Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2037333033.roa
File: 3230302e33332e38322e302f32342d3234203d3e2037333033.roa (raw, json)
Hash identifier: a+jyVnTRJTuQa8CpFsOPvlDCnl1Ovr7wQucUYDIj5w4=
Subject key identifier: 3C:3C:4F:E5:E2:D0:04:F5:8D:CF:6C:34:5B:6E:4D:D8:91:78:AE:A9
Certificate issuer: /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial: 2FF801095FD14D00F9E9BFBEC1F250A2D7205412
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2037333033.roa
Signing time: Tue 05 Mar 2024 17:41:31 +0000
ROA not before: Tue 05 Mar 2024 17:36:31 +0000
ROA not after: Tue 04 Mar 2025 17:41:31 +0000
asID: 7303
IP address blocks: 200.33.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f8:01:09:5f:d1:4d:00:f9:e9:bf:be:c1:f2:50:a2:d7:20:54:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Validity
Not Before: Mar 5 17:36:31 2024 GMT
Not After : Mar 4 17:41:31 2025 GMT
Subject: CN=3C3C4FE5E2D004F58DCF6C345B6E4DD89178AEA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:79:62:f2:df:5f:6c:4d:1b:80:8e:de:14:
20:7d:f2:06:40:cc:6e:94:4b:d2:9b:4b:d8:b6:bf:
94:aa:df:20:4a:96:7e:b7:74:31:16:30:35:b0:be:
32:ab:62:e9:70:30:c7:08:40:f8:53:2d:f4:ce:ec:
d8:d9:95:ba:fd:18:85:61:a6:f2:10:bc:9d:34:5b:
e4:da:f2:0b:9c:dc:d5:6f:72:31:d6:4a:95:8d:3e:
7d:4d:0d:24:32:61:94:e2:2a:f1:97:2f:bc:ca:3a:
6f:84:e7:57:73:aa:3b:45:93:89:3a:50:7d:d5:68:
aa:1a:87:38:e3:d0:77:9a:65:43:66:71:2c:06:1d:
da:e8:b8:da:23:e6:fd:d9:4a:31:d1:40:8a:99:c2:
8b:0d:52:e0:35:6b:7f:fa:66:5f:e0:7f:71:e6:27:
d4:e4:1f:66:43:94:13:b2:63:29:88:5e:65:c1:f6:
fb:dc:11:7e:e1:db:a0:b6:f4:d4:0c:c4:f0:03:28:
c4:26:f1:2d:5f:22:bc:12:6f:d1:01:2d:d2:ee:eb:
ba:f2:5e:fc:bf:fb:c0:ea:35:72:ee:66:7f:ee:c0:
f5:a1:54:9c:0d:ec:0f:d8:70:d8:8f:9a:8d:d2:0a:
2d:dc:1a:38:b3:4c:b0:fc:af:d6:56:44:37:9d:af:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3C:4F:E5:E2:D0:04:F5:8D:CF:6C:34:5B:6E:4D:D8:91:78:AE:A9
X509v3 Authority Key Identifier:
keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2037333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.82.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:55:19:fd:3c:13:41:dc:82:55:b6:aa:c5:75:c6:47:13:a4:
37:23:f3:d4:7d:e4:8a:63:c5:91:f5:2a:1a:89:96:8f:33:40:
e5:c9:7f:97:ab:01:a7:fa:2e:84:b4:2c:98:f1:d4:30:60:d5:
31:33:e6:78:e5:c0:12:6a:3c:1e:6c:bb:ff:06:88:4f:63:a3:
1d:28:c5:e3:87:1b:cf:28:83:e2:38:bf:01:3a:8d:4a:8c:07:
4b:36:d5:2c:fd:b8:3b:42:fe:a6:ae:7f:04:28:12:7d:25:aa:
ca:72:bb:ad:ed:a2:49:a4:94:1b:3c:82:44:29:0f:79:40:fd:
2e:35:7a:dc:7e:25:12:3b:56:dc:5a:ef:39:86:06:cd:ac:1e:
99:c2:58:0a:43:ac:ad:58:7f:b6:c4:34:d0:de:0e:de:dc:f4:
c9:00:a0:d7:be:cd:a1:93:fe:c8:16:58:ef:f0:cc:80:9b:df:
68:a0:44:54:27:b4:b6:30:30:ec:96:47:1c:e1:3b:57:82:cd:
86:b4:a4:5f:ab:97:83:c1:e9:de:54:72:f0:04:4a:e9:26:a2:
64:fc:39:32:28:30:cc:dc:8c:5e:f8:da:eb:f0:ef:57:91:2e:
a1:9f:05:d5:21:e5:d6:fa:24:3c:5d:fe:a3:43:85:c0:99:63:
77:c1:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:46 2025 by rpki-client