Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32302d3234203d3e203230303135.roa
File: 3230302e37312e3230382e302f32302d3234203d3e203230303135.roa (raw, json)
Hash identifier: WUOSyXtt6EZqIStrUMaP3pZ+k5vHlnO0aw6pMDGK9nQ=
Subject key identifier: DF:5B:3A:2F:05:E6:B2:87:5C:2E:AA:BE:48:12:C6:D4:B1:3D:B5:1B
Certificate issuer: /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial: 0FDCEF4A82251C0ADD86A6576A1307E51748CA4E
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32302d3234203d3e203230303135.roa
Signing time: Tue 05 Mar 2024 18:13:16 +0000
ROA not before: Tue 05 Mar 2024 18:08:16 +0000
ROA not after: Tue 04 Mar 2025 18:13:16 +0000
asID: 20015
IP address blocks: 200.71.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:dc:ef:4a:82:25:1c:0a:dd:86:a6:57:6a:13:07:e5:17:48:ca:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Validity
Not Before: Mar 5 18:08:16 2024 GMT
Not After : Mar 4 18:13:16 2025 GMT
Subject: CN=DF5B3A2F05E6B2875C2EAABE4812C6D4B13DB51B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:c5:62:86:b2:b5:ec:d5:5a:1f:87:f3:bd:
3f:88:77:9e:33:1f:15:bd:03:d0:86:d8:99:2d:d8:
fe:e3:e3:3b:4f:9c:fd:44:bf:d4:1d:f5:e5:4f:93:
01:6e:61:e6:61:93:de:f1:99:6a:71:10:63:42:5a:
71:9f:22:a4:76:91:38:37:1f:8c:dd:7d:16:22:02:
1c:1e:4b:6f:ce:21:33:12:8d:fa:13:3d:a0:a4:75:
90:c6:f2:24:e7:66:a3:0b:f3:16:f4:88:49:c2:60:
f0:db:4c:60:2c:a7:55:49:16:96:a3:ec:37:1e:9d:
37:5f:ca:19:41:d4:39:2c:d7:05:aa:28:a4:81:81:
3b:77:d9:2c:97:33:95:a0:5a:55:61:a7:d7:7d:ff:
c6:a2:5d:a8:c3:f7:fd:60:6a:65:33:7e:ea:d3:a6:
ae:ed:2d:bb:78:cb:a1:df:4e:67:eb:90:2c:54:c8:
75:de:a5:ea:d2:67:21:16:2d:31:91:11:d7:59:b6:
9a:64:cc:19:9f:ef:df:0c:f3:64:ba:e7:d5:a6:fc:
bf:d8:57:6a:5c:1f:1d:65:a4:d7:ec:af:b6:ca:20:
f6:75:f7:84:c2:40:ed:a5:66:40:55:27:27:17:8e:
d8:51:1a:ce:53:03:b2:93:4b:11:aa:0b:c3:82:cf:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:3A:2F:05:E6:B2:87:5C:2E:AA:BE:48:12:C6:D4:B1:3D:B5:1B
X509v3 Authority Key Identifier:
keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32302d3234203d3e203230303135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.208.0/20
Signature Algorithm: sha256WithRSAEncryption
19:0c:d9:94:d2:f3:d4:dc:f1:49:0e:e8:bc:30:61:55:08:15:
d5:dd:84:17:b6:06:cf:ff:76:20:29:8b:dc:f9:87:b4:db:25:
dd:66:6b:c6:ab:49:c5:e7:df:45:b8:fd:09:6f:56:40:22:b3:
78:e2:1d:21:56:ee:cc:01:5d:70:bc:7d:13:51:9c:50:00:91:
4f:14:d8:c1:f4:34:e3:e7:d9:e4:56:b8:5a:21:33:6c:4e:11:
b3:4a:b0:0c:65:b2:01:c7:ab:4a:60:cf:21:4e:1d:58:fc:91:
9c:4f:0b:14:fa:7b:f0:09:d9:0c:cc:a2:18:86:57:60:e4:0f:
b9:86:9e:a3:e2:c4:75:43:b1:e9:3e:21:37:a7:93:7e:57:ab:
de:a4:b2:7b:a1:99:5c:37:3c:61:52:6d:7b:38:c1:bb:f8:cc:
11:8b:83:3b:94:59:b9:a1:b4:0b:41:ea:78:8e:bf:0d:f9:e2:
f7:2b:8c:f8:d1:68:63:ca:41:62:39:86:f3:77:3a:52:aa:f2:
f8:2c:a2:dc:7f:26:ea:49:2e:41:1d:06:3d:a8:45:88:6b:75:
ba:87:c9:98:ec:30:18:bc:71:7b:cd:23:d5:8f:b0:d7:10:97:
59:b1:5b:17:fd:e7:04:fd:97:08:ad:bd:7f:18:96:c1:cc:7d:
be:86:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:04:42 2025 by rpki-client