Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232372e302f32342d3234203d3e203132363834.roa
File: 3230302e38352e3232372e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier: vjHqhpTzZB6K5nBGeWlCtGeMew5ijeZ1ATWq0U0MHGQ=
Subject key identifier: B9:BD:98:58:6D:31:67:65:2F:3D:FD:88:B2:A0:79:AB:AD:41:DD:B6
Certificate issuer: /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial: 21679F661641896A16701E69334B369FB9019279
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232372e302f32342d3234203d3e203132363834.roa
Signing time: Tue 05 Mar 2024 17:42:55 +0000
ROA not before: Tue 05 Mar 2024 17:37:55 +0000
ROA not after: Tue 04 Mar 2025 17:42:55 +0000
asID: 12684
IP address blocks: 200.85.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:67:9f:66:16:41:89:6a:16:70:1e:69:33:4b:36:9f:b9:01:92:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Validity
Not Before: Mar 5 17:37:55 2024 GMT
Not After : Mar 4 17:42:55 2025 GMT
Subject: CN=B9BD98586D3167652F3DFD88B2A079ABAD41DDB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:88:3d:02:cf:cd:8f:13:a0:41:66:c9:81:
ad:bc:b3:f8:11:aa:be:28:58:cc:9c:21:97:ce:98:
28:07:1c:be:75:e7:ba:9c:d5:15:12:02:5d:32:14:
89:3c:7e:0b:c8:a4:19:4b:38:46:0d:3b:14:e0:9d:
33:d4:56:f9:2b:9b:a9:c4:fe:97:87:4c:3f:0a:bf:
3a:99:9a:85:ef:64:c5:14:9e:50:1a:88:a0:d3:b1:
fc:52:4b:63:19:3c:84:ad:b0:0a:5d:ad:77:eb:ca:
d3:18:58:db:ac:59:b5:92:a2:cd:80:dd:71:18:55:
a4:46:76:a6:7f:20:58:dd:80:5f:10:8b:d6:c9:38:
4e:fe:b5:1f:68:13:1e:43:01:ad:5a:88:4e:98:93:
71:59:c3:3f:29:e9:e3:67:b1:db:30:8e:a5:88:74:
38:92:8f:37:f2:13:6d:b5:85:8b:7b:ed:cb:7f:a3:
19:42:fc:b4:c8:af:71:fd:5f:84:01:01:0f:c9:84:
13:d3:07:ba:31:05:3a:79:a9:80:a7:15:8d:8d:02:
77:a5:ec:bb:47:26:35:58:9f:e0:a0:f9:db:08:56:
4b:92:ac:f1:76:fc:28:7e:38:f3:66:31:41:37:3f:
7e:f1:90:99:04:28:8c:ec:27:2e:09:30:65:b5:3b:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BD:98:58:6D:31:67:65:2F:3D:FD:88:B2:A0:79:AB:AD:41:DD:B6
X509v3 Authority Key Identifier:
keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232372e302f32342d3234203d3e203132363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.227.0/24
Signature Algorithm: sha256WithRSAEncryption
af:5a:44:7f:27:f7:84:8a:d7:ed:b0:e3:55:01:74:79:90:d3:
ee:40:e8:1f:86:05:00:33:72:15:4b:2c:c6:01:2f:c8:62:ad:
49:f7:4d:48:0e:d1:1b:02:0a:49:e3:ad:be:13:12:08:ca:4b:
04:22:dc:38:16:b5:db:1b:39:ae:b7:8e:6e:65:c1:85:27:6f:
c4:d8:e6:d2:c2:51:66:72:8d:c3:a6:6c:f6:da:dd:6b:5f:61:
16:ce:82:f4:30:05:74:00:e5:fc:41:0b:47:88:1a:32:18:b4:
c7:e5:26:e2:06:69:f8:ef:0f:d4:c4:d5:e4:1c:7c:4a:0b:90:
d7:36:b1:2c:6b:17:05:9c:ac:61:cf:d5:e7:ee:b2:8a:db:b4:
af:90:5f:9a:6d:73:58:e1:d9:d8:78:bc:ea:41:da:7e:2d:e9:
85:4c:23:29:ee:2c:5e:63:81:5c:19:68:f3:96:3b:82:d2:d9:
c5:68:c0:4b:c1:b2:be:d5:63:11:9f:73:f7:dc:16:49:44:11:
d5:f9:64:c7:b6:23:c4:ce:9c:ae:0d:16:05:66:c6:3f:55:d0:
fa:7c:5c:1c:11:f1:31:d3:c2:a4:fb:1a:45:59:e9:38:12:0a:
23:9f:67:bc:3f:6a:fb:89:6c:f5:22:c4:2e:59:1a:4e:03:59:
4c:1c:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:40:21 2025 by rpki-client