Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa
File: 3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa (raw, json)
Hash identifier: jMNgrcTr4F8P98D7aqyJ3HzoaOUGAf8krlLia6+PHOA=
Subject key identifier: BF:45:33:32:18:24:86:8C:5E:0D:35:1F:EE:61:C4:62:74:67:A6:E2
Certificate issuer: /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial: 2CA8876B06CB2C41E5AEC8A6090DCDB83A4F8E6E
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa
Signing time: Tue 05 Mar 2024 18:21:12 +0000
ROA not before: Tue 05 Mar 2024 18:16:12 +0000
ROA not after: Tue 04 Mar 2025 18:21:12 +0000
asID: 263821
IP address blocks: 200.189.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a8:87:6b:06:cb:2c:41:e5:ae:c8:a6:09:0d:cd:b8:3a:4f:8e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Validity
Not Before: Mar 5 18:16:12 2024 GMT
Not After : Mar 4 18:21:12 2025 GMT
Subject: CN=BF4533321824868C5E0D351FEE61C4627467A6E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:ce:45:33:fc:44:e2:1d:1e:16:3a:aa:bc:
a4:9c:a6:45:c3:95:ce:84:cc:af:33:3b:6c:cc:52:
86:ba:dd:8c:5b:d9:c4:1c:94:38:26:5f:2f:aa:3c:
bb:66:2b:24:68:31:c7:85:fd:89:fb:94:11:40:62:
d1:70:b9:c2:1e:a7:e9:71:ef:66:d4:48:26:5b:ac:
37:45:bf:cc:bd:24:f7:2c:d8:81:e5:53:28:2d:5f:
6e:83:c9:1f:e7:2e:21:a6:3d:c7:e4:70:77:8a:48:
b1:d4:f9:ef:67:57:bc:8d:eb:45:f0:4b:30:f8:e9:
68:70:dd:4f:23:c6:12:83:b7:cc:64:db:bc:4c:24:
f4:a0:c1:bf:eb:09:a2:c0:3f:4b:8b:4c:0c:03:a4:
1e:3f:b2:f0:c6:35:c9:61:0a:38:9a:e5:af:be:7e:
53:2e:8c:fe:94:46:eb:94:7b:d2:f7:45:1d:9a:b6:
f5:97:72:a0:2a:39:9a:31:63:22:08:b4:ba:1b:3f:
75:a6:d9:b1:c0:2a:14:7c:7b:e2:69:36:46:7b:38:
ce:b4:1e:87:50:4c:f1:cf:69:5b:c8:c9:ad:02:bc:
04:dc:5b:12:3a:b2:4a:d1:ed:88:da:8f:2b:4f:b6:
e9:40:1e:09:d3:2e:05:e9:f2:57:f1:83:6f:d6:e7:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:45:33:32:18:24:86:8C:5E:0D:35:1F:EE:61:C4:62:74:67:A6:E2
X509v3 Authority Key Identifier:
keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e3138392e34342e302f32322d3232203d3e20323633383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.189.44.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:f3:ec:88:68:ef:7d:22:0d:4e:8f:e4:64:25:93:1c:ee:16:
38:cd:b2:f6:9f:65:42:af:fe:ec:68:fd:00:b1:9a:b0:bb:c6:
e6:17:93:3f:8f:ea:bd:eb:f7:72:92:9e:e5:87:aa:c8:10:c5:
8e:96:86:6a:59:c5:d2:63:80:cb:7a:b2:6d:f8:98:c9:6e:3f:
7b:18:36:f8:a0:82:76:e1:dc:f2:2a:fa:29:5c:4e:76:5d:5f:
d1:7d:e1:68:24:67:84:0c:bb:72:c7:53:49:ef:0c:2d:ea:52:
f4:ef:7c:ba:3d:3e:59:4a:9a:c9:b7:34:d1:7a:12:96:05:af:
1b:dd:06:34:30:9a:87:a2:c9:77:c2:64:94:11:e0:a0:b4:11:
c9:e7:85:1f:ce:68:f4:a4:e9:81:cd:6a:32:22:66:53:c9:cd:
5f:00:63:27:89:ed:46:01:88:07:4a:8c:4b:4c:7f:f2:b1:81:
67:d8:94:10:a7:01:b3:7c:8e:6a:f7:11:13:bc:09:f2:b2:34:
75:2b:9c:3c:0e:b1:b2:fd:67:53:ee:1e:6f:fc:93:f0:f0:4c:
14:c7:b3:24:0e:43:15:d6:f7:d1:7d:4e:22:3c:d8:4b:44:8d:
cc:ea:72:e5:de:f9:9b:d9:a0:06:58:7d:5c:23:e1:1b:37:09:
c9:6f:0c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:45:51 2025 by rpki-client