Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa
File: 3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier: wNOPc/gua0h6HiCBX2AzheIoKdDvTs7wGt3D/KuSGsw=
Subject key identifier: 7B:1E:AA:3C:75:F2:B5:83:21:E1:67:A8:AC:49:F9:7A:B8:88:86:74
Certificate issuer: /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial: 4603486B7157896D4AA055BB8211C8BC8AC7F065
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa
Signing time: Tue 05 Mar 2024 17:53:58 +0000
ROA not before: Tue 05 Mar 2024 17:48:58 +0000
ROA not after: Tue 04 Mar 2025 17:53:58 +0000
asID: 269931
IP address blocks: 200.125.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:03:48:6b:71:57:89:6d:4a:a0:55:bb:82:11:c8:bc:8a:c7:f0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
Validity
Not Before: Mar 5 17:48:58 2024 GMT
Not After : Mar 4 17:53:58 2025 GMT
Subject: CN=7B1EAA3C75F2B58321E167A8AC49F97AB8888674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:d8:c2:41:92:9c:31:e1:7b:6b:80:32:a5:
f6:73:da:9e:26:81:02:bb:a8:09:d5:3c:18:84:d0:
35:5e:cb:5a:6d:a6:41:9d:7b:ef:10:0f:e8:98:a6:
0e:93:85:dd:50:f5:88:62:7a:32:27:c7:e9:da:78:
80:ca:42:19:7c:ab:16:39:db:f3:4c:7d:5b:dd:c8:
68:38:6f:09:27:51:e2:c0:56:0a:df:34:fd:95:84:
8d:c3:c6:45:f4:e3:10:bd:d5:be:cc:3f:30:10:01:
70:72:ad:b4:ca:81:4e:b1:40:ba:d3:96:a8:6e:52:
ed:b2:de:ec:3b:80:43:b0:b7:a7:e8:4a:91:da:36:
1c:8b:3e:e6:05:58:41:9b:e8:86:4f:f9:71:13:ed:
ae:79:56:7c:bd:09:90:e7:89:c9:6e:db:64:f5:cd:
2a:75:76:f7:85:f7:7e:7b:48:3c:8c:35:67:01:c8:
c8:c1:ca:11:61:a6:01:78:d5:fe:fb:61:a5:f6:e5:
6a:e3:22:f5:53:8d:e3:82:13:30:d2:58:54:b0:6f:
2b:15:58:8e:d8:3f:be:6c:13:2d:04:af:05:d9:47:
6f:62:e5:1c:bf:53:74:63:18:73:17:1e:76:78:aa:
0e:0e:c6:19:5c:fa:68:03:a5:88:74:b7:6f:4d:94:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:AA:3C:75:F2:B5:83:21:E1:67:A8:AC:49:F9:7A:B8:88:86:74
X509v3 Authority Key Identifier:
keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/3230302e3132352e3137302e302f32342d3234203d3e20323639393331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:eb:12:a6:b4:ff:bc:16:b7:c1:f1:2f:25:e0:d5:a6:42:92:
03:15:e0:b3:67:40:d2:8f:cd:5c:1a:37:69:8e:67:b9:24:fa:
a9:32:99:18:dd:f0:72:20:30:31:0d:de:0a:8a:49:53:51:1e:
a1:af:c2:17:34:7a:b2:f2:5a:df:a7:be:70:7a:e2:11:a2:2a:
0e:a5:13:80:b9:57:46:9a:b5:8d:0f:ed:cb:81:d7:fe:d1:7d:
c0:24:f7:fb:31:26:48:13:bb:1b:61:a8:68:53:ec:8a:ad:42:
80:9a:bb:85:4b:89:3c:fa:68:c5:aa:ec:f7:af:6d:33:49:99:
7c:d7:fb:ad:d4:ba:d0:5d:a8:7e:c0:a5:08:66:01:38:04:ce:
da:02:ac:b9:43:58:75:91:d1:9d:dc:b5:60:82:85:9e:73:56:
d6:52:ba:0e:49:95:c0:f8:b2:cf:b9:23:76:7f:a8:f1:ff:90:
18:b8:d0:f7:8d:36:0f:1a:27:ab:47:a8:93:bb:c0:a7:3e:76:
7d:8a:7a:ee:da:b9:59:c9:d3:1b:43:f4:60:6b:57:63:06:96:
e6:a8:68:66:1e:bf:15:b9:70:46:eb:c6:c2:dc:f2:34:58:cd:
d9:ff:cd:dd:7e:c4:fa:05:33:af:87:bb:ff:a2:2c:25:dd:58:
29:7a:cd:a2
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIURgNIa3FXiW1KoFW7ghHIvIrH8GUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MUFBRTkyRjc5OEQyRUU1RDk5RkU2NDVGQzAzODA1
MTY5ODQ3MzAeFw0yNDAzMDUxNzQ4NThaFw0yNTAzMDQxNzUzNThaMDMxMTAvBgNV
BAMTKDdCMUVBQTNDNzVGMkI1ODMyMUUxNjdBOEFDNDlGOTdBQjg4ODg2NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPRNjCQZKcMeF7a4AypfZz2p4m
gQK7qAnVPBiE0DVey1ptpkGde+8QD+iYpg6Thd1Q9YhiejInx+naeIDKQhl8qxY5
2/NMfVvdyGg4bwknUeLAVgrfNP2VhI3DxkX04xC91b7MPzAQAXByrbTKgU6xQLrT
lqhuUu2y3uw7gEOwt6foSpHaNhyLPuYFWEGb6IZP+XET7a55Vny9CZDniclu22T1
zSp1dveF9357SDyMNWcByMjByhFhpgF41f77YaX25WrjIvVTjeOCEzDSWFSwbysV
WI7YP75sEy0ErwXZR29i5Ry/U3RjGHMXHnZ4qg4Oxhlc+mgDpYh0t29NlJJRAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUex6qPHXytYMh4WeorEn5eriIhnQwHwYDVR0j
BBgwFoAU1oGq6S95jS7l2Z/mRfwDgFFphHMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjUxNTU0RDE0MkNDQzlDMTczMjg2MkJCNTBFNDNGQTE2
MTVFNzlBNDZERDYxMEM1NEEwRjM4MzAxQzc1NTE5LzAvRDY4MUFBRTkyRjc5OEQy
RUU1RDk5RkU2NDVGQzAzODA1MTY5ODQ3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjgxQUFFOTJGNzk4RDJFRTVE
OTlGRTY0NUZDMDM4MDUxNjk4NDczLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUI1MTU1NEQxNDJDQ0M5QzE3MzI4NjJCQjUwRTQzRkExNjE1RTc5QTQ2
REQ2MTBDNTRBMEYzODMwMUM3NTUxOS8wLzMyMzAzMDJlMzEzMjM1MmUzMTM3MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzOTMzMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADI
faowDQYJKoZIhvcNAQELBQADggEBAKjrEqa0/7wWt8HxLyXg1aZCkgMV4LNnQNKP
zVwaN2mOZ7kk+qkymRjd8HIgMDEN3gqKSVNRHqGvwhc0erLyWt+nvnB64hGiKg6l
E4C5V0aatY0P7cuB1/7RfcAk9/sxJkgTuxthqGhT7IqtQoCau4VLiTz6aMWq7Pev
bTNJmXzX+63UutBdqH7ApQhmATgEztoCrLlDWHWR0Z3ctWCChZ5zVtZSug5JlcD4
ss+5I3Z/qPH/kBi40PeNNg8aJ6tHqJO7wKc+dn2Keu7auVnJ0xtD9GBrV2MGluao
aGYevxW5cEbrxsLc8jRYzdn/zd1+xPoFM6+Hu/+iLCXdWCl6zaI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:23:59 2025 by rpki-client