Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/3230302e36312e3234382e302f32322d3234203d3e203532343234.roa
File: 3230302e36312e3234382e302f32322d3234203d3e203532343234.roa (raw, json)
Hash identifier: hp3XgjO08OsbZ4U8ZzAsP0FtIY/mV4guEO+HYMkHEng=
Subject key identifier: 8D:2D:06:F5:05:81:D4:4B:25:DD:33:4E:1A:BB:6C:D9:E2:CF:BC:DB
Certificate issuer: /CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Certificate serial: 58D961526273B3B9B2767936E97C34844B28A9B3
Authority key identifier: A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/3230302e36312e3234382e302f32322d3234203d3e203532343234.roa
Signing time: Tue 05 Mar 2024 17:53:16 +0000
ROA not before: Tue 05 Mar 2024 17:48:16 +0000
ROA not after: Tue 04 Mar 2025 17:53:16 +0000
asID: 52424
IP address blocks: 200.61.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d9:61:52:62:73:b3:b9:b2:76:79:36:e9:7c:34:84:4b:28:a9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5
Validity
Not Before: Mar 5 17:48:16 2024 GMT
Not After : Mar 4 17:53:16 2025 GMT
Subject: CN=8D2D06F50581D44B25DD334E1ABB6CD9E2CFBCDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:07:b8:f9:c6:f0:c6:01:cd:2c:ec:be:2d:
e2:e5:f1:5e:d9:dd:07:a1:e7:13:34:5c:d8:b8:e2:
57:5a:90:09:ab:c5:7c:74:9b:ae:10:a5:7d:f4:ca:
11:a3:08:c6:77:6e:e6:57:77:25:72:69:c0:ac:eb:
8a:62:4c:78:33:6f:21:5d:47:72:71:bf:37:83:10:
b5:03:61:ea:3a:34:c5:b7:45:4e:79:a4:ce:ea:57:
26:fe:5e:47:8e:a7:56:ae:73:58:cc:6a:68:fb:ef:
b8:f4:df:3b:fb:a3:1f:85:3d:3a:bc:30:29:60:13:
6a:b7:80:43:38:dd:01:ea:b0:56:c3:94:cf:b7:78:
40:37:c6:7f:a8:32:c9:89:d8:c4:dd:45:ee:df:27:
da:a7:a9:3f:10:da:c6:f6:6b:ee:fe:f4:b1:1c:c4:
93:9f:9c:ee:71:30:5d:29:44:02:cc:5f:3a:01:b4:
66:b8:40:53:c4:46:d7:11:65:ed:04:25:09:0d:36:
3f:cf:27:23:b2:ec:8d:3a:ae:ee:31:4c:95:0c:d5:
58:fe:ef:6e:22:eb:b8:42:01:eb:6c:f8:b5:a6:37:
9d:ad:4d:2a:e9:c3:c3:b0:a4:ff:51:61:05:70:6b:
8d:c3:d7:b1:0d:cd:4a:7c:bc:1a:16:b0:02:ac:d1:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2D:06:F5:05:81:D4:4B:25:DD:33:4E:1A:BB:6C:D9:E2:CF:BC:DB
X509v3 Authority Key Identifier:
keyid:A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/3230302e36312e3234382e302f32322d3234203d3e203532343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.61.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:6a:40:01:0d:f0:43:2f:69:ba:7e:e9:bd:74:37:95:25:0e:
9d:6e:5e:fd:c3:de:bf:f8:5e:f0:3e:00:dc:3f:68:8f:10:7c:
15:29:b6:f8:26:dd:80:7d:e7:6f:87:ec:93:02:a0:11:7a:53:
aa:53:3d:5d:b2:6f:bc:73:cf:88:50:63:49:76:8f:ab:f7:ca:
45:26:89:89:c3:f6:46:33:42:18:58:3c:72:7e:d4:c6:f5:2f:
ea:ad:d3:be:92:16:b9:71:ba:6a:d7:9d:2e:d2:6e:82:d6:b1:
95:c0:aa:cd:29:77:64:b7:bf:b1:9f:6c:92:a2:b8:b0:3a:cf:
7b:14:de:91:8d:3d:41:0a:7b:ac:fc:04:1d:f3:37:ff:9e:0a:
be:f4:21:d4:33:c1:ed:d9:3b:0e:73:a0:77:52:71:4f:21:99:
5f:8a:da:ef:35:1a:b1:d3:8c:71:ef:36:8c:8e:36:24:cb:7c:
11:81:05:2c:be:8a:99:00:6c:e7:e7:52:78:92:d3:87:74:83:
0a:f3:83:cd:22:01:7a:ab:e5:4c:c7:69:7b:7f:dd:9c:f0:3a:
c2:72:09:78:c9:c9:89:9e:cc:6f:12:4b:c2:fe:33:f1:13:a3:
2b:26:35:96:e7:69:58:6b:fe:8c:5a:f4:8f:f6:ce:3e:0f:a1:
c9:21:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:37:36 2025 by rpki-client