Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/3230302e31342e38332e302f32342d3234203d3e20323632313537.roa
File: 3230302e31342e38332e302f32342d3234203d3e20323632313537.roa (raw, json)
Hash identifier: ued0iPYWi+lDmxqVi1TREduExy/VfOJxmqs7SF6y1QA=
Subject key identifier: 88:06:31:0D:50:66:BB:C2:21:48:97:B8:6C:92:91:38:CF:2A:4A:BA
Certificate issuer: /CN=ABCA5BFE80371D74C85885F36AA97BA698DFAE02
Certificate serial: 5DB6992D3A10BEE66141B543241F7812EC71C431
Authority key identifier: AB:CA:5B:FE:80:37:1D:74:C8:58:85:F3:6A:A9:7B:A6:98:DF:AE:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/3230302e31342e38332e302f32342d3234203d3e20323632313537.roa
Signing time: Tue 04 Feb 2025 20:07:22 +0000
ROA not before: Tue 04 Feb 2025 20:02:22 +0000
ROA not after: Tue 03 Feb 2026 20:07:22 +0000
asID: 262157
IP address blocks: 200.14.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b6:99:2d:3a:10:be:e6:61:41:b5:43:24:1f:78:12:ec:71:c4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABCA5BFE80371D74C85885F36AA97BA698DFAE02
Validity
Not Before: Feb 4 20:02:22 2025 GMT
Not After : Feb 3 20:07:22 2026 GMT
Subject: CN=8806310D5066BBC2214897B86C929138CF2A4ABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:21:db:ca:e9:d7:ea:df:86:bd:71:1d:84:
1a:66:8d:59:41:82:80:87:5f:31:1f:69:12:46:21:
28:1c:6e:67:94:75:f3:2e:c8:fd:db:0b:55:a7:21:
2c:10:d9:a1:3d:ce:63:82:4e:7e:07:71:72:df:7c:
18:e9:e5:9d:81:ea:84:a0:99:99:65:25:19:f8:b2:
85:57:c6:23:d7:f4:3c:38:07:87:26:81:84:8f:43:
66:f3:06:ef:b7:70:cd:3d:45:31:e5:25:1d:46:79:
35:52:88:32:d8:34:88:58:34:83:a5:6b:78:77:1d:
93:38:72:e9:d8:c7:54:6b:36:c7:4b:bb:bd:b4:4b:
2d:12:13:f5:0e:55:b9:df:a0:e7:21:da:75:c1:08:
ab:a9:44:d9:e2:9c:46:2b:66:74:22:57:4c:2e:3e:
9e:84:63:41:ae:40:f5:2b:a8:68:e5:d9:67:ff:66:
60:37:9c:e6:6c:8e:a3:5a:68:6f:b2:ed:95:87:c9:
cd:5e:16:f7:3f:74:89:50:6b:14:0d:33:29:00:47:
ba:18:38:83:1c:db:f7:52:6e:13:42:64:a3:4f:9e:
ee:38:a9:a1:ef:ef:5c:37:f3:06:8c:7c:bb:6b:f7:
b7:3f:1e:14:9a:7b:a3:56:40:ac:2e:6a:6e:c5:0c:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:06:31:0D:50:66:BB:C2:21:48:97:B8:6C:92:91:38:CF:2A:4A:BA
X509v3 Authority Key Identifier:
keyid:AB:CA:5B:FE:80:37:1D:74:C8:58:85:F3:6A:A9:7B:A6:98:DF:AE:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABCA5BFE80371D74C85885F36AA97BA698DFAE02.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F63BBA8DA1C1B8D94A18C3F9A39BF29EF76B0499F2AEB7AEEBE076ABC47FE4D8/0/3230302e31342e38332e302f32342d3234203d3e20323632313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.83.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2e:d8:df:e6:5a:f9:07:a1:97:c2:fe:fa:df:dc:ea:0d:59:
1a:b8:b6:8d:6b:11:b6:a2:ae:a2:90:4a:5b:ce:db:6f:05:0a:
d6:9d:a0:3e:43:ff:fc:e6:10:50:e6:ed:65:d2:ff:3c:c9:d4:
de:3b:f5:44:a4:0d:be:38:66:ca:1f:4a:ea:84:24:ae:25:0a:
84:f6:c5:23:d7:0b:f1:b3:54:96:b5:49:42:13:ed:1e:95:c0:
50:82:ef:18:ff:73:e9:b2:70:87:88:fb:bb:db:ef:6a:62:c7:
98:11:5e:92:58:7e:59:64:6b:9c:86:18:5c:5f:07:ff:cd:69:
3d:d8:8e:c5:50:25:5e:0f:92:59:54:c5:98:7c:ee:42:e0:5e:
47:fc:95:a8:2f:4a:92:bf:1a:0d:54:96:a5:81:90:de:dc:1d:
7f:a7:c1:99:0b:44:f9:29:a8:51:44:77:c9:79:42:b9:96:bb:
06:f6:39:ec:4c:c1:22:f6:c6:ff:ab:05:26:aa:02:2f:b8:1d:
b9:9a:33:eb:4f:8e:72:01:f9:25:ef:58:10:32:13:f1:97:49:
47:9c:dc:d0:72:38:46:ad:b7:6b:17:e0:44:79:99:38:6d:84:
7b:d3:da:2a:a6:ca:f5:65:0d:2e:0a:a9:e6:47:ac:6e:27:69:
95:b4:63:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:54:44 2025 by rpki-client