Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa
File: 3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (raw, json)
Hash identifier: 0Ws37RO9MoYEBvwu4yRleZPu3kz4XNP88MnonMRyFYA=
Subject key identifier: CC:07:25:88:94:54:97:07:7B:74:7E:63:FB:53:F1:11:5B:C1:3F:4D
Certificate issuer: /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial: 0162CB61E985675F302D118326098855A186C5C0
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa
Signing time: Tue 05 Mar 2024 17:40:55 +0000
ROA not before: Tue 05 Mar 2024 17:35:55 +0000
ROA not after: Tue 04 Mar 2025 17:40:55 +0000
asID: 273006
IP address blocks: 201.131.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:62:cb:61:e9:85:67:5f:30:2d:11:83:26:09:88:55:a1:86:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Validity
Not Before: Mar 5 17:35:55 2024 GMT
Not After : Mar 4 17:40:55 2025 GMT
Subject: CN=CC072588945497077B747E63FB53F1115BC13F4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:08:8a:0d:b4:c1:c0:b7:9b:e2:36:29:1f:
bc:24:c0:38:b3:21:39:ab:1e:20:bb:ad:19:65:86:
c5:7f:eb:aa:dc:be:a0:c2:91:e2:ce:b6:93:51:8d:
7e:c1:4a:fc:83:3e:5d:ca:30:ef:df:0c:94:2e:13:
b1:2c:52:ef:86:d0:95:1a:81:01:75:19:84:1e:71:
8f:6b:78:28:40:f5:fb:6f:a8:6a:5f:d8:73:da:83:
fa:af:5c:77:eb:2f:c3:e8:29:b1:b6:0d:a5:92:ab:
de:f3:68:c7:64:3e:39:2d:9e:e4:57:db:0b:88:69:
80:64:b6:f8:f2:8e:75:4a:aa:80:93:ad:46:1d:4d:
33:7d:96:fc:99:fe:53:db:92:83:09:37:fc:9f:3e:
41:77:7f:1a:b9:6d:38:49:d3:a2:64:ba:d1:99:3a:
41:88:d3:ee:4e:ae:81:45:fa:e7:03:50:c8:3a:87:
1c:5b:f6:11:f9:42:b9:3f:86:69:7b:95:01:ec:9f:
41:ba:a8:a9:22:26:2f:55:56:62:68:4d:be:34:3d:
91:67:71:3e:cc:42:b8:00:3d:df:34:5b:5f:2c:27:
76:db:1d:f0:c2:e5:89:2f:e6:18:37:23:d6:6d:c2:
ee:78:aa:c4:e1:b6:07:52:cb:ce:ab:2a:03:28:4d:
d8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:25:88:94:54:97:07:7B:74:7E:63:FB:53:F1:11:5B:C1:3F:4D
X509v3 Authority Key Identifier:
keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.88.0/24
Signature Algorithm: sha256WithRSAEncryption
29:98:65:7c:57:01:32:fa:9d:9c:c2:e1:d7:ed:7c:e0:0e:7f:
83:8b:cb:d4:5f:b2:4e:da:b1:4e:e6:80:7c:0a:ad:c4:62:48:
15:23:f6:fe:31:4f:11:b0:1b:cc:9e:16:66:75:60:da:0f:4c:
81:ba:d9:f4:25:5a:0d:9b:2e:bd:a6:04:b9:f1:c1:ec:70:37:
f4:5b:c0:4f:55:07:bf:08:f8:2f:02:00:30:01:60:0c:6d:f4:
5d:d8:12:de:e2:18:fd:ec:48:d8:75:4d:08:2b:9e:7b:bf:af:
d7:48:d4:16:e1:a1:c6:0c:89:e8:73:66:d5:6c:c3:01:31:d8:
da:65:b2:b4:f2:35:e9:2e:d7:e2:bd:c1:28:5c:f4:69:e0:0a:
8c:50:6d:1f:33:4a:8f:a1:25:6a:aa:40:16:9c:d6:e8:96:72:
2b:71:2a:08:cd:ba:ea:c1:ff:12:d0:cc:79:62:fd:d6:64:88:
7a:b6:f2:f9:aa:40:61:4e:be:ec:36:42:d2:4c:6f:aa:a5:a6:
59:12:99:75:3c:bf:2d:09:5e:a1:77:45:d3:8b:9c:c7:a9:be:
91:8c:a1:e7:36:8d:3e:69:c3:0e:fc:be:50:54:b4:1e:7c:9b:
bc:f8:ab:db:c8:53:26:04:80:85:21:a8:7e:01:88:f8:c5:94:
9d:fe:85:1c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAWLLYemFZ18wLRGDJgmIVaGGxcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBBRjFGRkE4MTVDNkUzRjNCOTA2OEFERDNEM0FGQjEx
MERBN0Q0NTAeFw0yNDAzMDUxNzM1NTVaFw0yNTAzMDQxNzQwNTVaMDMxMTAvBgNV
BAMTKENDMDcyNTg4OTQ1NDk3MDc3Qjc0N0U2M0ZCNTNGMTExNUJDMTNGNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZAiKDbTBwLeb4jYpH7wkwDiz
ITmrHiC7rRllhsV/66rcvqDCkeLOtpNRjX7BSvyDPl3KMO/fDJQuE7EsUu+G0JUa
gQF1GYQecY9reChA9ftvqGpf2HPag/qvXHfrL8PoKbG2DaWSq97zaMdkPjktnuRX
2wuIaYBktvjyjnVKqoCTrUYdTTN9lvyZ/lPbkoMJN/yfPkF3fxq5bThJ06JkutGZ
OkGI0+5OroFF+ucDUMg6hxxb9hH5Qrk/hml7lQHsn0G6qKkiJi9VVmJoTb40PZFn
cT7MQrgAPd80W18sJ3bbHfDC5Ykv5hg3I9Ztwu54qsThtgdSy86rKgMoTdg5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzAcliJRUlwd7dH5j+1PxEVvBP00wHwYDVR0j
BBgwFoAUIK8f+oFcbj87kGit09OvsRDafUUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUIzQjM3NTU2QThEQTJFNzA2QTRBNzMzN0Y3REJCQzQ3
QUJCQUNENzEzMjI5QjU0Q0FDRDY3MEVCQzA1RTUxLzAvMjBBRjFGRkE4MTVDNkUz
RjNCOTA2OEFERDNEM0FGQjExMERBN0Q0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEFGMUZGQTgxNUM2RTNGM0I5
MDY4QUREM0QzQUZCMTEwREE3RDQ1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVCM0IzNzU1NkE4REEyRTcwNkE0QTczMzdGN0RCQkM0N0FCQkFDRDcx
MzIyOUI1NENBQ0Q2NzBFQkMwNUU1MS8wLzMyMzAzMTJlMzEzMzMxMmUzODM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYNY
MA0GCSqGSIb3DQEBCwUAA4IBAQApmGV8VwEy+p2cwuHX7XzgDn+Di8vUX7JO2rFO
5oB8Cq3EYkgVI/b+MU8RsBvMnhZmdWDaD0yButn0JVoNmy69pgS58cHscDf0W8BP
VQe/CPgvAgAwAWAMbfRd2BLe4hj97EjYdU0IK557v6/XSNQW4aHGDInoc2bVbMMB
MdjaZbK08jXpLtfivcEoXPRp4AqMUG0fM0qPoSVqqkAWnNbolnIrcSoIzbrqwf8S
0Mx5Yv3WZIh6tvL5qkBhTr7sNkLSTG+qpaZZEpl1PL8tCV6hd0XTi5zHqb6RjKHn
No0+acMO/L5QVLQefJu8+KvbyFMmBICFIah+AYj4xZSd/oUc
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:18:47 2025 by rpki-client