Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa
File: 3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa (raw, json)
Hash identifier: AlHZ7P6DWDwoxIdLkU+OMVQ3uqrQImaoRTa0nIWZakw=
Subject key identifier: 8B:DC:99:28:2E:27:A5:ED:EF:B7:B9:5B:27:5C:C2:FD:D9:26:3B:72
Certificate issuer: /CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6
Certificate serial: 2345E5D2BB421EDCD388A3596FDB8DD6C44A2BCB
Authority key identifier: 44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa
Signing time: Tue 05 Mar 2024 18:12:06 +0000
ROA not before: Tue 05 Mar 2024 18:07:06 +0000
ROA not after: Tue 04 Mar 2025 18:12:06 +0000
asID: 271867
IP address blocks: 200.36.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:45:e5:d2:bb:42:1e:dc:d3:88:a3:59:6f:db:8d:d6:c4:4a:2b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6
Validity
Not Before: Mar 5 18:07:06 2024 GMT
Not After : Mar 4 18:12:06 2025 GMT
Subject: CN=8BDC99282E27A5EDEFB7B95B275CC2FDD9263B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:7d:2e:38:eb:c4:9a:7e:7a:d6:40:a4:6c:
af:fa:88:85:7f:1b:ac:4b:05:7f:00:7a:df:01:80:
3b:46:c0:83:e1:c7:6a:5f:6e:de:40:a6:d6:28:49:
b9:f6:26:b2:a8:3d:f6:7d:6e:9e:2e:52:21:c0:5d:
bb:f5:97:9d:74:a0:0d:f7:36:18:a2:c8:7c:1b:1e:
cd:fd:ae:36:cb:27:d9:94:1d:80:91:87:2c:b8:77:
47:ff:1f:65:d7:77:2d:b3:ca:c8:69:7e:88:88:8d:
ce:8d:80:b4:06:c3:46:d6:a2:6c:c1:0c:6f:17:1d:
52:73:87:e7:ab:d0:ab:06:cd:84:ef:db:7b:3e:46:
bd:b0:29:57:81:45:56:75:06:32:75:bf:21:30:3e:
a9:a0:cd:06:56:4d:60:e4:97:0a:e0:88:ca:53:21:
5a:b5:84:a8:70:bc:55:aa:f5:93:19:3f:b2:d0:e5:
4a:f5:90:7e:bc:0d:b7:9d:91:a1:b4:8c:fe:7a:6b:
e6:32:0d:13:b4:3c:55:68:5d:9d:b5:f1:98:e2:8c:
a7:d1:c5:bb:35:73:fe:50:35:c4:24:11:37:67:a2:
a8:81:aa:00:ae:f6:32:a9:71:c4:4e:cd:b3:ba:3a:
97:22:64:cf:e7:fe:6a:b2:7e:55:5a:ea:c5:09:bf:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DC:99:28:2E:27:A5:ED:EF:B7:B9:5B:27:5C:C2:FD:D9:26:3B:72
X509v3 Authority Key Identifier:
keyid:44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.208.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b4:2a:c4:ca:b7:35:52:7d:25:45:e5:3f:22:25:dd:ed:cc:
ff:65:6d:ff:a9:e5:13:81:e7:c2:29:d7:5d:00:42:3b:dc:2a:
59:36:96:db:a1:be:89:84:62:32:f1:c2:72:0b:d9:b6:2a:51:
11:89:05:f1:b7:1f:91:29:ba:bc:6d:89:29:c1:cf:2d:09:bb:
ca:35:b0:c4:69:e5:66:27:f5:d7:a3:8c:11:c2:31:7e:04:1a:
d8:66:2b:08:bd:69:d0:aa:94:b1:f0:f2:4d:73:04:37:b7:91:
72:c2:81:32:6f:ed:93:a0:cb:7c:44:68:9d:5f:8f:d1:0c:f5:
db:26:ad:e1:7c:f3:95:f7:2b:ce:c7:e4:cb:74:7a:25:21:c6:
25:58:8f:2b:e9:72:78:2d:f0:00:78:31:ba:a3:71:82:84:ff:
2f:70:09:65:86:f5:2e:be:36:b4:e8:01:27:3c:cc:2d:d4:18:
43:c9:48:fe:22:23:96:59:b0:c4:fd:9e:b4:1a:4f:e0:f3:af:
09:d0:f5:a7:98:2d:47:af:a7:c1:3a:bd:14:f7:8a:03:c2:30:
a7:95:ca:63:90:f7:ad:f6:8d:82:4a:50:13:4e:30:8e:75:15:
bf:52:1a:f8:f8:0e:76:0b:57:cd:c5:63:b5:19:de:c3:e4:fb:
c4:e2:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:42:46 2025 by rpki-client