Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e322e302f32332d3234203d3e203237393537.roa
File: 3230302e332e322e302f32332d3234203d3e203237393537.roa (raw, json)
Hash identifier: gyej5wB52Sq9rPIaGKAyZewYS6hziJ94D5cvcmpTBV4=
Subject key identifier: 3A:60:33:47:95:04:8F:FC:50:3E:98:41:5C:36:71:39:A1:1D:7E:2E
Certificate issuer: /CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
Certificate serial: 2C0397946BBDD5F99FB6CAC34FC8DCC47D9D0D3E
Authority key identifier: 50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e322e302f32332d3234203d3e203237393537.roa
Signing time: Tue 05 Mar 2024 18:01:20 +0000
ROA not before: Tue 05 Mar 2024 17:56:20 +0000
ROA not after: Tue 04 Mar 2025 18:01:20 +0000
asID: 27957
IP address blocks: 200.3.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:03:97:94:6b:bd:d5:f9:9f:b6:ca:c3:4f:c8:dc:c4:7d:9d:0d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
Validity
Not Before: Mar 5 17:56:20 2024 GMT
Not After : Mar 4 18:01:20 2025 GMT
Subject: CN=3A60334795048FFC503E98415C367139A11D7E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:ae:de:b7:51:72:f8:ce:27:26:2b:bc:96:
43:2f:88:52:2f:0c:b5:df:a9:25:20:ef:66:81:35:
65:d9:ba:01:66:58:66:6b:c1:8e:b7:60:62:31:c9:
7b:5a:ab:2f:97:1d:1b:ea:d1:b3:1b:41:b6:66:88:
42:16:90:8d:bb:2e:35:a3:74:6d:8f:c6:7f:f9:7b:
52:5d:40:9e:87:3b:eb:11:e4:8e:14:cf:b3:c7:9a:
06:7c:b7:57:ce:5c:7c:a6:01:59:1e:a3:5c:46:2a:
01:44:14:fc:03:7f:9d:a0:28:b9:72:8d:c8:6d:38:
8c:40:2e:78:59:89:89:cc:13:1e:8a:02:bd:18:ee:
b7:f2:02:65:5f:03:f5:d1:a4:54:40:3f:4b:78:78:
61:7d:ad:4b:4b:aa:b1:fb:f2:28:94:c6:22:5f:42:
33:7e:34:7d:73:9e:6c:56:ce:dd:68:65:b0:ca:9f:
e2:e0:ea:79:9b:22:a2:05:e5:28:0c:27:05:bd:30:
fb:26:61:9b:b0:5a:df:1b:5a:96:1e:16:c0:67:4f:
48:70:cb:4b:20:4d:d6:a1:ae:c6:26:e6:aa:43:fb:
5c:55:ee:72:d6:30:f1:b1:da:c0:ad:5a:cc:13:1a:
a6:ab:3a:3a:86:61:f3:c7:c2:b0:46:0f:ae:70:29:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:60:33:47:95:04:8F:FC:50:3E:98:41:5C:36:71:39:A1:1D:7E:2E
X509v3 Authority Key Identifier:
keyid:50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e322e302f32332d3234203d3e203237393537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.2.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:46:5b:aa:22:89:4e:8a:e4:50:4a:cf:1a:ce:47:af:41:21:
dd:e7:33:1a:fe:09:00:9e:68:75:f8:1e:79:27:21:c0:5f:2a:
84:78:31:f4:e2:0b:8a:64:33:c8:c9:52:54:b5:7b:d5:c1:ad:
7c:fa:5f:9b:35:f3:45:3f:60:92:26:93:03:22:bc:51:80:6c:
16:4e:32:e5:ec:f9:52:26:aa:0d:55:95:b0:c9:f0:54:8c:a7:
73:c0:32:16:d2:8e:6d:c3:4f:4e:59:af:d7:b6:59:54:fb:43:
15:2c:ff:5a:01:92:79:b9:85:aa:2b:8f:22:f7:25:8b:62:a3:
0e:2c:7d:74:d9:85:6b:ad:99:85:fd:5b:c9:0b:59:9a:82:9c:
aa:56:58:35:a1:ac:e7:67:00:2f:b3:03:dc:e6:b9:f0:8d:a1:
63:34:33:67:cb:5f:93:e8:0a:d3:da:bd:f0:36:01:25:5d:6f:
0c:3b:07:b9:f5:9b:02:70:97:65:a8:09:7b:17:54:be:4a:63:
8d:7b:21:42:05:42:36:f5:bf:ec:e3:ad:21:c5:38:8b:8f:49:
39:5d:cf:ce:f4:37:42:97:9d:db:e6:88:cb:cd:f2:dd:9c:36:
ac:96:e4:5a:e8:6b:b1:3a:eb:80:23:ac:a4:49:de:37:6a:85:
1f:0d:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:15:30 2025 by rpki-client