Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e36342e302f31382d3234203d3e2037343138.roa
File: 3230312e3234362e36342e302f31382d3234203d3e2037343138.roa (raw, json)
Hash identifier: EsvgXGvY0mNJPb3DvN1zsr0YhK5tLO7WTKeB2y6820g=
Subject key identifier: 2A:DB:6B:85:CF:89:20:79:03:BB:0C:19:F0:47:1B:27:AA:FE:9E:CE
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 73B570C680D6F5B7C048D6DCC538536153C99B84
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e36342e302f31382d3234203d3e2037343138.roa
Signing time: Tue 04 Feb 2025 18:29:44 +0000
ROA not before: Tue 04 Feb 2025 18:24:44 +0000
ROA not after: Tue 03 Feb 2026 18:29:44 +0000
asID: 7418
IP address blocks: 201.246.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b5:70:c6:80:d6:f5:b7:c0:48:d6:dc:c5:38:53:61:53:c9:9b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Feb 4 18:24:44 2025 GMT
Not After : Feb 3 18:29:44 2026 GMT
Subject: CN=2ADB6B85CF89207903BB0C19F0471B27AAFE9ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:bf:35:65:e8:51:4f:c9:46:89:56:31:dc:
87:e5:44:a6:1b:00:88:aa:de:f0:af:72:73:e5:e5:
3b:3d:d1:d5:31:cb:db:3e:ea:ba:7a:eb:73:ab:21:
ac:5a:05:75:6f:6f:31:d3:f0:51:eb:b8:f2:ae:72:
a1:8a:6c:47:f4:49:9f:38:78:4a:7a:e2:e6:02:d3:
8d:ae:d6:3e:20:39:15:6c:65:7a:69:26:68:82:57:
75:f7:94:34:bb:e4:59:c1:97:b8:12:58:43:da:2a:
87:5e:30:4f:ad:15:c9:7b:6b:44:74:f2:83:a8:5b:
b9:a9:c1:14:9b:e1:fe:17:42:88:00:ff:3f:dc:02:
0e:98:1a:54:90:94:cb:2b:d0:3d:f3:95:3f:1e:28:
81:18:8a:ab:2c:86:2a:79:5d:73:76:bb:c8:fa:73:
49:d9:bb:df:f0:d8:63:8b:5a:13:6e:5b:81:f9:c1:
41:51:67:c6:4d:80:10:4c:03:8e:20:cf:bb:5d:ad:
a2:ec:22:4a:c2:f8:10:28:55:18:b4:80:e2:98:ec:
34:0d:01:83:9a:f4:77:2c:d7:b8:9a:89:b5:3e:ab:
84:5b:b0:98:8e:db:60:eb:a7:8d:ea:c0:a4:ae:5a:
20:dd:06:27:86:b3:7d:ab:d5:9c:35:ec:15:79:ab:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DB:6B:85:CF:89:20:79:03:BB:0C:19:F0:47:1B:27:AA:FE:9E:CE
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e36342e302f31382d3234203d3e2037343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.246.64.0/18
Signature Algorithm: sha256WithRSAEncryption
61:31:22:47:cf:c3:c9:bb:54:b0:28:a3:2a:92:cb:8f:44:3b:
5c:d5:b3:e4:89:cb:cf:18:74:23:8c:30:35:42:97:78:75:04:
94:69:ed:34:ab:4c:f8:5c:58:9e:0d:d1:4e:24:e1:50:20:72:
09:2e:db:85:c9:06:ae:f4:d2:23:f1:97:87:4b:ce:93:ed:a8:
84:11:e8:cb:b5:f5:af:b4:71:2c:bf:a0:12:e2:ec:98:2c:99:
9d:d8:70:f3:7b:7c:5d:5b:d1:68:cd:24:0b:a1:6a:23:1c:45:
4f:11:8c:7d:49:7a:51:e3:6f:c2:6b:d0:51:df:99:fa:e3:d5:
b3:8e:0e:74:f1:68:b8:fe:a6:17:68:2c:3f:8b:87:5f:4f:07:
77:15:7b:c4:d3:20:01:ab:24:01:4b:da:55:d3:9d:ce:81:b9:
01:af:bb:7b:45:fc:2e:f6:98:13:82:1a:d6:33:e0:3a:f6:20:
90:0b:30:2f:71:ff:b6:c1:f7:99:70:45:a9:01:cf:0a:02:e3:
b7:fd:42:91:03:53:a4:29:33:7e:b5:67:74:9e:8e:ee:d9:66:
b1:e3:0a:e2:5a:18:23:c3:14:06:6b:5f:58:76:bb:ce:7a:f1:
09:ac:1a:fa:99:a4:5d:d2:72:0d:ef:e8:f5:1b:ad:96:eb:82:
01:e3:46:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:51:50 2025 by rpki-client