Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa
File: 3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa (raw, json)
Hash identifier: 6pfCApW1gTig8gphep23P9l7RwvpEwitRKDWWXsqIQc=
Subject key identifier: 54:81:EC:F9:15:FD:34:63:72:30:23:E9:6D:9C:10:24:83:26:4F:AC
Certificate issuer: /CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
Certificate serial: 27C954A7BFFD110196BA7233C3112C728107CDB3
Authority key identifier: C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa
Signing time: Tue 05 Mar 2024 17:54:42 +0000
ROA not before: Tue 05 Mar 2024 17:49:42 +0000
ROA not after: Tue 04 Mar 2025 17:54:42 +0000
asID: 265804
IP address blocks: 200.63.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c9:54:a7:bf:fd:11:01:96:ba:72:33:c3:11:2c:72:81:07:cd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
Validity
Not Before: Mar 5 17:49:42 2024 GMT
Not After : Mar 4 17:54:42 2025 GMT
Subject: CN=5481ECF915FD3463723023E96D9C102483264FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f2:2f:bb:6d:2c:00:eb:6a:3f:51:74:a3:e2:
f5:02:a8:72:52:c3:51:2d:60:8d:af:d9:79:52:90:
1c:52:ea:f2:1a:00:2a:c4:91:4f:4a:9c:f9:84:20:
83:5d:cc:02:88:4f:40:22:9b:54:aa:19:cc:19:db:
49:25:10:b4:a1:8e:24:26:04:69:0b:cb:b6:24:09:
0e:e7:38:75:b0:2a:af:61:8d:8f:08:66:df:0e:65:
70:65:16:7c:19:37:1d:bc:f2:46:66:b8:e8:43:1e:
d0:b3:b1:91:12:5a:a2:29:8d:f8:ee:32:35:b8:e0:
72:3f:85:5c:fe:1b:45:6c:30:8f:ae:2b:1d:c5:fb:
56:67:ae:11:72:95:80:c7:64:39:c0:8b:1e:a4:d8:
49:81:8b:62:0a:1a:1b:4a:05:47:06:08:32:6d:b7:
67:b0:00:8c:cc:30:56:7f:e0:9e:0f:51:b5:7b:6c:
72:88:76:64:4b:33:a4:a2:bc:b7:07:56:04:3d:92:
b3:54:8e:57:f8:d8:a0:73:c5:d7:77:db:38:5c:51:
42:24:34:3a:31:c6:fe:b1:e0:8c:d6:cd:ff:01:00:
e0:fc:28:dd:b4:75:8b:8e:61:e2:c9:5d:09:21:1a:
b2:98:06:1c:b3:49:e8:69:23:54:85:77:06:f7:11:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:81:EC:F9:15:FD:34:63:72:30:23:E9:6D:9C:10:24:83:26:4F:AC
X509v3 Authority Key Identifier:
keyid:C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.63.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:09:8c:72:12:33:a4:46:98:d8:91:0a:d9:c5:e7:cb:c1:fe:
2e:03:f0:4e:22:c7:44:94:84:bd:61:68:10:1d:e2:a5:79:42:
e4:37:a3:9a:27:66:e4:03:73:ff:1c:c4:76:a5:17:19:51:0a:
95:a6:71:2b:61:e8:fd:71:3e:20:0c:81:5e:ea:3b:7b:12:3c:
a1:b4:03:c4:06:e3:c4:08:38:67:bc:f4:1c:be:3c:f1:fe:ca:
6b:06:a9:31:19:5d:33:cd:4e:8e:35:37:2a:11:9f:71:0b:f1:
5d:47:f6:7a:2f:0a:61:ec:25:a7:05:82:bb:b5:a1:d9:06:2e:
44:41:c9:2e:57:f9:11:a9:a9:08:5b:17:c5:2f:28:eb:80:e4:
df:79:85:10:a5:1f:30:d8:47:14:a5:cf:7e:2d:fe:03:ad:fc:
40:80:45:aa:0b:c4:a4:f7:d2:d6:7c:28:64:a2:fb:24:74:4a:
e9:79:61:3c:3d:d2:b4:bb:f9:90:4b:5f:68:79:16:cb:14:13:
47:27:b0:8c:62:16:f0:23:5c:e3:2d:51:5a:88:ea:7d:a2:53:
db:c7:0f:93:6d:52:0d:7a:e7:56:d0:eb:8c:c5:49:1e:0a:e7:
62:c6:fb:f5:ae:7d:dd:de:f1:e2:a6:7c:08:f4:5e:4a:6e:06:
09:84:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:03:40 2025 by rpki-client