Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e32382e302f32342d3234203d3e203133343234.roa
File: 3230302e39312e32382e302f32342d3234203d3e203133343234.roa (raw, json)
Hash identifier: M7EvX1LAak4QV0vPc2Re4bxtuDOma7haMFhgkNtSjD0=
Subject key identifier: A3:27:0D:25:CE:45:6A:52:5A:0A:7C:1E:7B:63:59:F7:2A:31:DA:26
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 51E8984B7E2D71EB550BDBE3867E9EE1BA07F244
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e32382e302f32342d3234203d3e203133343234.roa
Signing time: Wed 22 Jan 2025 20:35:00 +0000
ROA not before: Wed 22 Jan 2025 20:30:00 +0000
ROA not after: Wed 21 Jan 2026 20:35:00 +0000
asID: 13424
IP address blocks: 200.91.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e8:98:4b:7e:2d:71:eb:55:0b:db:e3:86:7e:9e:e1:ba:07:f2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Jan 22 20:30:00 2025 GMT
Not After : Jan 21 20:35:00 2026 GMT
Subject: CN=A3270D25CE456A525A0A7C1E7B6359F72A31DA26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a0:f9:ac:31:84:9d:38:bf:bd:5d:82:f5:a0:
49:35:92:04:98:36:94:cc:96:c4:52:73:30:f6:1c:
e4:11:be:3e:35:58:4b:6c:a6:cd:d5:36:35:7f:50:
69:38:87:fe:47:bc:f6:73:f9:90:f8:bd:82:05:11:
02:54:a6:d5:be:f8:2c:fb:3c:18:3a:5b:80:e7:91:
ee:be:b4:78:d6:0b:08:2c:93:78:7b:3f:a4:72:b3:
fa:92:02:64:7d:7b:ed:2f:97:fb:ef:1b:f2:c8:aa:
93:b1:4a:6f:4d:9a:ee:bc:d3:41:ca:e0:de:99:75:
af:49:da:34:5b:41:3c:3e:d0:2c:88:16:e5:f9:65:
d4:6e:d8:ab:7b:a7:eb:71:6d:18:e3:51:64:70:12:
44:8c:4c:89:14:0c:fe:da:55:72:fe:14:72:7c:af:
a9:7f:1b:4c:2b:46:78:03:93:28:f5:18:0a:82:a9:
98:18:51:dd:45:aa:5f:ce:6c:2d:f1:b8:e0:da:33:
ac:8a:42:88:49:39:eb:89:e3:d5:91:0a:f8:27:72:
62:62:6e:54:1a:71:87:c6:08:df:8e:13:e1:2f:ed:
35:24:ab:8f:31:fd:9b:6d:55:3d:ca:7a:d1:0e:f8:
ac:8a:ee:69:3b:c3:ca:78:f2:f2:2c:97:eb:17:0a:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:27:0D:25:CE:45:6A:52:5A:0A:7C:1E:7B:63:59:F7:2A:31:DA:26
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e32382e302f32342d3234203d3e203133343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.28.0/24
Signature Algorithm: sha256WithRSAEncryption
01:49:80:48:0c:78:58:4d:67:dc:87:ad:26:a7:e6:24:73:2e:
b6:a9:32:fc:0b:2e:48:17:50:b4:b9:f3:49:96:67:40:5c:ff:
af:3c:09:13:ad:e3:67:10:8f:34:a3:50:66:c5:91:db:ea:1e:
c4:8a:3f:a1:d8:ee:db:d8:da:7f:24:22:6c:bb:1b:ea:01:5c:
a2:fc:1a:f8:ef:50:19:f4:e8:e6:db:0b:01:b8:14:e1:48:fe:
af:e7:78:ce:5f:47:aa:0e:e5:d7:4c:37:6d:f5:fd:07:84:a3:
42:21:2b:bc:e2:0f:d9:90:35:65:37:88:3e:9e:8e:59:a0:bb:
63:c6:7a:86:7f:38:d1:37:81:3e:4a:85:74:95:a6:ec:54:aa:
93:5b:82:a3:f1:53:05:c3:b7:62:1e:58:9e:41:9c:eb:67:42:
7f:3e:06:08:0a:2f:e9:89:3b:f6:dc:d8:18:6b:8b:94:d0:57:
61:f8:de:93:ca:39:77:79:ce:30:4b:de:10:f5:e8:a6:1e:2a:
f4:ab:62:b8:c9:06:d4:80:a0:8c:98:cd:8b:36:37:b9:00:2a:
09:e3:6f:2d:cc:f4:65:00:93:69:96:62:e0:7b:99:10:78:bd:
1d:ec:ff:a0:ef:10:df:21:ce:9c:c5:59:06:93:4c:e3:e9:cb:
18:ff:4f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:39 2025 by rpki-client