Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3230302e3130372e3234302e302f32312d3234203d3e203237383339.roa
File: 3230302e3130372e3234302e302f32312d3234203d3e203237383339.roa (raw, json)
Hash identifier: /twpfgVIvI/hA2aoPmKEG5nQatEs4XlwiNx6HPHKP2s=
Subject key identifier: 3F:CD:1E:FA:A3:D9:27:BA:EA:6C:5A:85:12:2F:1C:CE:FD:F3:50:3D
Certificate issuer: /CN=52A0CD9886DF104498561B789483DB0D9F8E804F
Certificate serial: 2DA56803700F50776DD74122AAC057C18A1968F2
Authority key identifier: 52:A0:CD:98:86:DF:10:44:98:56:1B:78:94:83:DB:0D:9F:8E:80:4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52A0CD9886DF104498561B789483DB0D9F8E804F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3230302e3130372e3234302e302f32312d3234203d3e203237383339.roa
Signing time: Tue 05 Mar 2024 18:14:28 +0000
ROA not before: Tue 05 Mar 2024 18:09:28 +0000
ROA not after: Tue 04 Mar 2025 18:14:28 +0000
asID: 27839
IP address blocks: 200.107.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a5:68:03:70:0f:50:77:6d:d7:41:22:aa:c0:57:c1:8a:19:68:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A0CD9886DF104498561B789483DB0D9F8E804F
Validity
Not Before: Mar 5 18:09:28 2024 GMT
Not After : Mar 4 18:14:28 2025 GMT
Subject: CN=3FCD1EFAA3D927BAEA6C5A85122F1CCEFDF3503D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:f0:69:d9:6c:df:ee:29:60:4b:d9:93:24:
1d:ee:d4:b8:98:26:d4:76:47:7e:df:59:84:42:26:
51:12:d5:38:31:ad:40:ed:ea:10:bf:30:ee:6d:54:
be:67:1e:1d:68:f7:00:1c:f5:ac:ab:2b:d5:f1:b9:
9e:46:7e:44:8d:ed:f1:40:85:bb:e2:d6:67:51:53:
14:3f:8f:55:73:46:73:ca:63:97:1e:dc:5a:07:b4:
8f:bc:87:1b:0a:41:f6:8d:e9:6f:cf:45:94:f0:6b:
65:0e:37:e3:70:92:ee:46:56:d0:a5:77:ca:24:9b:
db:6a:70:e2:03:06:c3:51:e6:75:6e:b0:53:e9:cf:
58:3c:3a:50:03:8f:3c:ae:1e:0a:bd:b5:e1:93:d2:
d7:00:0d:ed:90:80:21:44:83:6a:7e:95:39:f3:ed:
df:c7:40:a1:fb:69:55:5e:81:89:a6:2e:b9:47:a0:
e1:9d:41:f1:40:75:e7:ea:0b:17:7c:e4:77:28:bf:
9e:5a:c6:6f:bc:f0:58:e9:c9:d8:1d:77:76:b6:1f:
28:fc:9f:a1:f0:5f:79:20:4c:37:b8:3a:bf:e5:8d:
59:2c:92:c7:f0:00:a8:a4:b2:a4:8f:ee:21:62:99:
08:6a:aa:ba:a1:9c:81:2b:26:74:f9:14:e1:a1:b0:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CD:1E:FA:A3:D9:27:BA:EA:6C:5A:85:12:2F:1C:CE:FD:F3:50:3D
X509v3 Authority Key Identifier:
keyid:52:A0:CD:98:86:DF:10:44:98:56:1B:78:94:83:DB:0D:9F:8E:80:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/52A0CD9886DF104498561B789483DB0D9F8E804F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52A0CD9886DF104498561B789483DB0D9F8E804F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3230302e3130372e3234302e302f32312d3234203d3e203237383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.107.240.0/21
Signature Algorithm: sha256WithRSAEncryption
28:b1:0c:cd:21:91:28:85:8e:8f:3f:a2:15:29:e5:68:73:0c:
00:11:e6:8a:a0:1a:2c:27:51:96:77:52:23:f3:b4:17:2d:bf:
e8:1f:04:a2:d5:9e:12:af:10:65:8e:55:a7:35:73:c4:2a:87:
8b:b3:a5:89:2d:20:c9:1f:a3:58:a8:ae:ee:b4:f7:34:b6:5c:
c6:a4:7c:e6:a5:37:9c:32:ff:21:94:9c:56:1c:29:83:d0:aa:
5e:7b:53:34:54:cd:27:54:0d:c2:12:52:33:be:e5:c8:f3:73:
7d:b4:a2:22:c8:26:25:36:60:ba:27:2d:f3:04:b2:be:c5:d1:
38:e9:f4:21:21:3d:1d:2f:cb:25:5a:74:26:e3:22:98:75:ff:
57:61:f1:4e:c7:28:64:ef:f3:48:d7:2f:ac:4a:00:89:5c:37:
d6:d4:e3:ba:ee:59:89:d1:e8:67:4d:ef:ce:2a:c3:6c:4d:ef:
76:c3:84:fb:b2:cd:cd:3f:5f:d9:0c:0d:27:63:53:ec:aa:1a:
1c:f6:7d:91:c1:0d:a9:4a:b2:da:99:91:29:8f:98:8c:77:19:
84:c2:7f:b1:cf:82:90:88:77:85:e5:64:08:5c:9e:8c:70:80:
0a:85:15:b1:42:48:f3:0b:89:67:f0:29:a5:be:2b:08:59:e4:
bc:c1:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:09:24 2025 by rpki-client