Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa
File: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (raw, json)
Hash identifier: 9inUUQvjihtBlIAqfKqqlAECJJ4QfmSCoCav56LrdrM=
Subject key identifier: B8:6F:59:54:9B:14:A1:10:0B:C4:6B:67:5D:A6:EC:F6:F8:84:A1:2F
Certificate issuer: /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial: 410EAA8C90873EA2B29102CD4A996CAC974D06F5
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa
Signing time: Tue 05 Mar 2024 17:40:55 +0000
ROA not before: Tue 05 Mar 2024 17:35:55 +0000
ROA not after: Tue 04 Mar 2025 17:40:55 +0000
asID: 273006
IP address blocks: 201.131.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:0e:aa:8c:90:87:3e:a2:b2:91:02:cd:4a:99:6c:ac:97:4d:06:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Validity
Not Before: Mar 5 17:35:55 2024 GMT
Not After : Mar 4 17:40:55 2025 GMT
Subject: CN=B86F59549B14A1100BC46B675DA6ECF6F884A12F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:ce:7e:c1:b5:1d:8d:36:94:70:bb:07:c4:
ae:c1:bb:4a:39:76:c1:fa:9e:d7:08:d1:40:dc:a5:
56:b0:71:4d:10:3b:c1:28:e2:ae:21:df:41:9a:99:
8c:96:b6:a0:96:5a:b7:ac:97:8b:ae:3f:83:61:3a:
e8:8f:c1:0b:24:34:d8:a2:d3:18:b2:30:32:9e:9f:
e6:5a:9e:f0:a6:05:69:a2:47:47:fe:52:46:4c:17:
c4:7b:44:cb:38:37:a5:ec:61:54:22:c8:53:84:a0:
e2:06:a5:8e:a7:c4:6b:0c:c4:1a:69:60:5c:9e:2d:
56:07:5d:55:d1:e9:be:6d:2e:4c:a4:4c:69:2d:61:
bc:ac:ef:b7:81:7c:4f:7d:70:26:f9:9d:38:c2:2a:
21:32:6c:4a:86:44:44:5c:dd:83:75:a2:ce:b0:b0:
98:ca:9a:45:95:e9:54:bb:f4:74:d1:4d:2b:dd:a2:
e6:20:c4:13:96:5d:0f:15:1b:99:a9:91:8d:21:a9:
c8:b4:a2:c8:29:be:c7:8f:09:37:f3:31:8e:dd:c0:
99:44:e4:bf:04:78:3d:e5:58:28:b9:d0:fc:b3:d1:
1c:20:e3:be:66:c0:97:f2:11:12:3e:03:cc:92:8d:
34:ee:1d:5f:3b:48:4a:f2:d9:16:8a:f9:39:2e:fb:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6F:59:54:9B:14:A1:10:0B:C4:6B:67:5D:A6:EC:F6:F8:84:A1:2F
X509v3 Authority Key Identifier:
keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9f:5a:b2:f2:ce:46:a1:f4:20:6d:90:cf:73:e2:e2:cd:f4:
4e:b5:ac:18:e7:4d:5b:6f:46:4f:da:c6:8a:3b:33:32:5e:18:
31:12:9d:62:9a:01:38:e4:6a:0c:b9:37:7a:c5:26:c4:a2:25:
4d:73:36:79:53:f1:55:26:fa:03:34:9e:fc:dd:c8:8b:fb:1d:
33:a8:d7:aa:70:b7:7a:e0:5e:90:c3:ed:56:ac:0d:17:e8:e3:
83:0d:be:f5:18:71:bd:c6:e0:98:b2:b0:aa:a9:95:5e:59:0a:
23:c5:92:69:b6:96:3a:ea:d5:84:7a:1f:46:02:5b:88:31:1f:
dc:61:93:a2:66:0d:45:78:d1:28:62:49:62:0c:88:bc:52:0b:
89:a2:1f:3e:16:56:e6:6d:f7:f9:ab:7d:13:8b:b0:75:f4:12:
bf:01:72:1c:57:a2:19:c9:0f:44:47:2e:80:fc:d8:86:1e:5a:
d7:4d:68:de:d5:10:39:9a:e1:ce:7b:3d:0b:35:5a:36:93:af:
32:f1:1f:6c:18:49:21:bb:6b:67:36:aa:a6:c9:ec:0e:bd:62:
01:e1:f4:0b:4a:23:88:91:f3:89:49:7f:1d:3c:9f:1e:88:ff:
ff:12:fc:2e:01:d1:d4:04:5c:4d:2e:42:8c:f9:47:a8:16:0b:
18:ae:8c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:18:45 2025 by rpki-client