Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
File: 3230302e372e3132382e302f32302d3234203d3e203237373730.roa (raw, json)
Hash identifier: WrwstIanDZkYCwlDku+66jcj297BsKSqmN4MjnAY8P8=
Subject key identifier: 6B:CA:9B:0C:AB:23:A6:B5:5C:C3:B1:25:43:46:4D:47:AA:02:91:20
Certificate issuer: /CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Certificate serial: 469E55ABC08F95B3F65E114CC7939960D6C2B25D
Authority key identifier: 21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
Signing time: Tue 05 Mar 2024 18:02:44 +0000
ROA not before: Tue 05 Mar 2024 17:57:44 +0000
ROA not after: Tue 04 Mar 2025 18:02:44 +0000
asID: 27770
IP address blocks: 200.7.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9e:55:ab:c0:8f:95:b3:f6:5e:11:4c:c7:93:99:60:d6:c2:b2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B9887060F924CDFF24C230D32A91B83A17CD97
Validity
Not Before: Mar 5 17:57:44 2024 GMT
Not After : Mar 4 18:02:44 2025 GMT
Subject: CN=6BCA9B0CAB23A6B55CC3B12543464D47AA029120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:86:37:4a:06:66:72:a0:09:c9:e3:93:0b:
18:b4:27:ba:fb:b7:b1:d6:66:fb:c7:2c:87:45:af:
b0:44:76:7f:16:0d:4e:47:c1:b3:76:d1:60:73:75:
81:bf:98:0e:bf:89:c4:f7:ec:08:a7:9f:dd:b4:1c:
99:36:cc:53:eb:eb:78:51:a8:c4:36:51:83:0a:b3:
47:f7:8e:d5:53:7f:9b:c1:3a:2f:71:d0:2a:51:35:
83:2e:45:77:80:a5:69:ae:fe:4e:27:2c:b5:62:b1:
cb:48:38:1a:8c:f4:2d:4e:9c:1c:f7:5e:6f:eb:4c:
ac:3b:50:72:b0:b4:0b:af:28:11:19:ad:99:bb:d6:
e7:88:8e:d6:06:2b:25:72:40:57:2d:05:a5:82:a9:
43:34:f2:0c:1e:cc:c5:4e:32:6e:7e:8c:bb:41:81:
7e:eb:69:72:57:f9:a3:4b:c5:90:fc:71:7f:0e:75:
a2:19:1a:d4:ea:a4:fa:91:d1:8e:4c:03:31:3b:3d:
26:3e:84:66:5b:2b:2f:f5:3e:1f:01:fb:0f:e8:a2:
41:75:5e:7c:55:30:05:b7:5c:29:c9:11:40:cf:d4:
60:ba:dc:6a:55:36:7f:2a:54:b4:24:7e:35:b6:55:
08:a0:06:da:da:c5:41:2f:ef:7d:f2:5b:29:ce:ad:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CA:9B:0C:AB:23:A6:B5:5C:C3:B1:25:43:46:4D:47:AA:02:91:20
X509v3 Authority Key Identifier:
keyid:21:B9:88:70:60:F9:24:CD:FF:24:C2:30:D3:2A:91:B8:3A:17:CD:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/21B9887060F924CDFF24C230D32A91B83A17CD97.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B9887060F924CDFF24C230D32A91B83A17CD97.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D37CA8CD9578B8516FF33F24764AF1DA2078809308EBF3F30DBF4EF1077D36C/0/3230302e372e3132382e302f32302d3234203d3e203237373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.128.0/20
Signature Algorithm: sha256WithRSAEncryption
41:ee:65:a0:cd:78:87:23:ca:ac:93:67:fe:b5:82:6b:16:58:
f7:42:8b:54:dc:18:74:85:ae:ad:2e:c7:28:1e:ba:54:ff:b5:
54:bb:97:7b:0d:d6:27:16:27:fb:e1:b3:13:8e:be:54:d1:18:
93:5e:ea:da:1d:fa:cd:61:77:40:fb:30:55:df:b4:e4:a1:6e:
08:91:80:ed:87:30:37:fe:47:a5:a4:64:f7:68:5e:e6:c4:32:
78:29:97:54:e6:0d:49:ed:91:de:ad:5c:31:1a:0c:90:64:63:
ae:c2:b7:8e:5f:95:83:bb:38:0e:36:e7:e3:df:bb:14:55:c0:
75:59:4b:f1:f4:da:85:d2:37:10:ab:bd:ce:ea:df:22:98:2f:
0c:a4:5c:14:cb:15:80:53:bd:33:aa:6d:5d:03:d1:d6:0a:2e:
6e:84:cc:8a:1f:77:1a:49:0d:51:3a:58:6a:fd:0d:0f:22:c4:
e3:49:a7:62:86:7d:a6:46:b4:75:ad:62:45:c6:e1:19:ae:45:
a2:64:0c:ea:a1:53:2f:5c:ec:81:22:a0:fb:a5:dc:eb:32:79:
d7:ef:0e:8e:49:22:4a:a6:76:87:b8:b0:2f:f7:78:27:ba:7d:
be:64:8b:54:85:de:eb:ce:dc:78:85:a8:14:84:73:b1:ec:fa:
a1:56:c9:22
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURp5Vq8CPlbP2XhFMx5OZYNbCsl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCOTg4NzA2MEY5MjRDREZGMjRDMjMwRDMyQTkxQjgz
QTE3Q0Q5NzAeFw0yNDAzMDUxNzU3NDRaFw0yNTAzMDQxODAyNDRaMDMxMTAvBgNV
BAMTKDZCQ0E5QjBDQUIyM0E2QjU1Q0MzQjEyNTQzNDY0RDQ3QUEwMjkxMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNIY3SgZmcqAJyeOTCxi0J7r7
t7HWZvvHLIdFr7BEdn8WDU5HwbN20WBzdYG/mA6/icT37Ainn920HJk2zFPr63hR
qMQ2UYMKs0f3jtVTf5vBOi9x0CpRNYMuRXeApWmu/k4nLLVisctIOBqM9C1OnBz3
Xm/rTKw7UHKwtAuvKBEZrZm71ueIjtYGKyVyQFctBaWCqUM08gwezMVOMm5+jLtB
gX7raXJX+aNLxZD8cX8OdaIZGtTqpPqR0Y5MAzE7PSY+hGZbKy/1Ph8B+w/ookF1
XnxVMAW3XCnJEUDP1GC63GpVNn8qVLQkfjW2VQigBtraxUEv733yWynOrc47AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUa8qbDKsjprVcw7ElQ0ZNR6oCkSAwHwYDVR0j
BBgwFoAUIbmIcGD5JM3/JMIw0yqRuDoXzZcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDM3Q0E4Q0Q5NTc4Qjg1MTZGRjMzRjI0NzY0QUYxREEy
MDc4ODA5MzA4RUJGM0YzMERCRjRFRjEwNzdEMzZDLzAvMjFCOTg4NzA2MEY5MjRD
REZGMjRDMjMwRDMyQTkxQjgzQTE3Q0Q5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUI5ODg3MDYwRjkyNENERkYy
NEMyMzBEMzJBOTFCODNBMTdDRDk3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUQzN0NBOENEOTU3OEI4NTE2RkYzM0YyNDc2NEFGMURBMjA3ODgwOTMw
OEVCRjNGMzBEQkY0RUYxMDc3RDM2Qy8wLzMyMzAzMDJlMzcyZTMxMzIzODJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzczNzM3MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIB4AwDQYJ
KoZIhvcNAQELBQADggEBAEHuZaDNeIcjyqyTZ/61gmsWWPdCi1TcGHSFrq0uxyge
ulT/tVS7l3sN1icWJ/vhsxOOvlTRGJNe6tod+s1hd0D7MFXftOShbgiRgO2HMDf+
R6WkZPdoXubEMngpl1TmDUntkd6tXDEaDJBkY67Ct45flYO7OA425+PfuxRVwHVZ
S/H02oXSNxCrvc7q3yKYLwykXBTLFYBTvTOqbV0D0dYKLm6EzIofdxpJDVE6WGr9
DQ8ixONJp2KGfaZGtHWtYkXG4RmuRaJkDOqhUy9c7IEioPul3OsyedfvDo5JIkqm
doe4sC/3eCe6fb5ki1SF3uvO3HiFqBSEc7Hs+qFWySI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:40:16 2025 by rpki-client