Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa
File: 3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa (raw, json)
Hash identifier: KVUWbzLSskV+brDsGLTe8iBxmay0lD4ZX3jsedFgqG4=
Subject key identifier: 47:65:51:C2:A9:95:1B:41:60:4C:94:8C:8B:36:C1:50:72:CA:AD:5E
Certificate issuer: /CN=C2D04859D3EA57A74F033391AF63270299AC79E5
Certificate serial: 4244DC4950ECFB09C8BA74EDEBCEFE51C7620B45
Authority key identifier: C2:D0:48:59:D3:EA:57:A7:4F:03:33:91:AF:63:27:02:99:AC:79:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D04859D3EA57A74F033391AF63270299AC79E5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa
Signing time: Tue 05 Mar 2024 18:21:43 +0000
ROA not before: Tue 05 Mar 2024 18:16:43 +0000
ROA not after: Tue 04 Mar 2025 18:21:43 +0000
asID: 27928
IP address blocks: 201.221.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:44:dc:49:50:ec:fb:09:c8:ba:74:ed:eb:ce:fe:51:c7:62:0b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2D04859D3EA57A74F033391AF63270299AC79E5
Validity
Not Before: Mar 5 18:16:43 2024 GMT
Not After : Mar 4 18:21:43 2025 GMT
Subject: CN=476551C2A9951B41604C948C8B36C15072CAAD5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:fa:a9:a6:3b:d3:14:39:f5:7e:34:b2:0d:
e2:32:36:9f:01:d6:6c:82:5b:6b:b5:3c:4a:c7:3a:
c6:79:9d:f6:d8:34:fc:db:09:5f:01:bf:2a:17:fd:
52:3b:cc:18:e8:1a:cb:08:9c:11:9d:c1:47:d8:bc:
1b:ce:46:ad:cc:0a:26:80:87:89:2d:4b:99:80:74:
e1:97:d7:31:48:3d:f6:56:5f:88:17:30:f4:a4:de:
29:ae:b6:27:bf:6d:ba:09:dd:6b:a4:cc:8e:42:36:
db:e3:20:f6:27:5d:84:cf:d1:cb:c9:dc:36:5b:5c:
51:59:4a:40:29:52:77:b2:68:33:a6:4a:1c:67:8d:
89:ad:b0:3b:e6:c3:be:4f:ed:6b:40:6d:af:c8:ea:
75:a9:d0:15:9b:3b:c3:27:6b:18:5a:f4:63:5c:07:
f1:07:0c:0d:46:f7:38:7a:73:eb:90:04:60:67:13:
af:39:ed:ff:03:74:43:74:2f:62:e8:ad:43:40:c4:
47:df:18:3e:4f:1a:e2:1a:74:10:12:bf:cd:a2:6a:
ee:11:be:22:15:af:c6:53:d6:e2:2b:48:75:7f:55:
df:f1:ee:b9:0f:eb:6e:80:b6:e6:83:8e:e7:97:fd:
ae:6c:5c:60:d2:0f:8e:db:31:67:57:31:a6:da:90:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:65:51:C2:A9:95:1B:41:60:4C:94:8C:8B:36:C1:50:72:CA:AD:5E
X509v3 Authority Key Identifier:
keyid:C2:D0:48:59:D3:EA:57:A7:4F:03:33:91:AF:63:27:02:99:AC:79:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/C2D04859D3EA57A74F033391AF63270299AC79E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D04859D3EA57A74F033391AF63270299AC79E5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C9991813CAC925812B2A2D8BB80E276AFBDD754C9858D317103B2FC4AD2169BA/0/3230312e3232312e3232342e302f31392d3234203d3e203237393238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.224.0/19
Signature Algorithm: sha256WithRSAEncryption
37:0a:8c:89:ff:ab:85:77:89:3b:59:3e:c0:8b:ff:23:25:86:
83:45:42:1f:ef:e3:76:13:c3:82:14:3b:7f:5b:5c:09:cc:8c:
20:30:7f:fc:47:40:e5:f7:d7:b8:82:e9:1a:0a:f3:52:e5:0d:
85:5d:45:42:87:d0:ca:e9:e6:87:1d:1e:0c:10:ec:e6:4c:61:
93:bd:16:66:2a:cc:ef:ca:d1:f5:d8:d2:40:b2:cf:c6:f9:a0:
7e:d0:f2:27:64:1b:6e:32:da:8c:8c:0a:c8:ef:0e:cc:44:94:
a4:67:5c:0a:68:60:63:9a:4b:fb:41:9e:0f:cd:64:d6:c7:b1:
ca:77:52:06:5c:e8:8e:9f:8a:2e:eb:a0:1c:d3:5b:3a:38:52:
70:90:9e:cd:04:b9:ea:30:0e:4f:fe:b2:8d:22:da:c4:ba:f7:
77:c7:35:3d:ca:e5:d4:dc:f4:1b:f4:73:5f:04:af:43:40:fd:
fc:90:2c:c1:42:de:77:18:4d:9b:f9:2c:69:5a:ad:dc:f8:38:
ca:0d:a8:06:ce:14:ac:d1:cf:7e:55:4b:b4:c5:ab:03:70:89:
23:82:20:a9:7a:72:ee:97:49:e8:16:66:a5:02:39:4d:fd:2f:
f5:60:5e:1e:48:9d:e6:46:47:e6:7b:e9:0a:7a:a9:24:e4:36:
b5:06:88:38
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQkTcSVDs+wnIunTt687+UcdiC0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJEMDQ4NTlEM0VBNTdBNzRGMDMzMzkxQUY2MzI3MDI5
OUFDNzlFNTAeFw0yNDAzMDUxODE2NDNaFw0yNTAzMDQxODIxNDNaMDMxMTAvBgNV
BAMTKDQ3NjU1MUMyQTk5NTFCNDE2MDRDOTQ4QzhCMzZDMTUwNzJDQUFENUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7PqppjvTFDn1fjSyDeIyNp8B
1myCW2u1PErHOsZ5nfbYNPzbCV8BvyoX/VI7zBjoGssInBGdwUfYvBvORq3MCiaA
h4ktS5mAdOGX1zFIPfZWX4gXMPSk3imutie/bboJ3WukzI5CNtvjIPYnXYTP0cvJ
3DZbXFFZSkApUneyaDOmShxnjYmtsDvmw75P7WtAba/I6nWp0BWbO8Mnaxha9GNc
B/EHDA1G9zh6c+uQBGBnE6857f8DdEN0L2LorUNAxEffGD5PGuIadBASv82iau4R
viIVr8ZT1uIrSHV/Vd/x7rkP626AtuaDjueX/a5sXGDSD47bMWdXMabakHXPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUR2VRwqmVG0FgTJSMizbBUHLKrV4wHwYDVR0j
BBgwFoAUwtBIWdPqV6dPAzORr2MnApmseeUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOTk5MTgxM0NBQzkyNTgxMkIyQTJEOEJCODBFMjc2QUZC
REQ3NTRDOTg1OEQzMTcxMDNCMkZDNEFEMjE2OUJBLzAvQzJEMDQ4NTlEM0VBNTdB
NzRGMDMzMzkxQUY2MzI3MDI5OUFDNzlFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkQwNDg1OUQzRUE1N0E3NEYw
MzMzOTFBRjYzMjcwMjk5QUM3OUU1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzk5OTE4MTNDQUM5MjU4MTJCMkEyRDhCQjgwRTI3NkFGQkRENzU0Qzk4
NThEMzE3MTAzQjJGQzRBRDIxNjlCQS8wLzMyMzAzMTJlMzIzMjMxMmUzMjMyMzQy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM3MzkzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyd3g
MA0GCSqGSIb3DQEBCwUAA4IBAQA3CoyJ/6uFd4k7WT7Ai/8jJYaDRUIf7+N2E8OC
FDt/W1wJzIwgMH/8R0Dl99e4gukaCvNS5Q2FXUVCh9DK6eaHHR4MEOzmTGGTvRZm
KszvytH12NJAss/G+aB+0PInZBtuMtqMjArI7w7MRJSkZ1wKaGBjmkv7QZ4PzWTW
x7HKd1IGXOiOn4ou66Ac01s6OFJwkJ7NBLnqMA5P/rKNItrEuvd3xzU9yuXU3PQb
9HNfBK9DQP38kCzBQt53GE2b+SxpWq3c+DjKDagGzhSs0c9+VUu0xasDcIkjgiCp
enLul0noFmalAjlN/S/1YF4eSJ3mRkfme+kKeqkk5Da1Bog4
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:29:47 2025 by rpki-client