Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa
File: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (raw, json)
Hash identifier: wjm5TMgOquI9Dw4NEx25TNUG1OE4Gt/fpgF15gQ+rBk=
Subject key identifier: 44:27:CA:31:FA:78:7B:0D:53:76:55:E3:41:08:21:71:F5:97:AD:AF
Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
Certificate serial: 4E520B935DAD67E1072E9263996A6637194938F4
Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa
Signing time: Tue 05 Mar 2024 17:57:05 +0000
ROA not before: Tue 05 Mar 2024 17:52:05 +0000
ROA not after: Tue 04 Mar 2025 17:57:05 +0000
asID: 270078
IP address blocks: 200.71.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:52:0b:93:5d:ad:67:e1:07:2e:92:63:99:6a:66:37:19:49:38:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
Validity
Not Before: Mar 5 17:52:05 2024 GMT
Not After : Mar 4 17:57:05 2025 GMT
Subject: CN=4427CA31FA787B0D537655E341082171F597ADAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:cf:00:06:32:6d:42:9b:d7:b0:87:fa:8f:
66:01:0c:2b:8c:8b:2a:0d:a5:27:b7:af:61:c3:a3:
87:5a:75:00:83:95:6a:62:2a:f7:95:db:f5:ba:82:
64:09:8e:0f:cd:36:70:9f:4c:ab:41:3e:5e:12:52:
a1:12:d2:3a:fd:06:6b:f9:94:8a:d4:f3:ca:f0:72:
a5:c4:43:16:c1:20:2d:b8:d1:74:37:39:4d:c7:d1:
1e:1b:7f:93:a9:88:0c:82:f4:02:a8:08:15:34:6b:
6b:27:3b:3e:d2:93:e3:bb:5e:b7:ea:78:6b:d8:31:
40:04:ee:20:ce:86:ad:f8:01:db:f5:c2:3f:99:7e:
a3:2e:1b:4c:79:7b:b5:b4:5c:64:60:e2:24:45:b3:
5b:98:6c:56:92:1b:e5:bd:78:40:88:a4:80:e6:16:
f9:2b:1b:bf:59:a4:5f:b1:34:27:e2:80:e7:b2:01:
b2:7d:a9:af:77:6c:46:80:cf:fa:e0:c4:d5:88:de:
60:5d:fd:5f:bd:99:fa:f0:d6:36:35:54:03:2f:57:
94:2f:27:2b:d2:92:cf:51:be:af:83:59:c3:96:b0:
cf:84:67:49:17:b8:61:c1:e9:eb:36:75:ac:9c:fb:
62:9a:64:6b:bc:74:58:65:c4:24:fd:9d:f7:12:40:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:27:CA:31:FA:78:7B:0D:53:76:55:E3:41:08:21:71:F5:97:AD:AF
X509v3 Authority Key Identifier:
keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.80.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:e6:11:1c:63:fe:3f:65:09:59:31:92:31:3b:9d:d5:b9:48:
ff:48:a2:79:d7:e6:e8:03:14:70:cb:f9:8b:3b:99:0b:39:4b:
b8:65:de:74:7f:30:aa:ec:c0:4a:a5:4f:f1:c4:f4:0a:6c:e7:
8a:31:d5:46:01:47:aa:ae:6e:30:24:77:3e:00:0f:9e:fd:dc:
91:dc:14:86:cb:3d:d0:97:74:ea:4c:90:2c:71:17:81:bb:85:
15:4b:59:52:0d:70:7c:20:a1:82:72:f0:b6:0a:69:58:eb:35:
1c:84:12:c1:5f:16:5f:7b:eb:21:80:f0:38:e2:55:3b:b5:70:
cf:44:39:7d:d4:46:ca:d9:d9:77:9b:ab:a6:df:7a:f4:a7:d4:
cd:2e:fb:20:d7:cf:4d:98:d4:39:a9:be:4d:64:16:a5:37:f8:
b2:0c:7f:a3:8d:c9:cd:a6:d1:7d:24:22:04:90:02:b6:7b:0f:
0e:7b:cb:67:69:78:c7:69:f2:48:8e:ef:e3:98:38:27:ff:f2:
85:76:8c:ce:8f:bd:1c:7e:49:0b:43:59:0a:d4:3f:e5:51:f3:
36:4f:e7:9f:9d:74:10:b0:c8:fb:2c:05:56:d1:2c:1a:12:91:
e3:f0:31:b6:91:c7:89:0d:20:40:db:72:6c:17:c4:6d:3b:3a:
a4:ff:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:14:34 2025 by rpki-client