Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32342d3234203d3e203131303538.roa
File: 3230302e31332e34322e302f32342d3234203d3e203131303538.roa (raw, json)
Hash identifier: JZ2fTFCYq6Kvd0yZoe0Q5zE568d4ZqhfOSEBBncgFlg=
Subject key identifier: 0A:44:6E:CC:93:D8:30:61:BA:5E:72:38:D4:A1:20:ED:07:6D:A1:E2
Certificate issuer: /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial: 79E318FDDC54BA869BF75CDC2B9D6872B6FE150A
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32342d3234203d3e203131303538.roa
Signing time: Tue 05 Mar 2024 17:41:28 +0000
ROA not before: Tue 05 Mar 2024 17:36:28 +0000
ROA not after: Tue 04 Mar 2025 17:41:28 +0000
asID: 11058
IP address blocks: 200.13.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e3:18:fd:dc:54:ba:86:9b:f7:5c:dc:2b:9d:68:72:b6:fe:15:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Validity
Not Before: Mar 5 17:36:28 2024 GMT
Not After : Mar 4 17:41:28 2025 GMT
Subject: CN=0A446ECC93D83061BA5E7238D4A120ED076DA1E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:4c:fc:9a:bf:02:29:00:0f:8d:6d:ba:78:
9c:e6:9e:c8:50:67:75:2c:7a:c2:5e:0e:25:48:ee:
89:e2:0c:51:92:2f:c7:17:f0:70:c7:6c:d1:67:4e:
56:ef:be:dd:24:60:d7:ad:4d:a9:bb:52:fe:c5:88:
32:c2:56:46:91:f3:3d:1c:c8:87:8a:ef:c1:1e:2a:
c2:55:46:a1:e4:bc:2c:d1:31:76:70:2f:c5:41:23:
d8:5f:60:15:13:da:3d:be:5e:bc:6f:81:d3:47:fb:
bd:b5:cc:64:fb:0c:5a:b0:8f:7b:ff:8d:96:03:08:
b1:34:d5:51:1e:4e:77:63:b7:98:53:29:bb:f7:17:
9f:57:a3:93:61:ad:45:74:32:29:3b:24:3d:e5:d0:
ff:b4:e4:b7:b6:8c:5b:9a:8c:98:95:30:18:6b:15:
ed:66:63:48:7f:14:0c:fc:aa:4d:f3:b2:80:31:15:
e9:0b:bb:80:16:73:4f:89:cf:35:f5:8d:4b:00:e2:
f1:5c:d0:79:96:56:00:1b:af:7f:a0:4d:c3:66:d2:
ab:55:9c:a6:1f:e6:1a:83:bb:38:ab:d0:4e:7d:1e:
1c:42:65:89:6f:c7:c3:01:f1:f5:dc:e8:00:e1:43:
4b:94:c2:f8:d2:6d:fe:ef:8e:19:28:31:6c:24:de:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:44:6E:CC:93:D8:30:61:BA:5E:72:38:D4:A1:20:ED:07:6D:A1:E2
X509v3 Authority Key Identifier:
keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32342d3234203d3e203131303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.42.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a5:0e:65:b2:eb:5a:14:fd:e4:76:20:4b:69:a7:14:92:bf:
b7:4a:4a:a3:89:39:b8:0a:f5:3b:25:5d:cd:d3:fe:6f:4c:2a:
7a:a3:05:97:14:22:71:25:69:c0:3d:6f:7d:f9:51:53:07:b2:
43:b7:f4:92:14:c7:2a:67:88:66:0a:f2:00:3e:25:77:23:73:
ba:7c:08:0b:fc:38:c2:1e:c9:4f:f3:e1:4d:d9:4d:3a:6f:a1:
91:6e:a7:ca:92:1e:f6:83:98:09:1b:2a:d3:e2:b0:89:51:d7:
64:3e:ef:0a:0c:7b:45:73:7e:df:bf:53:a1:83:64:1b:e1:0c:
fe:a6:d7:ad:3a:a2:a3:fc:ef:bc:1d:b9:8a:3d:28:6e:1f:ac:
6f:1e:48:aa:0f:b1:12:74:f7:4e:7b:64:88:ec:06:93:85:77:
83:f1:8d:a6:d2:ca:60:18:1a:c8:a2:44:c1:b6:83:c4:b7:49:
1d:e0:ec:a5:80:9b:53:52:81:e0:63:f2:c5:93:52:f8:00:8d:
6f:28:b2:2e:4d:0a:1f:64:e9:58:2d:fc:8c:c1:e9:d3:8f:40:
16:c0:14:7b:32:a5:56:da:c0:4b:62:b9:0c:5c:43:bf:81:c5:
64:f5:66:03:a0:9a:1c:a1:0e:d5:0e:cd:8c:93:fb:98:df:90:
ee:2b:55:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:59:08 2025 by rpki-client