Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa
File: 3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa (raw, json)
Hash identifier: Gtw4vFTXjN1zdIl5hgLwmyFBuyb0iug+vaw2HkmkJZ0=
Subject key identifier: D9:65:70:60:B7:15:ED:97:AF:54:C3:E0:B0:ED:68:50:4B:A1:64:4E
Certificate issuer: /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial: 27C62F4F22FEE7B0938933304FC51D8A857AF9DB
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa
Signing time: Tue 05 Mar 2024 18:21:36 +0000
ROA not before: Tue 05 Mar 2024 18:16:36 +0000
ROA not after: Tue 04 Mar 2025 18:21:36 +0000
asID: 272913
IP address blocks: 200.85.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c6:2f:4f:22:fe:e7:b0:93:89:33:30:4f:c5:1d:8a:85:7a:f9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Validity
Not Before: Mar 5 18:16:36 2024 GMT
Not After : Mar 4 18:21:36 2025 GMT
Subject: CN=D9657060B715ED97AF54C3E0B0ED68504BA1644E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0e:e6:1c:29:38:8a:13:25:aa:95:87:81:7a:
c4:ed:62:64:19:7c:a3:12:2e:d0:1e:95:c8:8b:21:
c9:3d:dc:3b:08:f6:f4:9e:19:21:d5:b1:de:88:b2:
0f:f4:88:02:e7:fc:4c:c4:c7:04:61:50:80:e3:f6:
45:72:41:ea:27:61:47:7e:b4:a6:fd:4e:20:71:8d:
b8:da:4a:5d:32:80:c0:7c:0e:30:57:90:ea:7a:29:
ba:6f:fe:56:9f:0f:27:c7:59:48:68:b6:7a:d8:00:
bb:cb:85:ce:25:ae:47:2d:12:03:57:1b:48:97:d4:
92:a6:bd:7e:0d:ed:31:98:8c:bc:7a:2c:35:5c:7a:
95:e8:83:47:ba:d7:e8:82:db:b8:32:3e:72:ba:3f:
43:11:97:83:ea:d1:55:77:df:57:f7:81:d0:41:f5:
87:68:c8:b4:e3:eb:58:69:c8:ad:ce:c4:28:6e:9f:
68:76:43:e7:c0:3c:8b:4e:79:15:b3:26:b8:dc:de:
63:ee:ff:f3:0e:fd:66:89:8c:2e:0a:94:72:0d:ce:
4e:56:bc:a0:08:8e:d5:c3:21:8d:73:29:0f:86:64:
27:7a:30:42:07:35:7a:26:f5:8f:22:43:3e:87:98:
ee:ce:1d:a7:30:3d:d6:69:c4:c6:f9:29:36:cf:b2:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:70:60:B7:15:ED:97:AF:54:C3:E0:B0:ED:68:50:4B:A1:64:4E
X509v3 Authority Key Identifier:
keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.140.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b7:f6:28:cc:78:d0:85:e3:15:ef:4c:88:9d:48:7b:c4:fe:
7b:cb:8d:85:6e:4c:39:35:e3:71:fb:02:22:38:f5:95:6c:0f:
d5:61:5b:af:76:06:5e:06:df:e0:9a:0c:2f:79:87:92:9d:f5:
4d:c5:34:83:86:9b:c0:08:b1:db:da:05:4e:0a:78:99:eb:d6:
87:85:2a:41:87:9a:58:af:41:d5:f1:f0:92:36:52:75:4d:5a:
bc:fd:a3:36:50:35:01:db:fb:63:65:f0:50:4c:06:d0:e0:bc:
c7:85:d5:a7:aa:13:7e:a2:a1:d7:05:6c:b4:5b:24:2b:46:00:
53:cb:fd:16:32:02:14:88:05:6a:cc:aa:ff:f6:fa:db:31:f3:
00:bc:4a:30:65:cd:97:51:f6:25:88:57:54:0a:5a:92:ff:81:
ab:78:17:a5:e1:3c:df:92:39:b9:62:a9:e3:1a:5c:bc:b4:9a:
c6:70:a0:b7:11:01:f1:2c:8c:69:27:28:8d:f7:d1:78:2c:08:
1a:b6:0e:4c:42:6a:8d:6c:d2:10:90:20:de:a0:93:13:4a:fa:
65:4c:30:fa:41:c9:bb:fb:d3:80:41:93:88:23:d0:0c:e8:10:
5d:f0:10:2a:52:da:21:15:cd:1c:80:b4:f4:3c:df:7f:9c:28:
ac:97:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:01:56 2025 by rpki-client