Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa
File: 3230302e38392e32332e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier: WD7IWK0zRp0HSWZehhH/9iQGZxnqtm9LGdwvzSBLcaw=
Subject key identifier: 90:93:66:78:8A:C2:94:BB:EB:62:83:0F:C4:96:C3:92:F9:75:C3:31
Certificate issuer: /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial: 76C7E73435CCA942B3F5BC47977E1363FB57F8F6
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa
Signing time: Tue 05 Mar 2024 18:09:32 +0000
ROA not before: Tue 05 Mar 2024 18:04:32 +0000
ROA not after: Tue 04 Mar 2025 18:09:32 +0000
asID: 12684
IP address blocks: 200.89.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c7:e7:34:35:cc:a9:42:b3:f5:bc:47:97:7e:13:63:fb:57:f8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Validity
Not Before: Mar 5 18:04:32 2024 GMT
Not After : Mar 4 18:09:32 2025 GMT
Subject: CN=909366788AC294BBEB62830FC496C392F975C331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:05:97:0c:b4:6d:30:19:6d:3f:28:28:20:b5:
e8:dc:f7:6d:37:6e:0d:0c:9e:9f:5f:63:f9:37:d8:
91:fb:bc:d7:56:f5:e7:bf:23:9a:06:f0:43:70:8a:
b5:ee:be:98:9d:ea:91:26:f3:84:a8:53:46:6d:ad:
43:15:f3:3e:de:85:1a:8b:84:a8:e4:00:34:7e:b4:
0c:73:bb:c5:45:38:e3:d1:ea:a5:95:97:83:e9:25:
d5:93:6a:09:b1:66:73:7b:e3:40:0d:6e:5e:d0:87:
09:37:ec:d2:f1:7b:60:74:e8:7e:7d:57:d5:ad:a5:
69:98:a8:eb:c8:45:e7:e0:95:3e:ed:30:5b:54:1d:
5f:89:80:e6:33:a3:c9:2e:c0:d3:93:c1:13:0f:b0:
00:53:3b:ed:e0:f1:eb:21:29:f4:58:44:8a:4d:ba:
92:ac:e9:80:70:64:e7:f3:b5:48:c4:62:d0:f0:c5:
d4:6c:19:3c:88:50:24:3e:e9:09:61:9e:e8:cb:f9:
19:67:f2:0f:4c:51:43:cd:4c:95:24:82:99:ab:05:
97:41:1f:6a:93:63:8f:8e:b4:7e:65:de:97:66:a1:
f3:f4:f1:5a:5e:03:cf:d6:55:a1:0f:1b:b7:97:ab:
f9:9c:e1:d1:3a:c7:6e:c1:f5:c8:76:8d:cc:f9:5c:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:66:78:8A:C2:94:BB:EB:62:83:0F:C4:96:C3:92:F9:75:C3:31
X509v3 Authority Key Identifier:
keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32332e302f32342d3234203d3e203132363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.89.23.0/24
Signature Algorithm: sha256WithRSAEncryption
46:47:7f:ba:ce:e6:de:16:e4:cb:65:e7:6d:61:d8:33:29:e5:
64:41:e1:9e:4f:11:5a:81:31:93:de:21:53:72:7b:2a:53:4d:
e0:0b:fe:f2:27:17:57:a9:0b:eb:d7:67:e6:28:4a:f0:05:35:
d6:8d:f0:14:04:03:83:e9:3a:d7:38:46:c8:16:f9:45:b9:89:
81:3d:10:d3:94:17:6a:52:10:68:9b:bf:04:c8:0d:ec:b9:b4:
ce:1a:75:35:e3:f9:d5:e5:4a:ee:dd:43:12:06:94:88:a0:ba:
be:eb:17:57:7d:19:f7:3a:84:e0:f3:43:b5:fc:6c:9a:82:27:
f8:2f:ed:d1:aa:54:29:23:54:41:b6:99:d2:64:ea:0d:80:41:
7e:52:01:78:e5:2a:f0:91:00:0a:a3:82:e8:68:0f:60:91:07:
c0:41:7d:17:cb:89:44:a7:20:a8:82:ad:d5:e0:b0:d6:cb:1b:
bf:c1:52:3c:76:52:de:b4:10:c5:03:71:18:b7:60:a6:3d:84:
1d:4d:ce:3c:ba:d2:dc:1d:bf:e4:d4:4c:86:db:34:7a:b5:2e:
0b:26:84:bf:81:3b:f8:44:23:dd:d1:10:fa:69:56:9c:56:8a:
9e:d2:22:98:ac:35:d6:31:78:3b:e1:c0:68:75:05:7f:e7:2a:
02:01:be:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:25:17 2025 by rpki-client