Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33342e302f32342d3234203d3e2037303034.roa
File: 3230302e32392e33342e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier: QTdxwKjprJyQlm1gj2egqyYpUuMp78V11Mxoof+dRPs=
Subject key identifier: C2:5C:B6:99:D6:AA:2B:DA:DE:23:36:F7:99:F9:67:54:22:C3:F0:12
Certificate issuer: /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial: 230F1E3851AA5AEE5C4A495811D32BFB50513795
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33342e302f32342d3234203d3e2037303034.roa
Signing time: Tue 05 Mar 2024 17:52:18 +0000
ROA not before: Tue 05 Mar 2024 17:47:18 +0000
ROA not after: Tue 04 Mar 2025 17:52:18 +0000
asID: 7004
IP address blocks: 200.29.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:0f:1e:38:51:aa:5a:ee:5c:4a:49:58:11:d3:2b:fb:50:51:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Validity
Not Before: Mar 5 17:47:18 2024 GMT
Not After : Mar 4 17:52:18 2025 GMT
Subject: CN=C25CB699D6AA2BDADE2336F799F9675422C3F012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d9:a2:2c:11:04:84:f0:b0:fa:ec:d5:cd:ee:
b3:2d:a3:94:ea:fb:df:b5:ef:cd:49:e3:20:ce:47:
b9:20:2f:9c:6e:b0:2c:5c:56:7b:17:b2:45:7c:7b:
49:02:6c:90:ef:7f:8c:05:cc:02:bd:ba:fd:52:c5:
93:e9:4c:ad:d0:45:2d:93:41:33:4d:0d:bc:c2:76:
a5:22:55:83:bc:2b:40:37:2b:bb:f0:61:88:7a:ed:
14:94:0d:fa:82:40:c2:2e:74:cf:9b:40:c7:45:0d:
0b:fb:42:41:d7:29:91:5c:18:66:b7:40:93:b5:71:
f5:40:06:f5:43:71:01:e9:1b:88:f7:df:db:c4:d8:
4a:de:6c:95:68:2b:05:12:7a:1a:fe:94:fe:ca:db:
75:c8:b1:a4:f4:d3:2e:8d:42:c4:97:54:17:ea:c3:
b1:cf:72:08:e4:fa:ff:8a:5b:b9:4b:73:28:32:82:
a0:80:bf:b5:4f:e2:59:8e:42:22:b2:46:e3:b7:2a:
59:c3:ab:a8:25:65:7b:66:eb:4a:c2:9d:5c:27:61:
79:bb:af:7f:f3:20:75:aa:bc:6f:24:43:c0:56:99:
40:c1:8b:9a:18:51:0b:47:45:f9:5a:8b:8b:b5:78:
ef:78:06:71:78:ba:52:34:60:87:59:65:68:58:bc:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5C:B6:99:D6:AA:2B:DA:DE:23:36:F7:99:F9:67:54:22:C3:F0:12
X509v3 Authority Key Identifier:
keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33342e302f32342d3234203d3e2037303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.34.0/24
Signature Algorithm: sha256WithRSAEncryption
71:fe:e1:1a:18:92:5f:97:1d:eb:38:72:9f:a6:12:0e:4b:58:
fb:3e:7f:07:de:5a:73:45:68:8c:8b:50:77:16:88:b0:67:22:
86:7e:55:b1:d6:2a:b3:e1:3a:7a:dc:82:28:3f:97:7c:72:f8:
ee:2f:8e:11:a0:ef:02:34:6a:4b:c4:c1:ee:de:cf:f6:67:bc:
1e:a2:d2:50:b5:a2:06:c4:36:83:c0:86:9d:ce:32:2f:c1:11:
be:7e:09:8f:97:b8:1e:3a:f9:cb:4c:36:44:2a:23:e4:b8:6c:
4f:fe:58:dd:1a:5d:ff:44:84:51:6f:62:90:54:dc:c7:1d:ff:
3d:bf:38:c1:2e:9a:9d:db:0d:ef:22:1c:ce:40:e7:aa:41:69:
33:a8:30:65:1a:9a:ce:d9:f5:0a:59:24:6b:b0:ec:77:59:bc:
21:8b:1d:e6:18:c8:1f:80:1f:03:27:a2:f3:a0:ed:4c:5d:86:
1e:93:1f:cc:96:be:4d:82:d6:99:4f:d2:20:e4:5d:58:03:63:
88:12:d6:62:3b:d2:be:84:7e:0b:15:9a:28:10:49:ab:7a:37:
5f:4a:b0:ff:62:8b:0e:0e:1c:0f:09:40:a4:44:1f:26:bf:b8:
68:63:5c:a0:01:3a:ea:d6:5f:d4:c7:e0:7c:cd:ae:8c:95:3e:
f8:53:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:22:38 2025 by rpki-client