Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32322d3234203d3e20323730303735.roa
File: 3230302e31302e32382e302f32322d3234203d3e20323730303735.roa (raw, json)
Hash identifier: QkQPrX7uif/F8/HdjykdiTQFRKsJ5H8fNPXsNMhkWO4=
Subject key identifier: D4:19:5C:36:0C:15:CB:81:64:7C:58:B2:5D:63:AE:5F:95:21:F9:92
Certificate issuer: /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial: 5289DA8BD1803A1798FFF2789D1AD1A5A84B9BEF
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32322d3234203d3e20323730303735.roa
Signing time: Tue 05 Mar 2024 17:46:55 +0000
ROA not before: Tue 05 Mar 2024 17:41:55 +0000
ROA not after: Tue 04 Mar 2025 17:46:55 +0000
asID: 270075
IP address blocks: 200.10.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:89:da:8b:d1:80:3a:17:98:ff:f2:78:9d:1a:d1:a5:a8:4b:9b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Validity
Not Before: Mar 5 17:41:55 2024 GMT
Not After : Mar 4 17:46:55 2025 GMT
Subject: CN=D4195C360C15CB81647C58B25D63AE5F9521F992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:f0:b7:05:f7:61:dc:49:49:1e:e7:48:8d:
7b:bf:db:69:ad:7f:b0:55:e0:9e:6e:ef:2c:cd:3b:
87:e1:9b:53:23:c7:39:e4:0b:f6:7e:f5:c0:4b:0d:
48:5e:be:7d:11:d6:30:f9:80:50:9e:0b:b7:ef:ca:
74:0f:2c:1a:0a:7c:49:fa:a6:87:a7:c9:e7:75:9b:
b0:5a:72:d5:43:24:67:3c:4b:cf:10:b7:82:e8:fe:
97:c0:05:32:fa:61:71:d6:37:79:a2:f7:30:32:cb:
c6:07:a4:74:91:5d:4c:1b:a4:d5:74:dc:66:b8:cb:
88:4a:21:6b:b0:e1:a9:8d:2f:52:1f:e6:cb:9c:04:
90:fd:98:ca:c2:cf:87:85:73:4c:65:78:13:a9:88:
4f:67:87:5b:56:61:49:84:d6:93:90:de:19:b1:e3:
5d:05:2a:64:e6:90:42:28:71:b4:ae:7d:19:8a:ab:
b6:51:f2:dc:e5:cd:09:31:d1:a7:93:77:f4:d9:75:
6d:46:0b:08:c8:bb:ad:e6:ed:2d:4d:d5:91:5a:ea:
cf:1f:d7:7c:86:43:1f:b1:93:70:c7:bb:9e:92:c3:
86:ff:77:4c:12:33:23:4e:73:70:56:ce:19:fa:04:
f6:f5:da:60:00:81:34:cc:91:fb:42:34:18:dc:78:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:19:5C:36:0C:15:CB:81:64:7C:58:B2:5D:63:AE:5F:95:21:F9:92
X509v3 Authority Key Identifier:
keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32322d3234203d3e20323730303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.28.0/22
Signature Algorithm: sha256WithRSAEncryption
84:34:c3:86:c3:48:48:23:cb:71:b1:8b:27:1c:9e:a2:c6:cf:
52:2e:d4:65:f8:02:39:28:b0:d9:fd:46:19:50:7f:98:e9:4d:
a9:77:09:61:cb:9f:52:ce:d0:25:bd:61:72:7f:0a:44:dc:af:
64:fe:8d:72:9b:74:11:00:26:8a:be:99:fe:8f:29:b9:da:93:
99:68:df:df:70:37:93:21:7f:92:88:32:b2:4c:49:77:4a:db:
5b:d7:72:c3:26:33:33:64:c2:09:b0:8b:89:b1:cc:42:68:0d:
61:78:dd:2d:73:9a:5d:67:d0:77:62:cd:cd:7a:fb:a5:db:f9:
66:1c:12:1f:4c:80:63:2f:4f:bc:72:72:ac:0e:0c:23:da:d2:
4e:2b:1f:de:53:3d:9b:60:65:59:54:f8:a8:10:b5:73:e3:0d:
08:ce:b5:53:68:a2:67:91:84:23:34:a8:83:7b:19:c2:98:fd:
a2:49:74:a6:72:a4:61:66:c5:21:56:2e:aa:cd:bf:98:6d:1d:
a3:40:5d:70:38:dd:46:0d:5f:4f:69:9a:ab:f8:a2:f7:66:a9:
fb:e5:93:6f:e5:ad:77:c0:4d:33:c6:ff:8e:91:42:b0:47:4a:
fa:bc:8f:93:df:64:7a:99:e8:b5:95:e1:b3:47:b9:4b:9f:58:
ec:83:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:47 2025 by rpki-client