Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa
File: 3230302e35342e3132382e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier: 5F7FZc5qlFGq3ga2kFmr6Dyuck3788Pg7OImgckaJsg=
Subject key identifier: 37:DB:DC:79:C9:FD:2A:6E:AD:52:89:67:FC:A9:B6:14:9D:5C:73:46
Certificate issuer: /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial: 3BB74FD44FE689CE3F4297F938968D9B74E17813
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa
Signing time: Tue 05 Mar 2024 17:51:48 +0000
ROA not before: Tue 05 Mar 2024 17:46:48 +0000
ROA not after: Tue 04 Mar 2025 17:51:48 +0000
asID: 16629
IP address blocks: 200.54.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b7:4f:d4:4f:e6:89:ce:3f:42:97:f9:38:96:8d:9b:74:e1:78:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Validity
Not Before: Mar 5 17:46:48 2024 GMT
Not After : Mar 4 17:51:48 2025 GMT
Subject: CN=37DBDC79C9FD2A6EAD528967FCA9B6149D5C7346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:dd:98:23:9b:84:d8:d3:67:09:82:68:53:
9a:73:f6:40:a5:a3:cb:8d:00:6e:b6:1d:ac:0b:0d:
e6:40:58:15:37:bf:48:e6:5c:16:19:14:8b:29:dc:
0a:78:ae:0f:2f:ce:c3:a2:cf:df:63:54:60:eb:3e:
94:d5:fb:71:f2:6f:1e:13:a9:c5:11:82:77:51:56:
1c:04:0c:fc:22:99:ca:14:c0:2e:f6:47:b9:a3:55:
b9:ca:b1:4d:19:ce:93:fc:e8:a4:ba:a0:ba:04:f1:
8f:79:2c:b3:23:ac:1a:bd:ec:d2:91:56:22:d3:93:
12:f9:9b:d3:fd:ac:6f:b9:0a:8c:36:a6:90:f8:59:
7d:a1:2a:44:8f:14:1f:24:8a:56:21:4e:ee:2d:a1:
6c:89:75:b3:d5:f4:f8:84:1a:33:9a:b5:ec:4d:9d:
e7:52:96:e0:d4:cf:35:62:c5:83:9a:c5:d4:df:cb:
b8:d0:e1:28:9e:58:41:89:12:42:b8:67:4d:82:90:
c3:03:a7:50:cb:de:63:4f:c5:19:b9:3e:d5:8e:78:
e5:11:21:d1:cc:4e:d0:c1:df:9b:c5:f9:e4:f4:52:
a5:db:27:83:82:15:2e:ac:f0:76:75:e4:38:ed:a9:
9c:b1:5b:9c:d4:55:70:1b:f8:79:ed:2a:d6:86:71:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:DC:79:C9:FD:2A:6E:AD:52:89:67:FC:A9:B6:14:9D:5C:73:46
X509v3 Authority Key Identifier:
keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.54.128.0/20
Signature Algorithm: sha256WithRSAEncryption
31:01:36:02:a5:30:ee:a7:34:b3:ae:a6:3a:58:f4:5c:95:f8:
68:7e:3d:d3:00:2d:c1:cf:13:a0:8d:32:4d:8a:a6:36:99:73:
51:86:4f:50:ba:65:a8:3d:f9:2c:9f:52:79:0b:38:20:22:cc:
17:28:97:e2:79:dc:15:fd:f9:8e:2f:9c:56:15:8d:d3:c5:17:
c7:e7:bc:4a:90:38:7c:f2:a6:14:4d:0c:e2:e9:4a:30:e7:7a:
f4:07:e9:71:97:0b:75:75:7b:fe:cb:1f:b7:41:ee:a3:23:2d:
18:3c:ed:b4:71:e4:1f:db:a0:69:6b:7b:d5:39:d6:96:67:36:
4a:39:bd:11:da:35:89:54:a4:95:ca:cc:88:e9:13:72:d1:48:
e8:dc:a0:05:08:59:76:05:07:30:d4:65:b9:16:3e:c9:29:fb:
cf:70:f0:b3:1f:a1:8d:87:2d:8c:7c:0f:57:d5:e9:3f:a0:37:
5f:46:71:60:da:b7:bb:4b:ef:93:6a:7e:b8:31:cd:b0:1f:2c:
60:53:82:32:db:67:ce:c8:07:31:be:8f:45:c1:f9:59:6e:9a:
4c:d4:85:5e:19:f6:48:9c:65:10:91:c8:c1:d3:1b:67:3a:92:
a2:9d:39:0d:d3:69:1c:6b:27:49:55:88:ef:7f:b1:f3:da:f2:
08:f4:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:53:34 2025 by rpki-client