Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e203634313636.roa
File: 3230302e32362e3139312e302f32342d3234203d3e203634313636.roa (raw, json)
Hash identifier: 2HkY15ujQq4KlzVN5SEgDzQeTOCpcTuogSQMNicgZyU=
Subject key identifier: 1F:C4:1B:17:BE:AB:B0:19:68:BD:A2:95:5B:20:09:F3:B3:88:51:02
Certificate issuer: /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial: 53F43899339B8564CC435241E56DF5CE83CEF4C2
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e203634313636.roa
Signing time: Mon 20 Jan 2025 19:45:00 +0000
ROA not before: Mon 20 Jan 2025 19:40:00 +0000
ROA not after: Mon 19 Jan 2026 19:45:00 +0000
asID: 64166
IP address blocks: 200.26.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f4:38:99:33:9b:85:64:cc:43:52:41:e5:6d:f5:ce:83:ce:f4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Validity
Not Before: Jan 20 19:40:00 2025 GMT
Not After : Jan 19 19:45:00 2026 GMT
Subject: CN=1FC41B17BEABB01968BDA2955B2009F3B3885102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:8d:b4:0e:99:83:e9:06:7e:84:f6:17:21:
f6:a9:5a:e4:41:b5:bc:19:39:8f:f1:fe:12:94:e9:
9a:0a:a7:b1:fe:a1:8d:eb:34:05:3a:32:0b:65:4f:
35:e3:b3:f6:d1:27:ba:a5:67:ca:5a:da:67:21:f2:
41:53:e1:47:94:de:f8:cd:cc:68:c5:4c:96:be:ea:
4d:fc:0b:28:ae:86:ac:40:26:ca:fd:a7:60:61:cb:
d4:8e:cd:5b:e6:fc:d7:7e:d1:34:75:9e:ff:c7:76:
cd:1b:3b:ef:17:e8:45:b4:d6:f5:57:9d:fb:c8:2b:
85:a3:35:9c:af:d2:a5:11:23:43:09:b4:8b:fe:c3:
f0:93:50:16:b3:34:9d:34:92:f8:d2:1f:9b:17:16:
5c:34:72:79:50:87:1a:d8:9a:f8:7f:23:fb:ea:2b:
85:b7:c3:2d:a8:e4:2a:a9:c6:f7:a2:93:36:25:54:
03:74:10:b3:90:cc:f1:3c:04:b3:f1:9e:0d:d7:d9:
fc:67:e5:90:fc:1c:42:b7:5b:eb:01:77:4a:1d:a1:
2c:f5:d9:86:39:1d:79:60:61:d1:f6:6d:8c:1a:ce:
d0:db:d0:f5:d8:88:dc:bf:4c:e1:14:2b:8a:ed:45:
fc:59:23:f5:c3:cb:0d:ba:06:f0:8f:18:08:80:6f:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:1B:17:BE:AB:B0:19:68:BD:A2:95:5B:20:09:F3:B3:88:51:02
X509v3 Authority Key Identifier:
keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e203634313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.26.191.0/24
Signature Algorithm: sha256WithRSAEncryption
af:59:8a:36:c0:a7:60:2d:c3:18:33:89:a9:bf:65:04:e4:e3:
51:88:e0:ee:71:06:c5:e5:d1:93:6d:4c:c4:5e:ac:50:21:0a:
14:7c:2f:1e:32:26:c2:55:c1:62:f1:7e:e9:92:35:4d:ae:97:
9d:ae:bc:0d:1e:f2:93:51:27:fe:b1:5a:43:39:cd:de:04:3c:
c5:8d:0f:27:31:93:d8:88:89:6d:94:49:63:8f:55:8a:3b:50:
3c:c8:05:38:76:25:76:42:e1:6a:52:aa:9a:4b:90:31:6d:da:
ef:5c:fd:ff:a5:a3:d4:eb:4a:e4:3c:13:88:fc:2b:a6:40:29:
56:c0:51:e2:49:d2:2c:f6:2b:d9:2b:50:85:f5:e0:8b:b1:1e:
98:1c:01:a1:da:bf:39:44:4d:46:ed:95:41:6d:1c:30:be:1e:
b3:a7:70:46:df:7c:96:71:93:33:75:02:58:fc:b1:dc:ec:b3:
75:75:d1:03:2c:37:6a:d0:2b:05:52:ea:81:4c:30:18:1d:0a:
78:ae:bf:3e:dd:ad:fa:59:7a:95:89:92:61:ba:fe:86:ed:3e:
e4:ab:89:08:b6:ea:b2:7a:a9:05:a6:dc:b1:03:c0:f9:66:e1:
b5:16:07:9e:67:32:78:d6:cd:9b:cf:14:1c:bb:d1:ef:2a:a1:
c4:42:f4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:14:34 2025 by rpki-client