Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135332e302f32342d3234203d3e20333936393832.roa
File: 3230302e33352e3135332e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: 4pQHWZ1aJyZDSxT4ZVmaGkFwGyvww5LkQfCANAd6B8g=
Subject key identifier: 4C:76:56:DA:AC:6C:26:D3:88:08:63:E5:A4:57:B7:8D:44:47:7B:84
Certificate issuer: /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial: 272D2576B75FE158BF226F651EF45C4BED0326CC
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135332e302f32342d3234203d3e20333936393832.roa
Signing time: Thu 07 Aug 2025 11:15:00 +0000
ROA not before: Thu 07 Aug 2025 11:10:00 +0000
ROA not after: Thu 06 Aug 2026 11:15:00 +0000
asID: 396982
IP address blocks: 200.35.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2d:25:76:b7:5f:e1:58:bf:22:6f:65:1e:f4:5c:4b:ed:03:26:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Validity
Not Before: Aug 7 11:10:00 2025 GMT
Not After : Aug 6 11:15:00 2026 GMT
Subject: CN=4C7656DAAC6C26D3880863E5A457B78D44477B84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:f2:21:d0:05:80:3d:2c:91:1f:e0:6a:1c:
37:8d:fd:a7:47:22:f5:84:ed:e3:60:6a:52:4d:69:
cd:3c:93:20:a6:60:6a:b7:70:63:79:5a:db:4d:e4:
8f:d5:3e:ff:97:de:19:20:e1:fa:63:ef:f2:04:bb:
6f:74:97:c2:46:7f:d1:ac:b2:e7:40:cb:6b:65:9e:
8e:1e:3a:89:2e:c5:28:3c:4e:b4:05:61:95:10:70:
65:8b:13:3e:ad:a4:21:85:ff:26:ed:53:14:ad:ce:
62:f1:92:d4:0a:3c:7f:67:63:eb:7d:07:9e:54:63:
ef:e0:66:7c:02:9b:13:f4:a8:90:60:b5:c7:9b:3b:
02:59:da:5b:a2:0d:e8:bb:cd:29:18:6e:ec:de:ac:
27:f2:58:33:48:1c:b6:12:ff:23:b8:59:8f:4e:d6:
cc:3a:6b:73:34:ba:f3:1d:4a:c2:bb:6c:de:f6:30:
cf:dd:6b:60:31:ff:4f:2f:9d:66:e5:73:25:7f:a5:
5d:03:53:aa:83:05:d2:a1:a0:7d:ac:1e:b5:b6:e0:
ad:e6:fe:fb:47:41:13:5e:32:1c:9f:61:dd:b8:32:
fe:47:33:08:f1:08:0b:b6:89:88:5f:fe:7a:23:b8:
4c:ad:69:34:68:a0:9e:7f:54:0d:82:80:3b:5b:c2:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:56:DA:AC:6C:26:D3:88:08:63:E5:A4:57:B7:8D:44:47:7B:84
X509v3 Authority Key Identifier:
keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135332e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.153.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2d:75:0d:b4:7a:da:68:4c:d3:28:8d:45:76:a9:20:88:2e:
f4:e4:eb:63:f0:34:c1:c7:e8:25:ea:ba:1c:bb:a0:62:bf:a3:
14:5a:d9:c5:fa:6c:67:5c:d7:1a:2b:e2:92:f2:18:55:f5:f3:
f9:98:8e:26:81:ec:52:ee:7e:16:43:d0:39:12:2c:bb:82:ba:
c4:cd:f8:77:35:77:51:84:2f:e7:cf:4f:26:0a:55:83:31:5d:
35:20:2f:f7:4f:a6:32:b6:62:c0:42:03:80:a5:ca:35:1d:69:
bd:d1:92:0e:f0:ea:43:87:b2:3b:7e:30:38:da:c8:3a:5c:9f:
4c:da:93:05:1a:91:96:75:6a:e6:9f:8f:82:b0:74:d9:13:ab:
51:a9:b4:f8:84:4e:2e:f2:80:10:19:41:37:be:9d:99:c3:07:
34:c7:cb:70:e3:46:43:de:fc:1d:51:19:8b:a0:a1:f4:d0:78:
37:8b:15:92:31:18:52:d3:d7:7b:93:ef:f1:98:0f:66:83:5b:
5a:e1:b0:96:0f:7d:6a:9c:21:d1:a8:35:f9:9b:cb:8b:40:b8:
69:ae:c0:e4:c0:04:cf:3d:f9:f2:bb:a1:88:88:53:2d:77:87:
01:09:90:ab:06:7e:c8:41:47:a4:50:5c:a2:bd:8a:11:0a:af:
01:12:fa:d2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJy0ldrdf4Vi/Im9lHvRcS+0DJswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNTA4MDcxMTEwMDBaFw0yNjA4MDYxMTE1MDBaMDMxMTAvBgNV
BAMTKDRDNzY1NkRBQUM2QzI2RDM4ODA4NjNFNUE0NTdCNzhENDQ0NzdCODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFvIh0AWAPSyRH+BqHDeN/adH
IvWE7eNgalJNac08kyCmYGq3cGN5WttN5I/VPv+X3hkg4fpj7/IEu290l8JGf9Gs
sudAy2tlno4eOokuxSg8TrQFYZUQcGWLEz6tpCGF/ybtUxStzmLxktQKPH9nY+t9
B55UY+/gZnwCmxP0qJBgtcebOwJZ2luiDei7zSkYbuzerCfyWDNIHLYS/yO4WY9O
1sw6a3M0uvMdSsK7bN72MM/da2Ax/08vnWblcyV/pV0DU6qDBdKhoH2sHrW24K3m
/vtHQRNeMhyfYd24Mv5HMwjxCAu2iYhf/nojuEytaTRooJ5/VA2CgDtbwtWxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUTHZW2qxsJtOICGPlpFe3jURHe4QwHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMyMzAzMDJlMzMzNTJlMzEzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM2MzkzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyCOZ
MA0GCSqGSIb3DQEBCwUAA4IBAQAqLXUNtHraaEzTKI1FdqkgiC705Otj8DTBx+gl
6rocu6Biv6MUWtnF+mxnXNcaK+KS8hhV9fP5mI4mgexS7n4WQ9A5Eiy7grrEzfh3
NXdRhC/nz08mClWDMV01IC/3T6YytmLAQgOApco1HWm90ZIO8OpDh7I7fjA42sg6
XJ9M2pMFGpGWdWrmn4+CsHTZE6tRqbT4hE4u8oAQGUE3vp2Zwwc0x8tw40ZD3vwd
URmLoKH00Hg3ixWSMRhS09d7k+/xmA9mg1ta4bCWD31qnCHRqDX5m8uLQLhprsDk
wATPPfnyu6GIiFMtd4cBCZCrBn7IQUekUFyivYoRCq8BEvrS
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:08:47 2025 by rpki-client