Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa
File: 3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier: Yh2d3v88JauBxyENTiZkCLfi50ynBqvB+94bBEudO8o=
Subject key identifier: 02:35:53:F9:EE:59:3E:30:39:7C:CE:85:EB:24:06:20:46:C1:98:2F
Certificate issuer: /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial: 786B49413BE4F0C44692EB1ABC52429760AD1924
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa
Signing time: Tue 05 Mar 2024 18:21:36 +0000
ROA not before: Tue 05 Mar 2024 18:16:36 +0000
ROA not after: Tue 04 Mar 2025 18:21:36 +0000
asID: 271906
IP address blocks: 200.85.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6b:49:41:3b:e4:f0:c4:46:92:eb:1a:bc:52:42:97:60:ad:19:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Validity
Not Before: Mar 5 18:16:36 2024 GMT
Not After : Mar 4 18:21:36 2025 GMT
Subject: CN=023553F9EE593E30397CCE85EB24062046C1982F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:c9:6e:df:b6:9e:2e:3f:3e:4b:21:40:e6:
4d:17:14:36:70:38:54:ae:63:4c:9a:8c:a7:d1:a3:
19:6b:96:39:88:8d:5d:5c:e1:b0:d4:3d:8e:a9:5a:
ba:e3:ef:79:6b:1f:a6:8a:cb:4a:f5:d2:0b:3a:2d:
24:3a:22:b9:df:76:86:81:a2:08:ee:da:0e:18:92:
01:18:0d:d5:0f:4d:62:83:4d:56:3b:89:24:93:36:
15:5a:f4:3b:a2:2c:bc:56:a7:e1:97:a5:69:c0:21:
27:3d:c9:1c:8d:a5:e1:6e:a5:9d:69:24:cf:16:fe:
86:6f:18:a5:19:8b:c7:aa:43:a5:1c:09:f9:fe:57:
21:6e:c4:5b:63:b0:31:5d:a2:5d:09:fa:0b:4b:6c:
52:08:6e:23:b0:52:14:2f:bb:b8:7f:cd:49:03:a0:
89:f3:d4:98:c2:b3:46:a5:09:45:e2:38:59:af:1b:
dc:94:0c:26:2d:0f:1d:a8:bb:ab:99:53:c9:59:02:
e8:83:b6:82:68:9f:73:af:9c:3f:65:d8:56:e6:17:
d0:82:35:e6:a0:5a:80:a2:be:5c:74:2f:e8:0b:96:
36:04:e7:c4:cc:40:28:08:b4:5b:f5:11:07:e4:e6:
98:e0:4e:c6:8c:ac:35:48:42:ce:b9:d2:ff:ad:3a:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:35:53:F9:EE:59:3E:30:39:7C:CE:85:EB:24:06:20:46:C1:98:2F
X509v3 Authority Key Identifier:
keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:13:54:20:35:12:a5:a2:ab:f9:1d:20:ef:11:54:cd:01:85:
fb:f1:a2:4f:56:31:51:7a:68:b6:5f:72:cb:18:8d:32:92:6e:
c4:8f:70:28:23:ca:e8:cb:85:9d:e5:a9:ea:d6:b1:65:9a:3c:
bb:07:62:d2:7a:a2:a9:76:14:4f:82:52:53:b0:71:58:c2:5f:
cc:80:f9:89:ee:1f:5e:a3:8f:51:bc:51:85:5b:64:f1:e2:13:
f5:38:62:94:ca:94:00:85:bb:97:58:48:3d:09:19:58:5d:66:
bb:a7:22:6b:24:05:b7:92:76:05:f7:2d:f9:a8:f7:0f:52:42:
22:98:a3:2c:6b:60:c5:80:a8:f4:9d:df:f6:86:8f:12:5b:7e:
70:07:03:74:63:45:ce:bf:10:e2:d3:17:28:1f:c4:ca:16:62:
3c:d1:f7:34:c3:15:0a:77:3b:6e:4e:b0:9a:b2:0b:66:27:05:
8b:87:3a:ca:40:f2:c6:71:c4:f4:35:49:ff:40:9c:cd:ff:b6:
63:12:78:d8:13:31:b8:04:37:06:92:38:f4:07:85:5b:4e:62:
72:bc:c5:cb:02:c9:95:a7:ce:08:73:4d:f4:50:e3:08:88:ba:
e9:7a:d2:24:ce:66:9b:6d:37:1d:82:0a:e4:d2:7c:92:f7:d9:
8d:c4:9b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:56:20 2025 by rpki-client