Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa
File: 3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa (raw, json)
Hash identifier: dJqO/F3Ny21c3f4kVsQyIh/aLPi9iq6GxkAAF0y9Yog=
Subject key identifier: C4:40:CF:53:08:17:59:48:DD:DE:F3:B6:31:AF:A4:9E:FC:EC:30:7E
Certificate issuer: /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial: 180FAF4FB1CE70062D0A5DC87590D2A9DDB1BBDD
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa
Signing time: Tue 07 Jan 2025 05:40:00 +0000
ROA not before: Tue 07 Jan 2025 05:35:00 +0000
ROA not after: Tue 06 Jan 2026 05:40:00 +0000
asID: 265540
IP address blocks: 204.194.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0f:af:4f:b1:ce:70:06:2d:0a:5d:c8:75:90:d2:a9:dd:b1:bb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Validity
Not Before: Jan 7 05:35:00 2025 GMT
Not After : Jan 6 05:40:00 2026 GMT
Subject: CN=C440CF5308175948DDDEF3B631AFA49EFCEC307E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:e9:4a:b9:cc:bc:34:4f:c1:41:fd:54:c9:
94:32:33:02:ae:10:5d:96:ad:61:3d:a7:69:4e:cc:
2c:08:4e:5e:a0:d5:71:9e:42:59:90:40:7f:68:f4:
69:aa:22:52:d4:bd:54:24:3d:fc:1a:de:74:25:13:
c5:7d:3e:e2:08:9f:cf:67:69:ab:a6:f4:e4:68:1a:
3c:82:74:f0:f8:fe:4a:9c:fb:4f:62:c0:9e:01:96:
38:32:ea:05:4a:21:3f:4f:cc:50:f2:1f:1b:7e:53:
9f:89:be:1a:de:7e:74:86:54:df:67:9b:8d:f8:07:
f5:6f:22:e4:67:2e:49:00:a2:33:66:99:97:80:25:
e3:b0:b6:77:03:c6:38:cc:d5:41:f4:84:e2:b4:a1:
e9:0f:ff:a5:77:88:83:e6:e7:bc:a6:e5:70:f7:f4:
16:87:1a:62:09:b8:ed:e1:85:ca:49:43:ba:15:f8:
c3:dc:52:88:ae:8b:a5:42:7b:06:ac:ff:b3:bd:b0:
c6:11:60:09:49:90:c5:d4:ce:53:b9:fb:a8:2f:46:
37:4d:1a:51:80:c7:f4:f6:63:02:48:f1:b3:f7:06:
20:cf:d1:6b:e5:43:2d:77:f8:6e:a0:18:ca:fb:9f:
e7:1b:5f:3b:eb:ce:38:6a:65:89:2a:a2:0f:27:72:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:40:CF:53:08:17:59:48:DD:DE:F3:B6:31:AF:A4:9E:FC:EC:30:7E
X509v3 Authority Key Identifier:
keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.194.112.0/21
Signature Algorithm: sha256WithRSAEncryption
02:d4:ad:2c:2a:8f:ec:a9:dc:86:1e:33:0c:c1:8f:e8:17:bd:
50:9b:56:7a:3e:d2:36:25:a0:3c:86:4f:e2:90:71:50:ce:42:
14:db:be:47:ba:90:0c:20:9e:55:7d:75:ca:c1:fd:7c:7c:7a:
bb:88:7a:3c:ab:f7:20:be:5a:0e:00:07:dd:d5:b3:ec:5b:75:
4f:d8:34:c4:b0:56:db:9e:f4:9a:af:c4:45:c9:57:31:4d:1e:
97:ea:2d:9e:ac:f4:36:37:0b:05:9d:01:40:57:70:d1:8f:40:
f7:c1:3f:b5:62:3f:73:72:e5:99:8c:f4:f5:76:0e:ab:7b:9d:
9b:42:ac:b3:97:28:1b:8c:ce:06:1f:d0:a2:dd:c4:5a:21:40:
15:66:fe:97:b7:83:29:f8:53:7f:68:ea:6c:14:de:c7:6d:72:
7b:d2:98:19:c0:1b:27:c7:02:ea:67:f8:37:0e:ab:ff:f7:83:
8c:0d:66:f1:f6:60:20:04:ac:56:07:1f:8c:9b:ee:63:30:af:
e4:2f:dc:07:4b:52:2b:7e:48:73:b9:cb:92:98:b8:69:f9:60:
c9:29:03:af:1e:4d:ee:75:bc:65:6b:33:05:1b:86:71:3a:a4:
5f:fa:9f:77:d8:14:9a:74:2c:c5:14:9e:ef:d6:44:0d:06:d2:
7b:46:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:58 2025 by rpki-client