Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e203136363239.roa
File: 3230302e31302e3232352e302f32342d3234203d3e203136363239.roa (raw, json)
Hash identifier: +br3Fkg++/A0NSV+2aTAsLE03jy1Jbb2V5PQ0XlJwAU=
Subject key identifier: DA:C0:2C:BF:B0:1D:BC:2E:2F:A4:92:5B:97:DC:B3:A2:9D:BE:2D:AC
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 2F0D8194E0F4C64F26D5F5D02524D7BB4476412B
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e203136363239.roa
Signing time: Tue 05 Mar 2024 17:52:12 +0000
ROA not before: Tue 05 Mar 2024 17:47:12 +0000
ROA not after: Tue 04 Mar 2025 17:52:12 +0000
asID: 16629
IP address blocks: 200.10.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0d:81:94:e0:f4:c6:4f:26:d5:f5:d0:25:24:d7:bb:44:76:41:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Mar 5 17:47:12 2024 GMT
Not After : Mar 4 17:52:12 2025 GMT
Subject: CN=DAC02CBFB01DBC2E2FA4925B97DCB3A29DBE2DAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:ef:9d:09:f5:00:41:94:59:0c:44:7a:09:
43:6b:c4:c4:66:a2:84:1e:bf:f8:eb:a8:b8:cd:16:
85:45:d4:ff:37:47:47:4c:77:a2:e4:cc:59:cc:18:
c3:57:62:ac:da:76:46:84:fa:2c:91:f4:60:ff:01:
ee:d0:0f:45:ec:1a:47:da:c0:0b:df:92:b9:2b:68:
ae:36:00:b3:7d:fe:0b:ea:a5:65:79:4e:1d:9b:6f:
dd:3d:c6:99:7c:1d:7b:46:cf:35:ba:d2:49:b8:6d:
3c:a5:95:bb:19:f5:7c:4b:ce:81:a5:91:39:26:3d:
fc:62:86:84:3b:37:61:4e:0d:0a:06:ed:46:06:59:
26:6b:84:29:31:45:49:e1:ed:83:cd:62:ad:80:29:
d3:46:4b:5f:69:99:27:7c:c1:af:93:bd:ad:3e:c7:
58:b2:89:2a:12:00:be:a2:ac:da:d3:9b:11:48:af:
d0:c5:9b:42:87:a6:03:4b:ab:19:26:7f:bd:fa:b4:
50:81:30:5b:dc:e7:af:b4:d9:cc:47:d5:b3:0e:3f:
6c:d8:eb:c9:15:c2:d7:28:db:e7:af:02:25:5f:2d:
df:e6:91:88:8e:78:4a:62:ff:d4:4f:ef:ea:9d:0f:
87:82:94:16:7e:f6:5b:e0:05:da:53:29:2b:d5:66:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C0:2C:BF:B0:1D:BC:2E:2F:A4:92:5B:97:DC:B3:A2:9D:BE:2D:AC
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e203136363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b2:d8:c6:3e:33:a5:f4:96:ca:f9:f0:76:fd:bb:78:e2:69:
8d:fb:af:ec:b8:54:57:99:11:cb:ac:de:82:dd:93:4e:b8:1b:
3e:a9:cb:7f:57:4d:4e:c6:48:dc:e4:44:5b:94:04:da:92:cd:
bf:09:50:85:63:c1:61:5f:1b:c1:77:de:7f:e7:b8:69:ad:cf:
30:ac:00:16:0d:35:07:20:be:ab:9b:a4:9d:e9:7e:75:10:6b:
1b:11:29:b5:db:1b:f1:90:e9:01:7f:bc:05:90:44:f4:08:0a:
0c:26:09:21:d0:9d:05:ee:d7:0e:c7:80:c3:b0:2e:46:d0:0d:
cd:e3:bf:7f:74:13:dc:06:bf:49:bd:88:1f:2d:d9:f6:2b:4a:
80:9c:58:71:e1:4d:80:7b:a0:d1:d3:aa:be:52:77:1c:4b:55:
85:43:2b:6e:71:63:4e:21:b7:cd:c9:10:74:33:64:dd:43:c2:
59:b7:14:09:84:fc:25:a6:04:89:42:38:f5:bc:d5:e2:10:9e:
87:38:48:35:c1:94:dd:a1:2d:88:d6:99:28:e4:69:5a:4a:42:
72:ae:66:bb:b4:0d:4e:04:80:d2:de:8e:7d:eb:b4:0f:e9:c3:
22:52:55:43:b5:8b:ff:a1:38:57:18:7a:09:ad:ab:ba:4c:11:
ab:2e:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:57:09 2025 by rpki-client