Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134342e302f32342d3234203d3e20323632323439.roa
File: 3230302e3130382e3134342e302f32342d3234203d3e20323632323439.roa (raw, json)
Hash identifier: vKxkXTabNrLg/skP8PUd1aEEqss3x1mWZSbt2OBXw3M=
Subject key identifier: 8B:CC:3D:69:3B:F6:79:70:3E:FA:55:64:43:C1:DC:93:F4:23:34:43
Certificate issuer: /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial: 13A7826D86CA1229CE54F0AAC39E20A1D394B186
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134342e302f32342d3234203d3e20323632323439.roa
Signing time: Mon 16 Dec 2024 15:05:00 +0000
ROA not before: Mon 16 Dec 2024 15:00:00 +0000
ROA not after: Mon 15 Dec 2025 15:05:00 +0000
asID: 262249
IP address blocks: 200.108.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a7:82:6d:86:ca:12:29:ce:54:f0:aa:c3:9e:20:a1:d3:94:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Validity
Not Before: Dec 16 15:00:00 2024 GMT
Not After : Dec 15 15:05:00 2025 GMT
Subject: CN=8BCC3D693BF679703EFA556443C1DC93F4233443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:ca:f6:de:c4:5c:9c:16:bf:de:e9:03:c2:
76:bc:0a:02:5c:10:ed:ed:63:5f:54:a5:bd:c9:78:
77:64:57:1b:bf:60:59:48:9f:83:6f:6e:75:12:3d:
ea:af:75:24:8e:b8:3b:82:41:d0:0f:c7:d8:7d:91:
91:ca:56:a0:fe:0a:94:4c:f1:3b:99:50:d8:d2:45:
5b:c5:8b:04:93:21:43:4f:08:c8:80:45:60:76:a9:
21:db:a3:5d:7a:2a:a3:65:36:d7:97:18:4e:9d:f8:
91:33:bf:58:eb:4b:c8:e1:10:89:96:db:f4:6e:18:
02:87:ef:ac:88:f3:ee:1c:a0:86:f2:db:8b:e6:b5:
cd:64:cc:d7:78:1a:9f:0e:5f:32:97:20:c3:75:2d:
4f:e6:08:48:86:67:03:4b:72:d7:d5:8e:93:06:83:
6f:79:1f:c2:4b:01:fb:e7:c9:33:02:b0:fa:14:f0:
65:9f:3f:e8:2d:df:51:b0:a2:74:c3:41:0f:9c:4a:
87:58:47:52:80:2f:8e:d0:88:97:7f:6e:ba:0a:4b:
2f:12:fa:35:a0:33:a7:89:53:67:5b:41:7d:20:13:
aa:fb:7f:07:62:07:c3:d7:99:92:f0:1b:ea:0a:39:
20:09:3c:0f:17:31:13:a7:72:7d:e7:ba:bd:ea:bf:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CC:3D:69:3B:F6:79:70:3E:FA:55:64:43:C1:DC:93:F4:23:34:43
X509v3 Authority Key Identifier:
keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134342e302f32342d3234203d3e20323632323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:8e:bc:d8:03:f7:c7:24:14:ac:10:3a:1e:2c:22:68:6f:72:
df:d5:d4:1c:a2:9b:ff:30:2b:af:3c:64:1f:13:16:05:d4:d3:
93:1c:6d:c8:80:79:47:a1:d9:16:68:79:5e:ee:55:ab:da:e1:
e2:87:d0:0c:ab:ed:c0:e2:17:8d:f1:c2:37:0b:e1:11:7e:a3:
3b:ec:5a:50:9b:1b:a6:70:3c:d6:94:8b:f3:ea:39:21:10:fa:
f1:a7:99:04:0c:06:85:12:3d:50:f5:43:40:a0:42:b9:01:08:
49:ca:ec:c8:ed:6f:76:50:18:be:8f:34:35:df:c3:1b:d2:7a:
a8:c9:a2:61:ae:52:71:42:f2:e7:4c:65:46:75:a8:e1:c2:81:
de:b3:26:1c:62:85:b1:94:2a:36:b4:8c:bb:fd:dd:9a:0f:3e:
d3:8f:90:b7:28:f8:5d:41:81:b8:80:9c:08:60:ae:37:18:0a:
a1:0f:13:6c:fe:11:8c:d1:8a:dd:c4:03:0d:82:92:30:a6:1c:
fe:f0:90:31:1a:92:4e:72:ab:32:d9:00:f1:4e:29:8a:46:46:
4c:90:f2:2b:76:d1:37:c9:03:22:53:80:3f:a5:a4:16:6c:7f:
c3:23:dc:a3:87:1d:6a:3b:9d:77:fb:91:88:d1:8e:fc:e8:3c:
e6:d2:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:36:35 2025 by rpki-client