Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3135372e302f32342d3234203d3e203238303431.roa
File: 3230302e3132352e3135372e302f32342d3234203d3e203238303431.roa (raw, json)
Hash identifier: QazCMV1uUsA99g4UfRsiF1XGpjZvIfDSoS7XDGjuRK8=
Subject key identifier: 63:23:36:41:1D:E6:5E:C8:80:9B:93:41:3E:08:F1:25:AE:5C:ED:96
Certificate issuer: /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial: 65D637BDA731CBB2D57445277274752012EB7C49
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3135372e302f32342d3234203d3e203238303431.roa
Signing time: Tue 05 Mar 2024 17:46:42 +0000
ROA not before: Tue 05 Mar 2024 17:41:42 +0000
ROA not after: Tue 04 Mar 2025 17:46:42 +0000
asID: 28041
IP address blocks: 200.125.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d6:37:bd:a7:31:cb:b2:d5:74:45:27:72:74:75:20:12:eb:7c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
Validity
Not Before: Mar 5 17:41:42 2024 GMT
Not After : Mar 4 17:46:42 2025 GMT
Subject: CN=632336411DE65EC8809B93413E08F125AE5CED96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:a2:8b:a8:f6:1d:03:13:20:05:95:0d:e2:
64:f8:61:53:6c:ef:a3:b1:26:01:c5:06:40:b1:5a:
30:17:a9:50:a8:0e:8a:84:01:53:1d:f2:3f:eb:55:
ee:f1:2c:a1:5c:47:52:36:c9:91:ba:27:58:8b:12:
7e:e0:05:e9:ab:0a:d8:d0:31:2f:fb:8c:e0:9e:ea:
07:fc:45:72:0d:07:f3:f5:09:ff:ac:0c:ed:2f:64:
c2:bb:a4:02:dd:26:5a:ae:50:3b:98:f7:ca:b1:88:
8c:cd:d5:53:31:62:3d:1a:97:4b:40:90:35:26:a7:
5b:2b:84:df:75:53:1b:b6:ba:07:41:12:70:61:91:
64:b9:3c:87:a4:49:97:db:7c:5d:d7:26:ac:83:9a:
28:45:22:3f:2d:7b:a2:c5:dd:27:e5:44:bc:5b:ad:
d2:bb:a4:41:c6:43:69:cc:95:3d:aa:9f:a4:73:c4:
b4:a5:a0:ee:30:e6:5b:17:45:b4:c8:9a:a2:7e:a9:
c3:00:d8:9e:c9:f6:e8:3f:42:8a:cc:af:5d:ef:37:
8d:e5:27:a7:63:f1:bd:85:c6:8c:e5:ac:a5:60:6f:
bc:cd:70:90:59:9c:9a:19:a6:3d:d4:bf:d7:21:2a:
40:4e:0e:38:b5:e8:df:4b:45:51:20:4a:11:3e:bc:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:23:36:41:1D:E6:5E:C8:80:9B:93:41:3E:08:F1:25:AE:5C:ED:96
X509v3 Authority Key Identifier:
keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3230302e3132352e3135372e302f32342d3234203d3e203238303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:de:a9:92:52:41:f6:6d:bc:d7:3d:2b:a9:62:43:37:d1:a8:
3b:1c:34:f2:84:ef:4b:92:1e:68:f3:9e:75:1b:38:c7:12:9a:
58:83:7b:d6:03:0e:90:a5:f9:a0:51:e0:e3:f0:a0:23:79:40:
37:a4:9f:70:c3:63:ea:9e:95:21:69:76:af:07:ef:64:30:92:
b5:25:33:58:1d:71:db:8b:db:d6:a6:77:99:9e:19:1c:49:85:
ee:03:88:61:9b:2a:8c:6c:13:6a:94:ec:81:9f:d8:d0:b5:f2:
12:94:5e:00:c6:bc:93:1b:9d:76:3f:35:68:8f:33:fa:8d:7e:
c0:43:7c:89:82:76:39:73:da:41:e0:38:dc:0f:cb:22:6a:63:
91:4d:76:ee:69:da:a5:4b:24:c8:e0:b0:c4:02:67:55:9e:26:
09:cd:08:b7:32:ad:1d:b7:f8:43:f7:0d:3a:cd:5a:c2:db:c6:
44:31:86:2e:2c:f2:e1:e8:d7:4c:6c:95:81:80:43:d3:9e:bb:
ef:2b:a0:d7:a8:0f:75:59:62:b0:01:98:35:1c:8d:11:d6:f6:
d2:a9:87:00:22:92:70:df:79:43:24:cf:9f:38:5a:b2:ee:93:
e3:b6:dc:c1:8d:37:fc:3c:fa:0a:77:a0:82:8b:2d:0a:8f:00:
ad:c0:0a:45
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZdY3vacxy7LVdEUncnR1IBLrfEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI3MDlGNzc3OTg4RDhCQjlDMjlEQkJCNTM5Njg4MTI1
NjhDNjE2RTAeFw0yNDAzMDUxNzQxNDJaFw0yNTAzMDQxNzQ2NDJaMDMxMTAvBgNV
BAMTKDYzMjMzNjQxMURFNjVFQzg4MDlCOTM0MTNFMDhGMTI1QUU1Q0VEOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWcqKLqPYdAxMgBZUN4mT4YVNs
76OxJgHFBkCxWjAXqVCoDoqEAVMd8j/rVe7xLKFcR1I2yZG6J1iLEn7gBemrCtjQ
MS/7jOCe6gf8RXINB/P1Cf+sDO0vZMK7pALdJlquUDuY98qxiIzN1VMxYj0al0tA
kDUmp1srhN91Uxu2ugdBEnBhkWS5PIekSZfbfF3XJqyDmihFIj8te6LF3SflRLxb
rdK7pEHGQ2nMlT2qn6RzxLSloO4w5lsXRbTImqJ+qcMA2J7J9ug/QorMr13vN43l
J6dj8b2FxozlrKVgb7zNcJBZnJoZpj3Uv9chKkBODji16N9LRVEgShE+vNQJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUYyM2QR3mXsiAm5NBPgjxJa5c7ZYwHwYDVR0j
BBgwFoAU0nCfd3mI2LucKdu7U5aIElaMYW4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0JEQTNDQkUzRjk0QjE5RURGMDA5OTUzQzBGNDU1RDcw
NTNCMDYwODgzRkY3NEFCM0ZGQ0ExMjgxOEYwOTMyLzAvRDI3MDlGNzc3OTg4RDhC
QjlDMjlEQkJCNTM5Njg4MTI1NjhDNjE2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMjcwOUY3Nzc5ODhEOEJCOUMy
OURCQkI1Mzk2ODgxMjU2OEM2MTZFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNCREEzQ0JFM0Y5NEIxOUVERjAwOTk1M0MwRjQ1NUQ3MDUzQjA2MDg4
M0ZGNzRBQjNGRkNBMTI4MThGMDkzMi8wLzMyMzAzMDJlMzEzMjM1MmUzMTM1Mzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzAzNDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyH2d
MA0GCSqGSIb3DQEBCwUAA4IBAQC03qmSUkH2bbzXPSupYkM30ag7HDTyhO9Lkh5o
8551GzjHEppYg3vWAw6QpfmgUeDj8KAjeUA3pJ9ww2PqnpUhaXavB+9kMJK1JTNY
HXHbi9vWpneZnhkcSYXuA4hhmyqMbBNqlOyBn9jQtfISlF4AxryTG512PzVojzP6
jX7AQ3yJgnY5c9pB4DjcD8siamORTXbuadqlSyTI4LDEAmdVniYJzQi3Mq0dt/hD
9w06zVrC28ZEMYYuLPLh6NdMbJWBgEPTnrvvK6DXqA91WWKwAZg1HI0R1vbSqYcA
IpJw33lDJM+fOFqy7pPjttzBjTf8PPoKd6CCiy0KjwCtwApF
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:18 2025 by rpki-client