Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa
File: 3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa (raw, json)
Hash identifier: T8yb67Ru7fnHquqEbd5wFXF7ftsU6Jpqpa837c67y+k=
Subject key identifier: FE:46:2F:8F:BD:EC:F8:CF:41:90:B3:94:C2:6B:FE:66:03:9A:99:FB
Certificate issuer: /CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
Certificate serial: 2B7E9D08F23C2550E8AEEB0EE76825302D1DA405
Authority key identifier: 40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa
Signing time: Tue 05 Mar 2024 17:48:34 +0000
ROA not before: Tue 05 Mar 2024 17:43:34 +0000
ROA not after: Tue 04 Mar 2025 17:48:34 +0000
asID: 14970
IP address blocks: 206.223.124.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7e:9d:08:f2:3c:25:50:e8:ae:eb:0e:e7:68:25:30:2d:1d:a4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
Validity
Not Before: Mar 5 17:43:34 2024 GMT
Not After : Mar 4 17:48:34 2025 GMT
Subject: CN=FE462F8FBDECF8CF4190B394C26BFE66039A99FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:2c:76:90:b9:ba:95:9b:20:1c:99:e4:4b:
d7:cf:9b:06:40:17:31:c6:58:29:9b:ae:9f:36:2d:
e4:2a:19:25:2c:d5:79:10:11:f1:68:ca:7d:e0:ad:
61:26:00:e3:92:e6:7a:c6:a3:3b:9f:88:3a:d6:e5:
ee:5b:86:58:4b:90:79:d5:4e:13:ee:78:b7:9d:b5:
7b:c8:ab:16:9f:ea:10:fe:1c:a9:2a:07:98:c3:41:
bf:9f:8d:6a:64:3f:b5:e5:66:4b:83:da:45:7d:9d:
73:29:9f:c5:71:bd:5b:e4:b4:d8:4d:77:e5:45:b2:
3c:f1:75:54:35:16:1f:e3:d3:c1:67:c7:03:50:3b:
31:aa:ab:e9:8b:a4:25:ac:3a:e4:90:94:9f:56:16:
ba:b0:f5:db:ee:c8:ac:06:11:6f:69:a1:45:98:d9:
ff:04:da:66:4a:77:31:7d:1e:1a:cf:45:70:95:d4:
31:3b:0a:af:0f:51:ea:6d:cb:4b:ec:12:98:38:aa:
31:57:07:a3:92:d5:96:e2:52:d5:ea:33:9a:e7:60:
ba:7c:50:5f:fe:5a:d5:77:51:ff:65:e7:47:db:bf:
74:bd:88:8f:71:e6:d3:78:91:ea:5a:39:8f:85:26:
2a:94:b7:5b:0d:7f:c6:79:f6:17:44:bb:5f:72:66:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:46:2F:8F:BD:EC:F8:CF:41:90:B3:94:C2:6B:FE:66:03:9A:99:FB
X509v3 Authority Key Identifier:
keyid:40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.223.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:76:1f:9d:88:14:f0:a7:3e:b1:17:57:e8:9b:42:75:1b:48:
53:5a:38:c9:ea:c7:94:6b:bd:c0:a6:73:6c:17:a8:62:9b:be:
f4:d1:91:6e:15:6e:bc:8f:36:7c:0d:a7:fc:49:04:39:d2:05:
d5:67:9c:6f:63:1d:16:cb:e7:84:01:e3:65:73:df:de:79:e1:
ca:2e:f6:70:58:54:ea:71:bc:e1:87:a1:f7:f5:df:c8:c5:44:
92:a8:c6:a4:33:99:94:aa:fd:71:bf:ec:09:fd:25:84:e5:e9:
73:f2:49:c3:2d:cc:f7:66:81:c0:03:c3:c5:6d:57:5c:e1:01:
92:ea:35:23:a0:86:fc:02:74:14:60:ce:92:23:65:7c:73:3e:
83:ac:31:0a:5b:3c:88:f9:45:fc:af:e3:5a:1f:d4:1e:ab:58:
2b:f7:e8:18:71:80:27:1d:79:a6:73:44:b6:72:91:9d:fd:fd:
f9:33:58:c7:1c:3d:1e:9a:8b:37:1c:c1:15:35:4c:7e:77:29:
b6:04:eb:71:3b:b1:8e:ae:48:a4:2e:88:53:0b:86:47:dd:b2:
de:ba:bb:ce:e5:5a:da:da:1c:ed:be:2a:0b:36:25:66:0b:7d:
55:28:8f:25:38:e9:89:2d:a8:0d:13:66:5c:5e:5f:9d:ad:90:
29:94:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:23:10 2025 by rpki-client