Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3135322e302f32312d3231203d3e203237373235.roa
File: 3230302e35352e3135322e302f32312d3231203d3e203237373235.roa (raw, json)
Hash identifier: Sg5LP4xJvObCowGrp/VYEgWZ+p5IxVTWLe17/WL4TyA=
Subject key identifier: BE:C0:F7:F2:45:28:43:70:87:83:C4:DB:4E:63:65:76:50:83:97:95
Certificate issuer: /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial: 42B7BF3CA577A17DB9F4663BB5EC07F95E9244EC
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3135322e302f32312d3231203d3e203237373235.roa
Signing time: Tue 04 Feb 2025 18:45:57 +0000
ROA not before: Tue 04 Feb 2025 18:40:57 +0000
ROA not after: Tue 03 Feb 2026 18:45:57 +0000
asID: 27725
IP address blocks: 200.55.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b7:bf:3c:a5:77:a1:7d:b9:f4:66:3b:b5:ec:07:f9:5e:92:44:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Validity
Not Before: Feb 4 18:40:57 2025 GMT
Not After : Feb 3 18:45:57 2026 GMT
Subject: CN=BEC0F7F2452843708783C4DB4E63657650839795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:c4:83:46:be:ac:24:b2:70:fc:da:51:ad:
00:91:0f:f4:3d:11:ef:9d:30:4d:d5:6d:c6:f9:f1:
86:ec:ba:79:4a:88:90:1b:b3:3e:77:30:90:89:b5:
5c:75:7e:87:2a:47:89:22:3d:2e:ea:e2:72:7b:2b:
f3:81:ad:52:92:fa:99:91:37:e0:e7:47:1e:41:0a:
4d:04:c3:0a:45:de:bd:0c:49:3b:7d:53:e9:7a:bd:
96:fb:17:b4:ad:e3:ba:14:b2:68:91:e3:0c:20:09:
c4:b7:4b:c5:80:55:81:54:c7:ab:07:a1:db:e1:00:
2f:c8:f6:60:4d:ba:e4:6d:b5:09:d0:77:eb:cd:ac:
98:0e:9c:d1:8a:f1:6c:d7:13:e3:e1:c3:96:ab:ac:
bf:f8:59:86:69:35:51:ea:c8:9f:d4:00:0d:0b:2f:
ae:8d:d0:90:d6:ac:e7:e5:e8:73:b7:99:d5:d6:4a:
fb:35:e2:6c:84:70:de:7a:48:41:a3:a8:d3:cc:0f:
6d:ba:41:d0:70:02:d6:04:d4:16:e9:88:7c:97:3f:
7e:f8:97:b3:ff:9f:46:5f:31:26:d8:b0:fd:99:e5:
4f:40:a4:5a:4d:b1:d9:3d:26:2e:ce:82:96:5c:ec:
da:59:c6:0f:65:ee:63:3c:4e:f2:29:ff:e0:0c:be:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C0:F7:F2:45:28:43:70:87:83:C4:DB:4E:63:65:76:50:83:97:95
X509v3 Authority Key Identifier:
keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3135322e302f32312d3231203d3e203237373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.55.152.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:13:69:8f:29:8d:80:4e:d6:5e:2f:79:65:91:3f:e5:e6:75:
e6:7b:94:ea:e5:09:19:d9:b1:0a:59:2d:d0:4b:79:96:fb:8b:
15:06:24:6f:58:ea:66:67:7d:59:86:ef:be:e5:ae:61:0e:ae:
9e:b0:cd:ca:91:a9:fe:2a:db:75:1a:0b:f4:5a:23:8b:b1:dd:
56:3d:4b:9a:97:58:a4:71:f5:4d:4e:83:ea:93:b3:0f:d5:cb:
50:f0:d9:b9:af:36:e0:02:83:bb:74:1d:c0:c3:90:08:d2:ed:
02:d8:20:44:a3:30:f6:49:5a:02:50:3a:32:02:1d:33:36:a4:
1f:77:13:a2:bc:6f:4e:91:48:9e:21:4a:43:9a:dc:36:3e:13:
4d:61:09:69:61:8f:f0:d9:6e:e8:4f:55:ea:94:2e:36:96:70:
ad:41:2d:65:17:b1:21:41:3d:10:76:81:0e:20:25:09:f7:f8:
2f:0b:73:5c:ae:04:b6:4b:79:95:c0:fe:d0:0f:89:16:73:3b:
8a:ce:c7:1f:93:06:91:c8:9f:6a:86:a5:30:22:59:d4:cd:86:
6b:be:a9:98:ec:ed:ab:c9:92:ec:03:f2:46:b4:9b:9f:30:a2:
1d:62:01:58:57:a4:73:76:96:7b:c2:b9:ce:93:9a:a0:df:5b:
0b:01:94:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:18 2025 by rpki-client