Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/3230302e302e3138352e302f32342d3234203d3e2037333430.roa
File: 3230302e302e3138352e302f32342d3234203d3e2037333430.roa (raw, json)
Hash identifier: imEQt3NlFKTtk8fNcBSxRQrhEg3JgJTHvBrpQGUSfuE=
Subject key identifier: A0:39:EF:A5:8E:D6:B5:81:A5:56:1D:4C:A3:36:BC:74:83:4C:44:99
Certificate issuer: /CN=89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC
Certificate serial: 6A5F5F9A9D9D682E79770D5D2C70435FFFA31922
Authority key identifier: 89:75:4D:0A:1B:67:95:6C:5F:EB:D6:A8:2B:8D:E5:8D:93:D6:D4:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/3230302e302e3138352e302f32342d3234203d3e2037333430.roa
Signing time: Tue 04 Feb 2025 18:19:28 +0000
ROA not before: Tue 04 Feb 2025 18:14:28 +0000
ROA not after: Tue 03 Feb 2026 18:19:28 +0000
asID: 7340
IP address blocks: 200.0.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:5f:5f:9a:9d:9d:68:2e:79:77:0d:5d:2c:70:43:5f:ff:a3:19:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC
Validity
Not Before: Feb 4 18:14:28 2025 GMT
Not After : Feb 3 18:19:28 2026 GMT
Subject: CN=A039EFA58ED6B581A5561D4CA336BC74834C4499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:8c:fd:eb:83:5a:b7:c3:c7:98:7f:45:f4:
f5:e8:17:64:6d:cf:aa:e2:55:82:8c:df:b1:7b:0b:
eb:87:0b:91:4d:d4:72:5d:11:8d:89:d3:d3:f0:6d:
15:2c:3b:d6:99:41:f1:fb:f8:9d:11:98:de:e0:b8:
51:89:8e:7a:e3:75:35:8e:ee:db:76:94:c2:ce:ec:
47:af:50:ed:99:c4:ed:4f:ac:d3:a2:2c:e8:65:27:
bb:7c:5e:a4:45:2b:c6:1d:32:4b:ea:c7:31:0e:fa:
db:27:be:52:ca:1c:d4:4c:61:ac:fc:12:d0:b1:ce:
17:32:07:03:23:c4:16:0f:e2:fc:1d:64:33:d2:c2:
88:7c:ad:72:a1:48:ef:fc:59:00:51:10:2f:34:48:
fe:c1:d5:c0:e8:78:87:f8:d2:46:cf:65:28:83:30:
5a:c5:fa:2b:75:59:84:c9:73:4c:12:e9:e5:13:8d:
98:c5:1f:24:78:9e:2f:8b:42:dc:8f:be:84:26:4c:
f2:95:1b:3a:97:32:7b:62:ab:d3:e0:2f:17:af:7e:
02:88:b7:7f:70:fc:34:7d:58:80:4d:95:87:ba:1e:
33:14:af:cf:af:7b:9a:be:6a:71:8f:6f:9a:0f:9e:
25:ad:10:95:7e:ba:af:2e:3d:f7:59:1f:78:15:97:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:EF:A5:8E:D6:B5:81:A5:56:1D:4C:A3:36:BC:74:83:4C:44:99
X509v3 Authority Key Identifier:
keyid:89:75:4D:0A:1B:67:95:6C:5F:EB:D6:A8:2B:8D:E5:8D:93:D6:D4:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/3230302e302e3138352e302f32342d3234203d3e2037333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.185.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:aa:e6:46:8d:5b:25:8b:c1:ed:21:0f:98:87:ef:23:61:99:
74:43:44:13:58:ea:5e:1f:c5:72:05:6b:8c:f1:84:02:3d:1a:
ce:b3:08:77:2a:4f:d2:0d:f1:46:c5:61:45:a5:8c:29:62:7c:
cf:26:07:cc:77:08:7a:80:fa:c1:69:6c:0b:56:1f:2c:db:b4:
c4:b9:46:b5:c6:d9:9f:d9:8f:d4:88:05:f9:2d:56:d2:d1:67:
88:9c:0d:6c:ca:2d:e9:da:b8:16:23:bd:ec:26:41:48:e9:bd:
e5:a5:63:81:06:99:8a:64:c2:02:cc:83:60:08:bd:d0:99:5e:
d6:c0:fe:65:a2:e4:4b:e9:fb:23:95:d0:66:db:a8:a7:64:88:
37:e1:39:90:89:fa:c2:1e:d1:a6:aa:12:92:77:5a:bb:8c:ac:
e2:c8:66:fe:dc:36:03:67:1a:37:b9:65:38:e0:f2:1e:dc:d3:
75:b7:3f:db:bf:a0:43:49:53:94:20:15:7a:78:e4:e6:14:67:
10:87:63:96:3a:0f:10:a3:7f:be:6d:e9:c2:2c:87:b5:37:39:
bb:12:c9:11:6f:7c:ef:22:a7:40:2b:18:72:68:bf:ac:22:04:
3d:ad:f3:52:27:69:47:d2:08:26:2e:9b:ac:fa:35:1f:11:77:
9b:16:f9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:16 2025 by rpki-client