Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa
File: 3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa (raw, json)
Hash identifier: 6XOjIUwYTd6KuqX0iC2mUFe//LDcF+RfxwPIoAo/tfQ=
Subject key identifier: D1:76:B7:F7:DA:14:F8:12:81:E4:1E:1A:79:72:63:46:05:AD:D4:3F
Certificate issuer: /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial: 47FBA15F9E988905679407AB66BF073194AC0C8A
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa
Signing time: Wed 11 Sep 2024 14:35:04 +0000
ROA not before: Wed 11 Sep 2024 14:30:04 +0000
ROA not after: Wed 10 Sep 2025 14:35:04 +0000
asID: 11556
IP address blocks: 200.115.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:fb:a1:5f:9e:98:89:05:67:94:07:ab:66:bf:07:31:94:ac:0c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Validity
Not Before: Sep 11 14:30:04 2024 GMT
Not After : Sep 10 14:35:04 2025 GMT
Subject: CN=D176B7F7DA14F81281E41E1A7972634605ADD43F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:bd:5b:0c:37:18:38:3b:33:3b:7f:ce:6b:
73:db:02:3e:eb:f2:10:72:bc:6f:32:d0:a8:74:75:
36:ad:98:b7:cb:ac:65:d4:fd:5a:44:6a:8b:26:65:
14:4f:be:db:b3:c2:b9:5a:c1:f4:e3:92:44:e9:80:
05:70:de:b9:1f:b5:c9:94:9a:92:eb:9d:ef:6a:48:
30:b3:29:ae:34:f4:27:54:cb:df:37:38:f3:8e:27:
d0:9e:69:4b:eb:a3:f4:3e:90:2c:4e:e6:ab:4a:52:
2a:c4:4e:a5:7a:f4:6c:b8:ea:d3:e2:e1:51:a6:0c:
9c:af:55:4f:ec:c0:84:1f:b6:12:1d:88:0b:95:fc:
d8:eb:9f:ca:2b:cc:94:f7:91:44:92:2e:5d:22:57:
41:f7:36:5b:f5:f2:8d:3d:89:42:1e:26:22:67:b1:
62:44:fe:f8:34:d7:8c:01:2a:56:a0:c8:f0:c9:cb:
ab:21:fa:7a:54:93:c2:9f:ba:e4:1b:db:c2:66:59:
3f:35:2f:06:ac:2f:cf:74:24:33:a5:b7:2e:4c:72:
7b:58:b5:df:d2:e2:43:77:9a:07:05:63:61:26:6f:
98:c9:1e:df:44:36:c0:21:3e:4b:ea:c1:d3:f4:e3:
55:c3:7e:df:99:f6:4f:65:31:d5:2d:f7:a6:e0:03:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:76:B7:F7:DA:14:F8:12:81:E4:1E:1A:79:72:63:46:05:AD:D4:3F
X509v3 Authority Key Identifier:
keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.164.0/24
Signature Algorithm: sha256WithRSAEncryption
53:db:31:72:16:f5:9f:a1:80:68:2a:83:2e:88:2a:08:b6:d6:
81:04:75:ba:db:0f:5b:a9:22:bf:fd:b7:a4:47:93:04:c5:75:
c5:0d:55:58:b1:83:67:e2:a6:a4:05:b2:d8:3e:d5:c8:d0:f2:
c5:14:92:e9:57:1a:e4:07:3c:2f:3f:03:0e:30:a7:8f:be:66:
b3:ba:97:8a:c9:c5:47:05:30:77:28:ce:31:a8:3b:9e:22:dd:
29:ba:b3:2f:d6:46:7d:54:23:1d:a7:19:ef:37:4d:0b:1a:69:
9e:e9:c9:bf:a1:8b:b2:4d:d2:b6:68:eb:0c:d3:56:ad:fd:bb:
41:48:a5:36:5a:9c:1d:0a:26:07:92:6e:41:8a:a3:6d:9f:1d:
ba:a9:9c:2c:3e:90:58:89:f2:12:07:f6:74:4f:d7:0c:5d:cf:
05:99:77:51:dd:7d:05:e4:87:4b:2c:20:11:6f:90:78:35:4b:
dd:67:48:b6:17:b1:1e:f2:94:d3:43:06:7c:9b:61:f6:20:6e:
cc:c7:2d:fb:12:a1:e9:4a:39:6f:a6:5d:ed:40:7f:65:1f:ba:
f4:8b:83:ac:73:08:a4:9f:20:8d:81:85:8c:ed:30:23:ca:77:
48:e4:2e:04:94:a4:a5:a0:3f:2c:b5:60:22:84:d8:ad:8c:f4:
1b:29:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:52:55 2025 by rpki-client