Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e39332e302e302f31372d3234203d3e2038303438.roa
File: 3230302e39332e302e302f31372d3234203d3e2038303438.roa (raw, json)
Hash identifier: M4rJ8QKxBdvz+oGvQxS3Kdcbmt1vrK7oNDmDKfloYYM=
Subject key identifier: 9A:6A:45:32:54:CC:6E:53:0C:30:2D:A8:C0:30:83:DE:4F:F0:66:DA
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 50D1A877EDE846D6359BBDC6031BE9F5FF82F950
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e39332e302e302f31372d3234203d3e2038303438.roa
Signing time: Tue 05 Mar 2024 18:15:06 +0000
ROA not before: Tue 05 Mar 2024 18:10:06 +0000
ROA not after: Tue 04 Mar 2025 18:15:06 +0000
asID: 8048
IP address blocks: 200.93.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d1:a8:77:ed:e8:46:d6:35:9b:bd:c6:03:1b:e9:f5:ff:82:f9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Mar 5 18:10:06 2024 GMT
Not After : Mar 4 18:15:06 2025 GMT
Subject: CN=9A6A453254CC6E530C302DA8C03083DE4FF066DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:ef:0f:aa:c3:bb:d4:bb:f1:2d:57:bf:4c:
19:39:9a:99:e4:56:b5:87:4a:0e:ae:0a:4a:5a:17:
d6:29:b5:a2:b4:64:15:9f:1d:81:78:55:1c:ef:6e:
2c:30:86:63:bb:9a:c8:ea:f2:bf:7d:7a:72:0a:4e:
0b:e6:83:53:cd:77:05:e1:a5:1f:1e:ce:18:e4:b5:
06:56:6a:b7:3a:20:4c:b5:59:3d:c2:14:46:49:0f:
40:10:a2:91:91:1e:63:34:6b:0e:01:bf:e1:14:29:
4d:9a:72:3b:e4:87:37:cd:c6:9f:43:df:9c:29:87:
4f:eb:d8:c7:19:57:1a:e8:fd:9d:af:d7:b9:3d:63:
60:51:87:96:16:17:6d:4e:46:12:e4:70:fa:5f:b3:
c4:d4:06:84:62:cc:99:d9:e2:49:ca:fa:be:fe:4f:
f9:01:2a:2f:f6:a1:1a:34:21:f1:35:ff:9c:23:14:
2b:01:ee:55:75:74:0a:ff:b1:2d:36:58:49:ed:2d:
b5:2e:8a:e8:e0:04:6e:f2:a5:d8:a9:cb:bc:f2:ec:
bc:78:cf:c5:38:ba:f8:4c:fb:b1:8c:c5:75:e9:94:
bf:0e:06:d7:e2:80:50:4b:8b:97:a5:9b:fb:86:f2:
88:bc:93:24:3a:15:e8:71:5c:ab:aa:f8:45:a9:6f:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6A:45:32:54:CC:6E:53:0C:30:2D:A8:C0:30:83:DE:4F:F0:66:DA
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e39332e302e302f31372d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.93.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6b:dc:6b:ae:4b:45:b3:e6:25:45:d3:89:5e:e0:bf:83:a8:ae:
3d:be:35:dc:d0:1b:4d:79:ee:4f:9b:4f:0f:a4:9c:44:b6:5e:
98:57:8c:30:8a:a0:fd:0a:c0:78:f1:00:fc:a8:d3:95:90:00:
eb:5a:e2:95:e3:0d:40:6d:1e:6d:bf:1b:fb:66:5f:98:20:00:
4e:cd:8c:2f:04:4c:58:0f:2c:23:14:6a:15:c6:01:0a:bd:f2:
eb:b2:58:4f:15:bb:aa:bb:c0:5e:2d:7d:8d:e8:e3:11:36:a2:
55:6f:6c:6b:3e:a1:9a:24:e2:67:e7:1a:d9:bc:69:f0:b9:30:
cf:4e:7e:a1:6e:d5:e0:a1:ea:7d:7b:f8:29:96:27:3a:ce:fd:
c4:50:97:e0:b8:fa:0d:1f:22:74:ff:f8:96:27:3e:df:6a:0e:
c2:f9:8b:ee:68:04:5c:5d:dc:fc:6d:6c:86:e7:be:2c:17:64:
5f:dc:90:a3:cc:31:83:bd:ff:ba:fc:d1:a6:7e:18:b7:df:ba:
e4:f2:27:55:79:c4:fb:60:9b:42:03:aa:eb:65:9a:e1:9f:d1:
ba:11:54:53:35:a2:a6:63:bc:fe:26:96:f0:18:6a:63:09:e5:
1f:fd:67:2b:a3:a3:ff:4a:07:a4:d7:c0:46:1f:b6:23:c1:2a:
ee:c7:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:08:27 2025 by rpki-client