Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e3139322e302f31382d3234203d3e203136363239.roa
File: 3230312e3234362e3139322e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier: 0l7+1ychqKbQvi7jjKYDLh6j7ScgiXFBv1vw8aae6cQ=
Subject key identifier: D2:03:27:67:21:10:3D:67:4C:62:4A:3E:0F:1E:A8:92:19:72:BF:EE
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 4C51AE669FD0CCFB9427DFFFE1F14DCD0725CAE2
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e3139322e302f31382d3234203d3e203136363239.roa
Signing time: Tue 04 Feb 2025 18:29:56 +0000
ROA not before: Tue 04 Feb 2025 18:24:56 +0000
ROA not after: Tue 03 Feb 2026 18:29:56 +0000
asID: 16629
IP address blocks: 201.246.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:51:ae:66:9f:d0:cc:fb:94:27:df:ff:e1:f1:4d:cd:07:25:ca:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Feb 4 18:24:56 2025 GMT
Not After : Feb 3 18:29:56 2026 GMT
Subject: CN=D203276721103D674C624A3E0F1EA8921972BFEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c3:a3:75:df:02:ab:b7:db:b8:4d:61:63:8a:
0c:ca:1c:5c:1a:5c:49:17:6c:bf:42:03:34:a5:8c:
52:af:12:d8:40:f7:c9:1a:90:5a:4c:47:97:9b:32:
b1:e0:a2:86:a7:ce:07:fd:b1:4b:15:20:7f:52:ee:
3b:86:ae:3d:d9:76:aa:73:05:62:a0:ad:95:6b:62:
d9:4b:b4:fb:95:d5:34:0b:b3:5c:e9:c1:63:4a:9b:
eb:ea:6b:c3:c5:37:f5:50:25:27:4b:34:3a:a4:d9:
01:92:c1:df:50:15:b7:85:8e:c7:a8:08:4e:8f:2b:
bc:f3:f0:dd:23:03:be:cb:76:8a:96:66:27:73:2b:
e2:9e:a5:af:2d:f6:bb:23:c0:86:66:73:e7:58:4f:
ee:c5:6b:ac:41:ca:b1:02:1d:d0:36:b9:63:0e:6c:
bb:2e:57:53:4f:67:12:15:ce:9c:d2:16:f8:e2:97:
6c:97:00:ac:75:b3:49:e0:d2:49:4f:c5:7b:60:ac:
e6:5a:fe:7a:4f:6b:b1:47:00:f4:9b:6e:b0:90:62:
63:6f:af:76:db:9f:51:da:da:18:72:a5:73:4b:66:
f2:30:d5:a0:3c:73:a5:94:5a:c6:1a:06:b0:23:df:
88:4f:66:9a:1b:85:e7:13:45:7c:8d:dd:1c:9a:bb:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:03:27:67:21:10:3D:67:4C:62:4A:3E:0F:1E:A8:92:19:72:BF:EE
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e3139322e302f31382d3234203d3e203136363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.246.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a4:b3:98:96:fb:59:73:5f:7b:c2:45:2c:e1:2b:fd:5b:f2:b2:
ec:02:7d:94:81:68:ca:ff:ce:b9:58:cd:25:d3:a3:03:af:fa:
95:bc:27:bb:97:b6:1e:ab:6e:cf:6b:f5:26:76:2a:77:bf:59:
05:72:9f:e2:00:01:a2:bb:fa:cf:d9:26:f2:7b:36:4a:a0:6d:
13:d1:1f:fc:a4:34:38:f6:12:5a:13:a6:81:80:d5:81:10:6d:
ff:b4:16:b3:85:91:e5:d8:14:87:59:e0:a6:e2:ee:7a:92:18:
4d:e3:58:eb:1e:2e:17:c9:32:ae:ce:70:04:a7:5b:91:81:2c:
73:c0:8b:87:9e:15:89:b2:d3:53:30:6e:02:3d:c8:14:a1:75:
28:c6:22:80:2f:e2:ec:5f:aa:32:31:47:46:b5:eb:df:6a:d1:
02:7a:85:8e:d2:a3:0e:0d:0f:c4:24:f3:cc:d6:96:68:7b:0a:
3b:5f:83:72:f8:31:98:fd:f6:a7:66:d0:35:31:70:f7:a5:c2:
67:5b:ef:36:07:e0:b4:0f:f0:5a:68:0d:dd:5d:10:1f:9b:d0:
74:47:c9:e4:c5:f5:97:c5:2b:1c:de:48:f8:d2:f7:8c:4c:93:
57:eb:55:c4:07:3c:3e:5a:f2:bb:13:d1:05:51:5c:86:ac:75:
41:20:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:25 2025 by rpki-client