Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e302e302f31362d3234203d3e2036343239.roa
File: 3230302e32372e302e302f31362d3234203d3e2036343239.roa (raw, json)
Hash identifier: Q2c6KT+8gfIvsIH1TH7I1bSZXXhDerEXddFJA7JwxPM=
Subject key identifier: 57:09:73:17:2E:51:F8:3E:63:BB:CA:1E:F1:7C:7F:9F:4A:22:30:8D
Certificate issuer: /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial: 0258DB375C8D7F22A9C5F907F3F10CD85F0B7815
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e302e302f31362d3234203d3e2036343239.roa
Signing time: Tue 05 Mar 2024 18:20:12 +0000
ROA not before: Tue 05 Mar 2024 18:15:12 +0000
ROA not after: Tue 04 Mar 2025 18:20:12 +0000
asID: 6429
IP address blocks: 200.27.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:58:db:37:5c:8d:7f:22:a9:c5:f9:07:f3:f1:0c:d8:5f:0b:78:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Validity
Not Before: Mar 5 18:15:12 2024 GMT
Not After : Mar 4 18:20:12 2025 GMT
Subject: CN=570973172E51F83E63BBCA1EF17C7F9F4A22308D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:f5:ba:28:97:ab:1d:8e:89:e6:00:bd:9f:
1f:02:8f:cb:36:20:d2:f5:c3:06:c7:0b:17:2e:3b:
c9:86:a6:05:af:3a:97:9c:53:38:04:55:b2:b2:61:
21:1e:4b:50:da:a2:3b:67:de:90:67:c1:02:ef:09:
9a:3d:b3:a1:0c:33:c1:14:34:5a:15:15:e5:1a:9e:
72:fb:0e:bd:8c:2f:3c:e4:e3:f9:f5:bc:3c:1a:a4:
1b:90:26:c3:8f:bc:14:98:fa:dd:0e:59:8d:4e:37:
23:ae:f7:87:fb:33:79:a5:4d:a0:c2:44:82:8d:e2:
3e:ac:ea:0f:ea:26:27:91:fc:e7:37:b7:82:57:dc:
56:1d:ea:49:4d:52:42:c9:a8:1c:f8:26:28:2c:d1:
b9:ad:c5:ee:62:f3:c4:af:ec:c4:f4:c3:fa:52:7c:
da:be:9c:f8:e7:fe:b5:2e:bf:f2:ed:5a:84:14:c7:
9b:a6:33:e0:f3:81:31:46:31:68:e9:55:c9:3c:59:
55:b8:c3:dc:5d:3b:62:0b:ed:f2:84:0c:cd:08:d8:
43:87:85:1f:87:c4:b1:04:05:a4:3d:52:f8:f2:c0:
1d:2a:fc:76:e6:2e:9f:53:38:57:d5:92:02:44:2f:
5b:8c:ae:c1:09:85:8c:b8:56:5a:1f:6f:31:22:52:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:09:73:17:2E:51:F8:3E:63:BB:CA:1E:F1:7C:7F:9F:4A:22:30:8D
X509v3 Authority Key Identifier:
keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e302e302f31362d3234203d3e2036343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:1b:99:77:d6:e0:85:63:9f:c5:8a:d9:97:07:ed:c7:82:a1:
09:ec:5d:d5:ec:d7:11:80:b4:04:4d:13:6b:73:ea:5f:d7:88:
a1:51:a0:95:51:9d:19:2d:78:56:2b:26:4a:a1:81:b5:5e:c6:
7c:40:78:0e:1e:cf:6d:ee:00:e4:2c:14:f7:7d:a5:b5:27:60:
97:eb:50:f1:31:cb:75:22:6a:96:de:77:00:49:b1:a6:36:63:
25:1f:b3:17:c5:6b:5a:d5:3e:72:a7:89:7c:82:e0:83:2a:51:
f8:cf:24:fa:db:b1:be:54:d0:69:d4:a9:d3:d5:91:a2:17:24:
52:1b:ff:37:da:f8:0f:97:2f:f0:68:b0:bc:ee:a1:22:06:b6:
0e:60:a8:3d:c4:bc:bb:cf:b7:63:26:d1:a3:92:f5:2a:03:13:
36:99:17:96:2e:f5:17:de:0f:8b:48:58:f1:2c:c6:e8:e0:f8:
6b:a0:e3:4f:4b:ee:35:c8:e0:0d:a3:4d:67:ac:13:30:48:05:
5d:76:5d:7a:11:bb:7b:bc:2b:cc:49:88:13:69:b4:47:92:d0:
2d:3f:4b:ee:fa:52:5f:32:35:93:31:4c:61:fe:f3:b3:de:2d:
5e:8b:66:e1:b2:e3:d3:04:ad:c2:e4:01:9e:66:04:46:10:41:
0b:f2:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:04:58 2025 by rpki-client