Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34392e302f32342d3234203d3e203233323433.roa
File: 3230302e31322e34392e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier: Bqu9aNHZ+V7HLfeG8XrasJZAYGC8I1ULFpJi7sZ7vQQ=
Subject key identifier: 1F:46:72:C1:17:5E:97:89:97:9F:CE:A1:E6:DC:2B:8B:D4:17:1B:67
Certificate issuer: /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial: 4A6BA2C40583FBAB2B5B4BD6FEA7884FF5F2EEB1
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34392e302f32342d3234203d3e203233323433.roa
Signing time: Tue 05 Mar 2024 17:56:05 +0000
ROA not before: Tue 05 Mar 2024 17:51:05 +0000
ROA not after: Tue 04 Mar 2025 17:56:05 +0000
asID: 23243
IP address blocks: 200.12.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:6b:a2:c4:05:83:fb:ab:2b:5b:4b:d6:fe:a7:88:4f:f5:f2:ee:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Validity
Not Before: Mar 5 17:51:05 2024 GMT
Not After : Mar 4 17:56:05 2025 GMT
Subject: CN=1F4672C1175E9789979FCEA1E6DC2B8BD4171B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:73:3e:8e:b8:ca:86:12:5d:ea:75:87:cc:
7b:2a:13:1d:4a:87:d8:d9:06:d8:cd:ad:0e:10:63:
0d:3a:30:02:b4:26:2b:da:de:f8:cd:28:23:d3:bd:
4b:23:57:98:10:5b:f7:c9:3d:fc:2d:ad:a8:ae:9b:
8a:be:e8:06:78:87:97:e6:3d:51:7c:cb:e1:fe:36:
ba:f9:21:0c:5d:63:ce:44:2d:17:1a:bd:fc:85:15:
bc:ca:9c:cd:29:80:98:e4:20:af:a5:ba:4f:69:7c:
fb:99:a7:1e:f4:54:96:07:ca:db:ae:81:fb:93:5f:
7d:45:1b:70:b6:fd:e3:7c:6d:f0:ed:db:aa:2e:99:
51:54:22:f7:3d:3a:bf:ab:7e:3a:fd:b4:c7:f7:eb:
24:c6:c9:33:31:91:a9:37:9c:ba:0a:71:f1:91:ab:
30:c2:53:76:70:3b:ab:fa:d5:0d:75:1b:82:a7:c1:
c1:4d:b3:19:52:bb:a2:fc:9a:6a:e2:eb:c2:14:53:
f8:94:56:ef:16:ea:e5:4e:bc:1c:b6:ae:a2:12:df:
80:40:18:c2:fc:5c:42:a1:e4:c3:50:b5:02:34:9f:
17:e0:5b:b5:4c:45:2d:af:e5:38:67:93:70:38:dc:
2a:c0:ad:f0:8b:c2:8d:1b:9c:63:be:77:d7:a6:bf:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:72:C1:17:5E:97:89:97:9F:CE:A1:E6:DC:2B:8B:D4:17:1B:67
X509v3 Authority Key Identifier:
keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34392e302f32342d3234203d3e203233323433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.49.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b9:06:50:b6:9b:0c:60:8f:85:8d:7f:d6:24:ce:63:02:71:
50:13:69:88:83:13:ff:b3:9c:89:f7:d6:fc:a6:64:ab:65:26:
9f:f4:04:aa:c1:06:d0:db:7d:b8:e1:25:3c:29:3e:50:df:1c:
ff:b3:53:28:3a:25:fc:67:be:ab:43:c4:37:a2:e6:b6:ad:28:
fc:b5:d1:76:5e:c1:ee:c3:57:04:2a:4f:d2:28:3d:e0:64:f7:
45:46:9a:74:b6:48:d5:40:8d:73:b9:6d:f1:05:50:04:66:73:
00:dd:94:20:55:7c:1e:0f:f3:47:b7:98:f0:42:60:dc:aa:f5:
cc:80:f9:81:8f:ac:45:eb:10:a6:f4:33:d9:ff:29:88:cc:5a:
b3:ca:27:6f:b7:ae:e3:bc:33:91:ce:6e:82:bf:ee:f6:b7:5e:
ad:fc:e4:3f:46:07:44:ff:6f:f6:c4:62:34:b2:d4:3d:59:0d:
e1:eb:13:b5:9b:99:ad:ca:8d:47:9d:99:9c:c3:ca:9d:e4:81:
07:82:0a:34:90:08:c0:6f:22:c6:81:95:91:46:e7:91:05:d2:
a5:6a:86:b7:f4:bc:57:d3:65:15:30:f4:6a:ee:49:fd:c0:db:
58:f4:67:2b:48:8d:3e:8c:ec:4e:86:25:27:ef:a2:be:9d:b0:
e4:53:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:49:57 2025 by rpki-client