Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230302e33332e32302e302f32342d3234203d3e203238333939.roa
File: 3230302e33332e32302e302f32342d3234203d3e203238333939.roa (raw, json)
Hash identifier: TRhHLNhGu0IMI/O+ACSQH+Lio7HLcYt64CjwPjd6cr8=
Subject key identifier: DB:D0:71:A1:25:F4:0F:67:DA:AE:B7:D1:08:89:86:C6:78:59:B1:5B
Certificate issuer: /CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
Certificate serial: 316C6290A5193892DE3E6750BC3710D8A19C3A40
Authority key identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230302e33332e32302e302f32342d3234203d3e203238333939.roa
Signing time: Fri 17 Jan 2025 04:20:00 +0000
ROA not before: Fri 17 Jan 2025 04:15:00 +0000
ROA not after: Fri 16 Jan 2026 04:20:00 +0000
asID: 28399
IP address blocks: 200.33.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:6c:62:90:a5:19:38:92:de:3e:67:50:bc:37:10:d8:a1:9c:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
Validity
Not Before: Jan 17 04:15:00 2025 GMT
Not After : Jan 16 04:20:00 2026 GMT
Subject: CN=DBD071A125F40F67DAAEB7D1088986C67859B15B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:2b:49:f7:81:1e:91:b9:7a:73:8c:d0:86:
ff:54:f6:98:fb:e5:4d:40:e7:9a:7d:e6:19:ac:ca:
07:2e:f7:af:66:75:96:b9:78:54:26:35:9b:d8:c3:
17:ca:05:19:d8:4a:35:c8:0a:c1:9c:50:69:b9:4f:
ee:91:09:41:64:89:e2:27:b1:08:df:4c:1c:65:28:
9b:9a:f1:b6:f7:11:38:b5:0c:57:47:86:96:9e:99:
58:60:63:b6:96:eb:20:0c:6e:b6:f4:3f:f5:e5:3e:
31:f3:93:69:f7:c1:9f:d5:3a:1c:d3:78:1d:cb:bc:
fb:41:63:2f:92:6b:74:d5:50:e7:f6:cd:cc:33:5e:
03:79:b5:4c:f5:a2:01:31:3f:d9:82:e7:34:8c:a4:
d9:76:1d:0f:ac:2e:df:55:2e:23:dd:3d:0a:3b:37:
7f:31:85:8d:62:9b:2b:ad:5f:33:cf:22:26:45:aa:
cf:af:1d:20:6b:d9:9f:30:6c:bd:55:0b:33:d4:4b:
29:1b:95:bb:95:f3:ae:67:ec:48:37:e7:3d:9e:2e:
47:94:51:be:a2:12:1b:19:45:db:89:22:66:7c:c8:
86:30:09:1e:0e:20:a4:cd:30:f5:ab:83:ad:e8:ef:
71:9d:21:f5:9d:23:37:23:57:5b:c2:c7:d6:69:d8:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D0:71:A1:25:F4:0F:67:DA:AE:B7:D1:08:89:86:C6:78:59:B1:5B
X509v3 Authority Key Identifier:
keyid:83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230302e33332e32302e302f32342d3234203d3e203238333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.20.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8b:ba:49:d3:4e:66:65:a8:24:65:fe:2c:df:17:ad:70:3d:
2e:eb:6e:67:6f:50:f7:2d:74:37:45:b2:ba:b5:7f:93:55:f5:
13:1c:26:85:6c:ff:70:4e:8e:00:1f:18:77:40:96:aa:e0:1b:
79:bb:3d:48:89:ba:8b:55:c9:3d:1c:9b:af:54:9d:97:85:7b:
31:f6:2f:d8:0a:42:bf:2f:73:68:14:03:8a:a2:b7:03:ea:ad:
38:8e:cd:28:19:98:49:8f:35:d2:4b:10:5e:4e:7f:fb:0c:72:
84:1a:fa:08:16:b1:f5:a8:b3:8a:37:85:cc:33:96:d4:b2:4a:
5b:db:c3:ac:11:e8:dd:06:9b:e2:4d:58:71:7a:8b:ac:8b:69:
02:8a:df:1a:f8:42:db:75:ac:7b:ec:a7:ec:b6:29:53:a4:e5:
5f:a1:91:2c:5d:1b:ae:0b:cd:bc:4e:2b:b8:c0:71:63:c5:87:
c2:3c:68:b7:5c:f3:f2:d1:44:9d:b3:26:bd:e0:4c:4d:19:61:
31:8d:83:5f:f2:79:76:5e:57:2a:f4:df:08:de:13:b9:e0:42:
66:88:f0:88:16:fd:1d:27:5f:23:a5:b2:d2:44:72:93:7f:62:
54:d8:d2:81:cf:1e:ce:ba:c5:96:73:54:28:a6:ea:46:92:4a:
1e:39:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:59 2025 by rpki-client