Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36312e302f32342d3234203d3e20323731383933.roa
File: 3230302e31342e36312e302f32342d3234203d3e20323731383933.roa (raw, json)
Hash identifier: +kc5MpZc5AvdpKM+76Dze9lkMF245NRzwQWpCA4Jt5w=
Subject key identifier: 02:6E:D6:CE:21:79:43:F6:BE:55:42:C0:92:AB:63:F7:34:16:D0:9E
Certificate issuer: /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial: 21B137E722D54DD3D27B047165DCA38CC06D91A3
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36312e302f32342d3234203d3e20323731383933.roa
Signing time: Tue 05 Mar 2024 18:22:25 +0000
ROA not before: Tue 05 Mar 2024 18:17:25 +0000
ROA not after: Tue 04 Mar 2025 18:22:25 +0000
asID: 271893
IP address blocks: 200.14.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b1:37:e7:22:d5:4d:d3:d2:7b:04:71:65:dc:a3:8c:c0:6d:91:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Validity
Not Before: Mar 5 18:17:25 2024 GMT
Not After : Mar 4 18:22:25 2025 GMT
Subject: CN=026ED6CE217943F6BE5542C092AB63F73416D09E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:99:e6:e2:83:98:8e:d2:9b:31:94:5f:4d:
d3:14:87:c0:96:4e:f7:98:fb:3a:9c:85:76:b4:f1:
1a:16:9f:ca:d9:b3:66:fa:20:eb:bf:10:f8:c4:ee:
6e:05:00:bd:54:6d:4c:6b:2b:a4:49:cf:cc:3c:85:
e0:04:bf:f0:5c:39:1f:77:8a:37:77:5c:0a:80:0e:
b0:0e:ee:cf:40:a8:9f:65:dc:70:82:0f:c9:bb:59:
77:96:16:a6:a7:8d:db:3e:f5:b8:42:f0:73:9a:12:
e4:4e:72:d8:d2:11:d5:b2:62:28:19:26:77:3f:21:
21:94:e4:49:11:b9:6c:18:4f:2e:17:e4:f7:c4:3f:
4c:2a:0b:0f:cd:2d:9e:3d:b4:b0:21:fa:2a:eb:8c:
a2:80:68:13:8b:fc:89:1a:78:13:dc:b2:3e:e9:e7:
3b:1a:d0:d7:93:0c:db:ec:9c:26:f2:24:dd:15:91:
20:51:cc:4c:45:51:5c:05:95:10:c0:7e:4b:5f:f4:
52:c8:02:e1:7b:70:bf:17:17:3a:48:d4:2f:cc:58:
91:9b:ad:bf:05:c3:66:6e:86:b4:84:13:76:3e:c3:
d5:05:28:1c:c1:6e:1e:f1:24:51:3a:98:e8:b6:90:
16:6a:9b:08:93:5e:4d:95:33:f4:3c:a6:49:3d:d2:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6E:D6:CE:21:79:43:F6:BE:55:42:C0:92:AB:63:F7:34:16:D0:9E
X509v3 Authority Key Identifier:
keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36312e302f32342d3234203d3e20323731383933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:66:1f:72:10:86:b9:57:2f:6a:45:d7:ef:46:e5:42:45:de:
dc:bb:23:22:98:40:bf:36:cc:12:f3:be:59:1b:f6:cb:d6:de:
32:fc:9d:74:a2:4c:cf:b6:91:2b:86:28:07:a1:74:4b:c2:f0:
f7:13:21:2e:23:c6:38:86:89:66:fd:10:21:f7:52:1f:96:35:
80:03:96:93:04:67:11:27:91:94:46:de:d7:cf:6b:d1:8d:2a:
71:09:5d:a4:67:2f:e8:5c:e9:06:7b:7e:4a:26:27:16:df:fc:
df:72:a4:c8:bf:b2:25:63:6e:e5:01:22:df:c1:83:09:fe:fa:
16:b2:95:d3:51:ad:2e:7e:65:46:7e:4c:55:1b:ee:5d:4f:5c:
62:d0:9a:00:bb:72:af:16:ec:4c:8d:dc:bf:f7:70:91:fc:7b:
4e:0f:d8:1d:1a:23:df:bd:67:74:15:f4:2d:a4:4a:86:f1:f3:
f1:82:d5:d2:30:7c:90:02:d5:dc:e4:d6:ed:16:d9:e8:9b:7e:
9e:7a:2c:b7:9c:bd:47:8b:13:52:7a:80:c9:4b:ee:2f:6f:e8:
6b:2a:59:72:57:fb:b1:de:2a:3a:48:a1:a6:17:93:5a:5d:56:
c5:9e:2e:9c:7f:82:d2:3e:6b:39:77:cf:70:54:72:c4:fd:e5:
a5:37:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:22:40 2025 by rpki-client