57:27:c2:e4:86:49:da:98:d6:e6:1f:a6:
4e:e1:95:9b:f2:59:19:23:db:ab:ca:f2:ab:f5:ab:
1f:f7:dc:36:67:f7:29:77:c0:fc:f8:fd:3a:10:9e:
b2:6b:a1:9e:87:59:d6:34:b9:74:b9:15:6c:d8:d1:
93:08:ee:bf:1c:f7:f9:f3:a6:6e:35:d9:65:99:d6:
81:f9:c4:a6:5a:9c:70:6c:5d:ce:8d:1a:25:a2:00:
e8:92:5f:07:20:18:da:48:25:4f:d1:8c:48:f9:36:
25:50:d6:c3:5e:b6:3f:f2:0e:5f:04:cf:34:2d:e2:
c1:b1:05:41:d8:d8:a0:16:13:fb:ca:55:1a:60:c7:
13:b8:2c:cb:7a:e2:44:2c:3c:13:8e:55:24:71:7f:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:1F:89:E3:1F:98:CD:1E:65:D2:CA:1F:4B:4F:C5:F3:FE:DD:76
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e38392e33322e302f31392d3234203d3e2037343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.89.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:63:08:bd:f0:b1:80:bb:43:02:25:7d:19:01:ae:5f:99:91:
5b:f8:72:a4:95:9f:14:1e:39:fd:50:83:c5:04:e3:b6:2b:41:
8f:72:31:35:ba:46:d4:83:fc:dd:53:fd:0a:98:73:cc:37:da:
60:d4:f0:f2:f3:5e:bf:0f:13:a1:9b:b7:fe:b0:8b:ff:17:79:
e0:24:90:03:48:9a:1c:1e:f2:08:1a:28:48:33:64:5d:d3:ab:
da:bb:71:4b:91:a5:05:23:6a:b8:31:ba:82:c3:b4:87:97:e4:
c8:0f:9f:cf:be:35:81:4e:0b:31:b3:3a:07:26:80:47:95:3b:
4d:94:9f:b3:87:c4:71:b9:ce:1b:00:ce:1a:81:6f:c2:1d:3a:
97:3a:25:6a:d0:3d:0f:cd:8e:10:91:2c:a2:d7:10:5d:3f:e2:
fc:80:7a:0c:76:9e:0c:e2:f4:58:7d:3c:3d:cb:4c:c8:30:b4:
07:36:29:aa:f8:6d:e8:a0:9c:f7:65:35:55:37:a5:a2:17:e5:
20:24:93:25:23:6a:82:cc:dd:cb:16:c6:f7:88:b0:a6:42:c9:
74:55:f0:e9:9e:45:9c:4f:18:ce:fa:f0:11:a1:e8:7d:04:27:
06:dd:f2:d4:a4:c4:53:41:4e:b4:73:59:a0:90:2b:6f:16:4e:
3c:9b:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:22 2025 by rpki-client