Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233352e302f32342d3234203d3e203233333833.roa
File: 3230302e3130362e3233352e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier: QVXL63I1Lf40wqzeGgjBjgQi9PhwYDrElqjc+0iO2QM=
Subject key identifier: 3F:B2:49:3B:C7:7D:24:63:E2:27:3B:18:C1:64:44:B7:57:97:14:84
Certificate issuer: /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial: 3E4898472952EAE25ABA217CB89DAA9962D4FB08
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233352e302f32342d3234203d3e203233333833.roa
Signing time: Tue 05 Mar 2024 18:10:39 +0000
ROA not before: Tue 05 Mar 2024 18:05:39 +0000
ROA not after: Tue 04 Mar 2025 18:10:39 +0000
asID: 23383
IP address blocks: 200.106.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:48:98:47:29:52:ea:e2:5a:ba:21:7c:b8:9d:aa:99:62:d4:fb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Validity
Not Before: Mar 5 18:05:39 2024 GMT
Not After : Mar 4 18:10:39 2025 GMT
Subject: CN=3FB2493BC77D2463E2273B18C16444B757971484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:d0:7f:c6:66:9c:eb:16:e9:08:db:5f:c6:
05:00:32:b3:ec:e9:5e:c3:09:cd:f9:30:97:33:79:
a1:45:0c:ba:2a:17:45:df:aa:7b:92:a8:44:6e:9c:
5a:b3:7e:88:3d:64:e2:b6:03:63:be:6b:cf:2c:40:
d7:2d:84:b9:f9:9e:c0:57:1f:86:ae:36:b0:94:5f:
85:c7:4f:c7:7f:3d:69:4c:9d:6c:c3:d3:3f:a8:4b:
13:3b:8c:76:1a:5d:95:84:3a:67:d5:aa:ad:15:08:
11:82:c7:62:de:4c:b8:aa:79:a0:5e:8b:a7:76:5b:
9c:5c:54:1f:aa:c3:96:80:f2:c7:be:bc:bf:8a:9b:
ce:46:fd:77:ac:4c:ba:55:94:33:bb:b3:68:91:3e:
3c:fd:67:ed:35:65:69:2d:f8:2d:a1:66:5f:59:f8:
66:aa:a3:96:8e:76:ef:e5:ee:13:35:25:5f:a8:d3:
b0:9e:44:2b:62:d2:b6:61:94:b2:38:3c:87:9c:bc:
47:4d:08:03:da:ec:06:e7:f3:c6:40:9c:e5:54:86:
95:68:e5:3a:65:5d:51:ad:a9:8f:62:63:07:9a:d3:
7a:a0:3a:17:4e:1a:27:5d:75:ca:05:31:6e:52:d9:
49:6d:9c:c7:1e:f5:4f:51:6b:6c:9b:eb:fc:ec:fe:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:49:3B:C7:7D:24:63:E2:27:3B:18:C1:64:44:B7:57:97:14:84
X509v3 Authority Key Identifier:
keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233352e302f32342d3234203d3e203233333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.106.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:32:6c:54:05:c9:d6:8f:aa:39:b3:ea:8b:20:fd:40:01:ab:
23:4d:b7:61:2c:d1:ab:24:dc:98:d0:12:8a:c4:f3:e6:64:f6:
26:e7:52:1d:79:58:ef:51:f7:63:fe:5a:b4:53:c6:24:24:5d:
ec:74:31:86:b4:b5:6b:26:21:ff:82:4e:9e:bb:b7:af:2e:3a:
a6:6a:8d:ae:32:7a:d8:b8:98:12:85:df:c0:65:70:d4:5b:c6:
14:24:86:6b:b5:23:89:a5:cc:c7:73:d0:51:62:8a:f9:cd:99:
89:99:76:36:cc:54:3f:8b:59:99:23:68:02:d5:1e:54:eb:d5:
17:65:8d:c8:f7:d3:b4:42:8d:28:99:fa:5a:0d:80:fa:98:6d:
25:09:71:f1:91:9a:19:9a:70:a7:fd:41:ad:d2:d1:39:60:91:
ec:85:7d:b2:94:3e:7e:c0:de:d7:f4:46:ca:3a:6f:ec:d1:05:
5d:bf:8b:c3:db:fc:90:08:ef:0f:71:14:4e:cd:ad:fe:ad:d7:
7b:67:d7:56:3f:d3:3b:eb:94:c3:22:7f:03:0a:1b:62:2b:e3:
cf:c7:7f:2b:6a:82:f9:de:05:5a:a5:b8:2d:c9:64:70:77:c4:
5c:14:8e:76:7f:d4:3d:eb:f7:82:65:c6:94:82:40:22:b9:7d:
37:44:15:31
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPkiYRylS6uJauiF8uJ2qmWLU+wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNDAzMDUxODA1MzlaFw0yNTAzMDQxODEwMzlaMDMxMTAvBgNV
BAMTKDNGQjI0OTNCQzc3RDI0NjNFMjI3M0IxOEMxNjQ0NEI3NTc5NzE0ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ItB/xmac6xbpCNtfxgUAMrPs
6V7DCc35MJczeaFFDLoqF0XfqnuSqERunFqzfog9ZOK2A2O+a88sQNcthLn5nsBX
H4auNrCUX4XHT8d/PWlMnWzD0z+oSxM7jHYaXZWEOmfVqq0VCBGCx2LeTLiqeaBe
i6d2W5xcVB+qw5aA8se+vL+Km85G/XesTLpVlDO7s2iRPjz9Z+01ZWkt+C2hZl9Z
+Gaqo5aOdu/l7hM1JV+o07CeRCti0rZhlLI4PIecvEdNCAPa7Abn88ZAnOVUhpVo
5TplXVGtqY9iYwea03qgOhdOGidddcoFMW5S2UltnMce9U9Ra2yb6/zs/l89AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUP7JJO8d9JGPiJzsYwWREt1eXFIQwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMyMzAzMDJlMzEzMDM2MmUzMjMzMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzMzODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGrr
MA0GCSqGSIb3DQEBCwUAA4IBAQCeMmxUBcnWj6o5s+qLIP1AAasjTbdhLNGrJNyY
0BKKxPPmZPYm51IdeVjvUfdj/lq0U8YkJF3sdDGGtLVrJiH/gk6eu7evLjqmao2u
MnrYuJgShd/AZXDUW8YUJIZrtSOJpczHc9BRYor5zZmJmXY2zFQ/i1mZI2gC1R5U
69UXZY3I99O0Qo0omfpaDYD6mG0lCXHxkZoZmnCn/UGt0tE5YJHshX2ylD5+wN7X
9EbKOm/s0QVdv4vD2/yQCO8PcRROza3+rdd7Z9dWP9M765TDIn8DChtiK+PPx38r
aoL53gVapbgtyWRwd8RcFI52f9Q96/eCZcaUgkAiuX03RBUx
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:13:09 2025 by rpki-client