Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383339.roa
File: 3230302e39302e3134342e302f32312d3234203d3e203237383339.roa (raw, json)
Hash identifier: n3Flvw0IX+bAPnRQ7sJPswVcdJmg7JjZEsAYuKSmhvg=
Subject key identifier: 8C:58:61:03:7F:2A:7D:1A:D3:CF:D3:92:66:5E:D2:3E:4E:F9:C2:A0
Certificate issuer: /CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Certificate serial: 3EF20EF0C832BFAC059A9DD66448EFF6352DCDDC
Authority key identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383339.roa
Signing time: Tue 05 Mar 2024 17:57:28 +0000
ROA not before: Tue 05 Mar 2024 17:52:28 +0000
ROA not after: Tue 04 Mar 2025 17:57:28 +0000
asID: 27839
IP address blocks: 200.90.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f2:0e:f0:c8:32:bf:ac:05:9a:9d:d6:64:48:ef:f6:35:2d:cd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Validity
Not Before: Mar 5 17:52:28 2024 GMT
Not After : Mar 4 17:57:28 2025 GMT
Subject: CN=8C5861037F2A7D1AD3CFD392665ED23E4EF9C2A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:dd:63:9c:fe:c5:45:a8:2a:bd:db:a5:64:d0:
f3:0e:1a:ca:f3:3d:0d:55:cb:52:85:1d:91:bd:0f:
ef:ee:c3:40:f6:2b:8c:71:a8:51:e9:a3:04:86:9c:
87:e0:e8:d4:27:cb:6a:b8:7b:7d:f8:e4:3f:68:75:
5d:be:0d:6f:0d:51:1f:e9:89:14:59:de:45:48:71:
6e:05:8e:aa:c8:6f:61:ec:f6:8b:80:7b:95:53:91:
43:ef:bf:9e:a2:29:06:1c:e9:30:35:36:55:85:10:
f4:f5:10:19:2b:b8:a1:60:e8:c6:6e:b1:0e:92:84:
4c:84:e4:82:09:3f:ea:0e:70:1d:ba:a8:8a:30:ce:
fd:8b:30:e7:76:1b:d3:ea:04:ea:cd:f9:ec:0b:28:
68:2b:4c:dd:02:b2:b0:85:fe:40:06:45:5b:78:ab:
17:b8:19:c4:f5:99:7d:a9:3d:fc:1a:5e:aa:73:a7:
a5:a6:f1:35:d1:53:62:05:1b:40:98:be:98:32:62:
71:bc:22:fe:b7:f7:53:55:3e:2f:ab:a2:b0:50:67:
7c:14:6c:7f:ec:c1:3d:d7:b2:85:45:d8:dd:12:4d:
d8:f8:43:67:9c:c1:6e:ff:58:74:e8:7a:f9:e5:03:
5f:2b:dd:a9:97:f6:74:c7:47:68:5f:27:49:d9:be:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:58:61:03:7F:2A:7D:1A:D3:CF:D3:92:66:5E:D2:3E:4E:F9:C2:A0
X509v3 Authority Key Identifier:
keyid:EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.144.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:81:f3:18:5e:ab:73:75:83:0d:4f:b6:8d:ed:f8:8d:60:5e:
d9:d8:b9:31:ff:35:e5:f0:35:b9:57:4c:0b:07:54:05:90:51:
f5:91:cf:65:85:b9:e2:57:8e:af:e9:10:73:25:d1:28:c9:37:
06:5f:35:24:97:02:77:72:7d:27:4a:7f:5e:48:f2:89:d5:78:
21:59:c0:23:d8:ed:e5:2e:49:f2:65:8c:21:ee:54:b8:2a:08:
b3:6f:d4:15:8a:1e:81:9f:34:35:6b:b3:c1:c3:9a:75:aa:cb:
b2:d3:42:84:ce:55:ea:d1:40:c6:68:9d:ee:a9:47:e5:d6:e7:
6c:0c:df:b2:c2:54:a8:2e:1e:f2:18:af:b2:fb:d7:83:c3:47:
d8:44:7c:25:e7:26:2a:d0:d9:af:c4:48:fb:19:ac:3a:5f:35:
7c:6b:5e:1a:37:94:99:36:2b:4e:47:0f:26:ad:5f:60:48:d6:
78:2f:2a:b8:6d:39:34:7e:5d:8f:95:ee:6f:02:9c:7c:90:e0:
25:b8:68:1b:f3:db:3e:b2:0f:30:bf:15:87:f4:6a:23:14:af:
35:65:08:6c:81:f1:8e:2b:41:45:88:0a:45:11:16:1c:d1:9a:
79:d7:82:eb:e8:cf:b3:dc:b6:8c:19:5c:94:5f:ea:78:8a:1f:
f4:15:49:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:21:07 2025 by rpki-client