Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135342e302f32342d3234203d3e20323733313131.roa
File: 3230302e35302e3135342e302f32342d3234203d3e20323733313131.roa (raw, json)
Hash identifier: Kt7/9bI6/RR31cAm5nwYQ3v3hBeXC+9FgB083voC2j4=
Subject key identifier: 47:E4:5D:CD:BC:76:6E:4C:A5:C8:BB:2F:19:50:8E:97:96:9A:37:1B
Certificate issuer: /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial: 2243FA3F43D70B591E190496E9E56F39E312529C
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135342e302f32342d3234203d3e20323733313131.roa
Signing time: Tue 04 Feb 2025 20:06:12 +0000
ROA not before: Tue 04 Feb 2025 20:01:12 +0000
ROA not after: Tue 03 Feb 2026 20:06:12 +0000
asID: 273111
IP address blocks: 200.50.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:43:fa:3f:43:d7:0b:59:1e:19:04:96:e9:e5:6f:39:e3:12:52:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Validity
Not Before: Feb 4 20:01:12 2025 GMT
Not After : Feb 3 20:06:12 2026 GMT
Subject: CN=47E45DCDBC766E4CA5C8BB2F19508E97969A371B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:18:f2:1e:c4:de:27:ca:1f:81:83:fb:a4:
83:d0:f9:c2:55:8a:80:c5:34:10:25:bc:78:aa:9e:
9e:66:1f:0a:b9:8f:cd:bb:bf:53:ae:ca:5b:22:b0:
ad:83:30:7c:b0:b8:80:81:05:06:28:45:94:d2:d4:
4f:83:a8:b3:6d:97:e0:b8:3d:e4:17:45:1a:3e:b3:
c3:4e:5b:29:8d:12:fa:f5:b1:ec:07:63:36:8a:ae:
c1:a5:bd:44:12:2d:e2:37:63:16:df:9a:11:64:7d:
1c:25:20:40:2e:52:3e:dd:4b:c5:83:c5:bb:a6:69:
e0:03:a7:58:f1:4c:aa:ac:7e:35:67:34:75:5f:cb:
b8:db:cc:88:42:60:59:c4:6b:09:2d:29:44:04:2d:
be:2b:13:7f:82:bd:d8:3c:88:38:fc:3c:10:e9:98:
6f:68:10:91:d4:c9:bc:22:cf:b5:47:28:a3:8b:e4:
f0:16:7c:d5:06:4d:31:3e:83:45:56:6d:39:ab:3d:
0e:cc:7d:ea:4a:b7:64:ed:d6:6f:ed:1b:73:f3:63:
0f:75:c2:81:cd:82:23:0a:00:73:98:79:7c:23:8e:
87:04:ff:9a:dd:7b:98:b5:6b:53:c2:52:f0:52:17:
8e:69:07:bf:73:55:db:e8:1a:b7:a5:72:b8:91:a5:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E4:5D:CD:BC:76:6E:4C:A5:C8:BB:2F:19:50:8E:97:96:9A:37:1B
X509v3 Authority Key Identifier:
keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135342e302f32342d3234203d3e20323733313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.154.0/24
Signature Algorithm: sha256WithRSAEncryption
93:fb:68:9c:9d:d3:8f:c8:04:10:16:fe:88:4a:25:11:7b:3a:
63:f0:3e:8d:63:62:12:ea:24:5b:d7:be:f5:c6:2c:2a:91:b7:
55:cd:9d:56:9e:ff:e0:c0:c1:34:32:70:51:15:a2:77:79:37:
12:6b:3d:41:18:5d:18:97:f1:44:76:0f:1a:0a:49:be:27:0a:
b4:bd:a1:1e:48:ba:2c:d5:f5:53:6b:10:cf:cb:52:4e:ea:dc:
94:4f:33:7a:b8:57:f4:65:66:d5:88:db:e2:11:ed:b7:16:33:
1d:30:3f:bf:46:ef:cd:55:d6:0b:f6:01:12:55:b2:20:f6:27:
13:22:be:39:64:d3:c8:cd:4a:df:85:92:ed:28:9c:b6:89:88:
c1:76:a8:86:c9:41:28:c2:8b:c7:be:c7:e5:50:6b:49:27:f8:
bb:73:86:70:26:02:7f:67:7d:b6:65:ee:ff:be:9d:6d:7a:27:
24:42:c3:b0:e2:1f:79:66:7d:24:0e:ee:17:05:7a:32:90:6f:
de:ca:3c:51:66:fe:7f:f9:0d:5b:08:97:26:d7:68:fc:a7:e9:
ae:a2:f1:b2:97:85:4c:07:50:16:76:47:98:6b:6c:44:7c:b0:
ee:65:4b:6e:ff:c1:dd:e8:f8:6b:c4:40:8c:a1:d9:e9:3e:d9:
15:06:91:24
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIkP6P0PXC1keGQSW6eVvOeMSUpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCNEQ4Q0Y3QzUzRjg5M0ZBODFBMUUxMTE1QkM4RTAy
NjdGOTg0NTAeFw0yNTAyMDQyMDAxMTJaFw0yNjAyMDMyMDA2MTJaMDMxMTAvBgNV
BAMTKDQ3RTQ1RENEQkM3NjZFNENBNUM4QkIyRjE5NTA4RTk3OTY5QTM3MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQRjyHsTeJ8ofgYP7pIPQ+cJV
ioDFNBAlvHiqnp5mHwq5j827v1OuylsisK2DMHywuICBBQYoRZTS1E+DqLNtl+C4
PeQXRRo+s8NOWymNEvr1sewHYzaKrsGlvUQSLeI3YxbfmhFkfRwlIEAuUj7dS8WD
xbumaeADp1jxTKqsfjVnNHVfy7jbzIhCYFnEawktKUQELb4rE3+Cvdg8iDj8PBDp
mG9oEJHUybwiz7VHKKOL5PAWfNUGTTE+g0VWbTmrPQ7MfepKt2Tt1m/tG3PzYw91
woHNgiMKAHOYeXwjjocE/5rde5i1a1PCUvBSF45pB79zVdvoGrelcriRpUnnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUR+Rdzbx2bkylyLsvGVCOl5aaNxswHwYDVR0j
BBgwFoAU2LTYz3xT+JP6gaHhEVvI4CZ/mEUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GM0VCMTA4N0M4QjRCQjNDQTU2NzhFNDFGNDUzOEJBQTgz
NkRGMEQxRjBDOEVFMzIzNTk2NTRERkQyQjVFODk0LzAvRDhCNEQ4Q0Y3QzUzRjg5
M0ZBODFBMUUxMTE1QkM4RTAyNjdGOTg0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEI0RDhDRjdDNTNGODkzRkE4
MUExRTExMTVCQzhFMDI2N0Y5ODQ1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjNFQjEwODdDOEI0QkIzQ0E1Njc4RTQxRjQ1MzhCQUE4MzZERjBEMUYw
QzhFRTMyMzU5NjU0REZEMkI1RTg5NC8wLzMyMzAzMDJlMzUzMDJlMzEzNTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzEzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyDKa
MA0GCSqGSIb3DQEBCwUAA4IBAQCT+2icndOPyAQQFv6ISiURezpj8D6NY2IS6iRb
1771xiwqkbdVzZ1Wnv/gwME0MnBRFaJ3eTcSaz1BGF0Yl/FEdg8aCkm+Jwq0vaEe
SLos1fVTaxDPy1JO6tyUTzN6uFf0ZWbViNviEe23FjMdMD+/Ru/NVdYL9gESVbIg
9icTIr45ZNPIzUrfhZLtKJy2iYjBdqiGyUEowovHvsflUGtJJ/i7c4ZwJgJ/Z322
Ze7/vp1teickQsOw4h95Zn0kDu4XBXoykG/eyjxRZv5/+Q1bCJcm12j8p+muovGy
l4VMB1AWdkeYa2xEfLDuZUtu/8Hd6PhrxECModnpPtkVBpEk
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:24 2025 by rpki-client