Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e302e302f32302d3234203d3e203138373334.roa
File: 3230302e35372e302e302f32302d3234203d3e203138373334.roa (raw, json)
Hash identifier: xOLXo6Vpkwk7ziC4jZ6jKrcjn4i35aD9qKhWaLfN8do=
Subject key identifier: 5B:C5:8A:BE:71:87:F3:91:4E:02:8D:9D:B8:9B:CB:E1:E9:ED:3D:FC
Certificate issuer: /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial: 0DF360221BFAA13417EDFA0EBCD0A5F3BC67DB4A
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e302e302f32302d3234203d3e203138373334.roa
Signing time: Tue 05 Mar 2024 17:50:41 +0000
ROA not before: Tue 05 Mar 2024 17:45:41 +0000
ROA not after: Tue 04 Mar 2025 17:50:41 +0000
asID: 18734
IP address blocks: 200.57.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f3:60:22:1b:fa:a1:34:17:ed:fa:0e:bc:d0:a5:f3:bc:67:db:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Validity
Not Before: Mar 5 17:45:41 2024 GMT
Not After : Mar 4 17:50:41 2025 GMT
Subject: CN=5BC58ABE7187F3914E028D9DB89BCBE1E9ED3DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:f4:e7:17:b7:ed:4c:1e:fe:e5:3a:03:f9:
3b:c3:fc:f3:ea:41:58:0d:88:ea:e4:e4:c2:c6:d6:
11:f9:3e:0c:43:4a:ef:77:cd:44:6b:fd:51:92:39:
a6:b6:02:da:38:ec:f9:58:a6:74:6c:f8:45:51:14:
f5:cc:1f:51:d7:1b:62:8d:cc:12:1f:0e:d5:e2:60:
e7:2e:72:9f:60:2b:3d:c3:cd:af:cd:5b:ff:71:c7:
97:2e:04:d7:5f:1b:10:01:83:92:67:36:02:d4:06:
0a:8e:56:36:d0:8d:24:f7:92:18:84:b6:1f:0a:78:
04:2a:4b:a7:40:0a:c0:b0:ff:91:42:ce:9a:07:1d:
93:f1:6a:91:d9:8b:e8:13:8e:10:c3:89:8c:59:db:
65:1d:ac:11:4a:c3:35:11:81:6f:87:c9:de:3a:d3:
04:54:e4:59:dc:38:13:49:6b:d1:3e:5a:20:30:d2:
8c:3b:ef:9f:2e:fc:4f:40:4e:36:b8:16:52:b6:30:
84:04:aa:92:31:3e:8d:ab:ce:47:9f:d1:bf:99:2f:
b9:dc:c7:08:c9:32:6f:80:2b:79:19:6b:c6:ba:4f:
14:85:b3:43:62:10:ba:25:9d:51:cf:68:f7:ee:93:
ae:4b:10:55:71:d6:ff:8e:a0:19:58:b8:f1:30:68:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:8A:BE:71:87:F3:91:4E:02:8D:9D:B8:9B:CB:E1:E9:ED:3D:FC
X509v3 Authority Key Identifier:
keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e302e302f32302d3234203d3e203138373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.57.0.0/20
Signature Algorithm: sha256WithRSAEncryption
19:ee:a4:bc:61:41:dd:81:a5:48:84:a5:c9:60:f6:9b:cc:bc:
58:3e:51:64:b6:c4:73:54:f5:38:78:cf:54:b6:c1:a0:ac:8a:
4d:e5:a7:7b:34:51:ff:b1:c2:03:70:60:d8:47:e1:0f:33:1f:
b8:17:d3:78:f8:96:b3:b5:33:09:c1:c5:46:c6:e6:0a:36:4b:
38:2f:ff:51:1f:a6:9e:b4:85:3b:e3:16:c0:66:26:34:29:12:
b8:4c:c5:ec:25:1a:aa:d6:87:45:cf:ca:29:4b:e1:04:d5:fb:
f0:f0:04:f7:bb:d2:c8:af:62:4f:69:5f:82:42:1f:7f:41:ce:
d9:fe:83:75:dd:08:8a:d4:b9:f9:da:78:76:33:0e:fa:43:76:
d2:9d:10:f3:b2:70:bd:35:cb:4d:d8:40:1d:82:e5:e0:7e:5a:
76:f9:9a:63:f9:00:e2:7a:16:8e:e0:7d:c4:19:84:f3:bb:9e:
f6:78:d2:7f:8c:29:88:82:4a:ec:4d:e8:6e:c3:a6:ce:a1:e8:
c4:f2:06:31:50:19:cb:dc:b2:f9:e0:00:63:d6:f1:15:03:f6:
41:41:e1:01:c0:f5:8c:1e:19:82:78:ee:80:3b:ba:9f:ff:ff:
1c:c1:91:58:3e:df:ec:8b:b2:26:a2:3a:81:af:69:41:7a:e9:
a6:a0:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:19:04 2025 by rpki-client