Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e20323131383636.roa
File: 3230302e33332e38322e302f32342d3234203d3e20323131383636.roa (raw, json)
Hash identifier: ED22nfKD7yyU0TOR8210c1uwUr9KMFofeIF9zzIvpjc=
Subject key identifier: F7:66:8A:6F:45:11:FE:34:17:7A:72:A5:4C:37:D3:B3:20:E7:A5:93
Certificate issuer: /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial: 3D91AF19D559E73FE2C616AF23793E2EBF109D9F
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e20323131383636.roa
Signing time: Tue 05 Mar 2024 17:41:31 +0000
ROA not before: Tue 05 Mar 2024 17:36:31 +0000
ROA not after: Tue 04 Mar 2025 17:41:31 +0000
asID: 211866
IP address blocks: 200.33.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:91:af:19:d5:59:e7:3f:e2:c6:16:af:23:79:3e:2e:bf:10:9d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Validity
Not Before: Mar 5 17:36:31 2024 GMT
Not After : Mar 4 17:41:31 2025 GMT
Subject: CN=F7668A6F4511FE34177A72A54C37D3B320E7A593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:b2:17:81:2e:d3:20:f2:cb:ba:9b:f9:9a:
01:a9:91:cd:47:9b:c8:35:37:ab:c1:60:2d:f5:c1:
b8:90:ca:c8:ba:cf:2e:ae:95:7b:14:20:e4:6f:ff:
0d:f2:d2:da:2e:33:dc:3a:60:4d:71:59:dc:33:44:
04:65:4e:ab:aa:bf:2b:c9:30:a7:89:5e:08:65:42:
54:90:ae:c3:de:07:88:2c:ea:00:51:67:29:e2:7b:
d8:59:fd:ae:78:c1:57:e3:42:de:33:49:ee:bd:d2:
9a:5a:be:16:5c:57:19:74:0e:76:f5:00:e9:46:17:
5a:39:d5:29:eb:93:41:5d:9c:d1:0f:f4:df:58:6b:
72:b0:ef:4f:6a:d5:d1:19:2c:bb:21:9b:c7:3f:21:
c8:c2:fd:0f:55:e8:d4:7d:27:b9:7e:01:f1:79:e1:
7d:f1:69:57:20:fc:79:a3:c6:d2:de:32:cc:df:bc:
07:90:31:4d:1d:72:87:f4:d3:16:3d:f1:e3:e2:3c:
96:d1:52:52:b9:4a:71:67:cf:d9:ba:c5:c4:7c:f0:
61:4f:98:34:89:21:f0:30:11:ef:c9:3d:c4:fd:f2:
ee:c8:09:e6:8d:34:56:b6:c2:41:86:62:2b:ec:46:
38:b1:0e:1b:92:45:ca:16:f2:f9:fc:c3:d3:6e:f1:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:66:8A:6F:45:11:FE:34:17:7A:72:A5:4C:37:D3:B3:20:E7:A5:93
X509v3 Authority Key Identifier:
keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e20323131383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.82.0/24
Signature Algorithm: sha256WithRSAEncryption
89:94:bc:cd:1c:46:0d:a5:67:8f:13:d6:9e:c0:13:ca:f3:cd:
a6:72:22:df:45:20:eb:3e:ed:b3:49:9a:e8:ae:35:c4:08:82:
32:a7:f7:de:5b:33:c5:3e:7a:b1:71:c3:6d:33:5f:9c:22:07:
f3:41:9a:ff:3c:2e:02:d8:f3:0e:73:c1:d7:5c:3a:e5:35:d2:
cd:50:27:09:f1:61:b4:4e:a7:38:a4:15:6b:5d:b6:7a:ac:a1:
20:18:46:5d:23:f1:6f:f2:7e:43:e9:ce:9a:b9:e1:e1:ca:cd:
1e:28:1f:5a:c8:d4:66:8b:1c:bf:c4:9b:5f:01:38:74:57:44:
1c:dc:8d:31:5d:11:cf:1d:0d:77:37:d8:30:19:3d:df:ef:5d:
b9:9c:2e:3c:39:dd:c9:0f:7e:aa:c6:7a:c2:81:53:2d:45:36:
7b:16:cb:48:01:ad:3a:96:88:a6:fc:36:92:dc:31:46:4c:49:
fb:28:59:7c:da:ca:f9:3c:cf:06:3e:3c:cd:c3:7e:25:17:b2:
1f:b1:26:79:ca:d4:7f:7e:84:92:fe:20:d2:d6:71:a6:86:48:
ff:cf:5b:11:0f:ca:f4:22:18:07:3c:95:be:1e:99:b0:9d:ab:
18:f6:8a:14:20:81:6a:48:98:90:36:53:ea:f8:35:be:d8:c3:
af:e6:02:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:58:33 2025 by rpki-client