Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa
File: 3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier: an4jVyk9axlDnP9GZK161g5dDj3es5nkIqUmk8NW99A=
Subject key identifier: 12:47:5B:18:B9:FD:21:28:A2:AE:A6:6B:F3:84:45:26:32:7F:C4:55
Certificate issuer: /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial: 0F1C3B9DA3921CBF5D95C9749C6358A0FC5B6D9F
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa
Signing time: Tue 05 Mar 2024 18:07:42 +0000
ROA not before: Tue 05 Mar 2024 18:02:42 +0000
ROA not after: Tue 04 Mar 2025 18:07:42 +0000
asID: 6461
IP address blocks: 200.123.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1c:3b:9d:a3:92:1c:bf:5d:95:c9:74:9c:63:58:a0:fc:5b:6d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Validity
Not Before: Mar 5 18:02:42 2024 GMT
Not After : Mar 4 18:07:42 2025 GMT
Subject: CN=12475B18B9FD2128A2AEA66BF3844526327FC455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:53:0f:fa:56:9b:87:6e:e4:00:fb:fc:f8:
43:8b:af:f0:3e:d3:11:07:e5:8c:10:aa:88:79:c4:
b2:73:9c:a6:f0:25:6e:d8:d8:f6:75:8c:3f:de:42:
c1:33:37:fb:06:9f:0c:49:25:ec:fe:eb:0d:73:22:
7a:e5:24:1d:73:cb:bd:bd:ed:18:aa:05:b1:8d:38:
33:8c:4b:24:70:7c:28:99:cc:0e:ab:46:c5:b6:92:
c0:81:39:63:45:5b:3e:fe:d5:b2:09:78:be:32:7b:
e8:1a:a9:53:78:d9:aa:78:69:79:5c:d7:c9:54:c8:
2f:79:2b:72:ac:cb:ed:e6:f8:dd:a8:38:29:15:42:
1b:8c:23:8f:d4:91:96:40:21:d7:ba:0e:5f:33:20:
77:5c:10:00:3b:e6:fc:11:91:9c:7a:64:dc:81:12:
52:aa:00:d7:9e:89:d1:62:6e:04:5f:4e:d1:6a:a6:
b9:29:5b:3d:03:56:10:c2:1d:a0:52:59:5b:2a:56:
43:4b:d0:7c:4d:2e:04:d9:94:73:50:4e:b3:9e:11:
52:f7:84:e1:70:fd:e8:9a:66:85:b6:a6:0d:ca:ab:
62:0c:52:73:c7:6b:a2:66:c6:c3:07:06:fa:26:4f:
fe:b5:d7:0c:db:be:20:f9:ee:e0:62:d1:19:4e:b5:
b5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:47:5B:18:B9:FD:21:28:A2:AE:A6:6B:F3:84:45:26:32:7F:C4:55
X509v3 Authority Key Identifier:
keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230372e302f32342d3234203d3e2036343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.207.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:42:c0:e9:f2:af:41:dd:36:c1:4f:d7:70:91:c7:6c:4f:94:
c1:fb:d1:8e:53:6a:cd:0b:63:b2:da:7e:7b:b9:b4:2c:7d:c1:
0d:6a:c7:7d:cc:a0:3b:3e:f3:6d:c3:aa:66:06:37:8c:90:7c:
da:e0:14:2f:ab:74:05:81:77:24:a5:46:3b:8e:93:0c:f2:b6:
d3:ed:36:f8:7b:0d:cb:8f:fd:63:47:e9:84:19:50:e0:85:22:
9f:e6:15:74:8d:f6:23:aa:d3:0b:13:75:72:d9:80:c9:20:6c:
ec:9b:7d:de:aa:e0:d1:64:05:bd:5a:1e:b4:8a:27:e8:78:d8:
2b:b4:b9:f1:3b:b5:20:6d:37:6d:0f:ed:d6:2d:14:5c:59:c5:
0c:d9:95:2f:5b:f9:5b:ef:84:55:90:76:ba:97:ba:4d:cb:1d:
a5:7b:89:2e:65:42:d0:ba:37:c2:29:3a:35:78:20:43:0b:75:
d1:76:2f:c2:c0:00:99:f9:9e:0b:7f:85:93:b4:81:ab:9a:77:
8c:82:ff:09:bb:fb:e5:39:53:30:f0:0c:90:4c:09:80:bc:82:
9e:c1:92:f9:0d:14:57:d8:7e:01:f8:41:2e:04:c7:35:94:c2:
87:aa:3d:64:8a:0b:ea:dd:72:cd:ac:8c:20:5e:b9:4d:f1:b2:
d5:f3:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:02:59 2025 by rpki-client