Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136332e302f32342d3234203d3e203232353431.roa
File: 3230302e37352e3136332e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier: NMHYHJH9NMEmk3uuRx9qR/zg0nOOu3DlsETUoCklCVM=
Subject key identifier: A4:B6:5B:FC:DC:22:9E:7B:5F:DB:BB:11:EB:31:81:41:FA:C7:74:C3
Certificate issuer: /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial: 4147FD88E62ABADE2CDECE224B4D7188C6344690
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136332e302f32342d3234203d3e203232353431.roa
Signing time: Tue 05 Mar 2024 18:07:21 +0000
ROA not before: Tue 05 Mar 2024 18:02:21 +0000
ROA not after: Tue 04 Mar 2025 18:07:21 +0000
asID: 22541
IP address blocks: 200.75.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:47:fd:88:e6:2a:ba:de:2c:de:ce:22:4b:4d:71:88:c6:34:46:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Validity
Not Before: Mar 5 18:02:21 2024 GMT
Not After : Mar 4 18:07:21 2025 GMT
Subject: CN=A4B65BFCDC229E7B5FDBBB11EB318141FAC774C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:8d:df:d1:8a:f8:07:05:91:ee:a0:04:7a:
e9:36:a6:47:8c:b0:d0:5c:ac:93:66:05:8e:1f:be:
be:14:2c:b7:98:7b:6b:e3:49:83:1b:85:c8:9b:c9:
50:a0:7a:4a:b5:c8:75:d5:1b:89:3a:6d:61:86:c2:
94:e1:5d:07:2d:d0:e1:93:a1:cd:e3:57:91:c2:af:
f3:43:03:4c:b8:41:a9:1b:cb:27:ab:de:40:6b:47:
b9:c8:23:bc:29:41:ab:eb:90:df:39:e9:59:35:37:
69:b0:6c:c7:1a:79:1c:93:04:06:21:78:ae:0b:d9:
21:b5:2a:68:0c:eb:d5:10:fa:51:5e:95:d2:d5:0e:
f9:b3:19:17:7a:dd:6e:31:8e:d0:a6:99:a1:6e:22:
98:69:fa:db:49:52:d1:1f:b0:87:0f:45:6c:80:31:
0a:b1:eb:e0:ad:fe:db:cc:47:a7:4e:a1:64:dd:4b:
d9:1d:e5:c9:3b:c4:8c:9e:f6:be:03:1d:7c:ba:7c:
8b:c1:b7:37:30:65:db:56:7a:6e:61:20:2d:ad:ff:
a4:d5:59:b2:45:6a:d5:a9:cc:91:d8:58:a9:f6:82:
a0:70:23:3a:7d:d2:19:df:b4:8b:85:79:53:ad:cf:
ef:47:63:89:80:c4:93:c5:b2:c3:62:89:b4:d0:f6:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B6:5B:FC:DC:22:9E:7B:5F:DB:BB:11:EB:31:81:41:FA:C7:74:C3
X509v3 Authority Key Identifier:
keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136332e302f32342d3234203d3e203232353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.75.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:58:59:14:f0:e1:8e:c2:c6:d5:5c:fb:8a:58:05:96:b7:77:
c7:03:42:6e:36:13:2c:11:7e:dd:d4:ac:67:a0:5c:53:d8:fa:
55:0d:68:14:c3:39:0f:73:ef:65:73:c3:e6:66:58:9b:6e:45:
88:4d:8c:56:96:57:ae:39:4e:a9:20:8b:53:29:6f:95:d5:a9:
cc:c4:ec:04:57:f6:b6:12:18:c4:3d:7f:aa:05:e7:24:c6:86:
7c:f7:8c:c0:70:e4:8f:2a:39:f9:77:30:14:63:de:0f:a2:3d:
12:f2:8f:25:fd:f7:2f:29:cf:39:e2:52:a8:fa:77:70:7a:b1:
41:d6:c4:bf:a1:c0:e6:77:65:f7:3a:29:bb:89:37:0c:15:62:
02:a8:25:eb:94:f5:ad:b1:07:39:ef:98:02:54:95:8c:0c:61:
fa:7e:85:67:ef:ab:63:40:79:d1:32:26:ec:d8:fc:2a:72:de:
82:ae:9c:7f:41:25:e2:3d:0f:84:80:f9:d3:8d:34:78:4a:6e:
6d:bd:6c:74:a0:af:e6:0a:e4:dd:5e:34:09:93:20:8a:0c:a6:
69:03:50:2c:77:8f:e9:52:b1:67:59:9e:94:b1:05:9a:3b:8f:
0a:4a:9a:7c:b0:9f:68:e4:73:fb:22:5b:d6:2d:ab:8f:67:39:
91:a0:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:32:13 2025 by rpki-client