Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32332d3233203d3e203230343733.roa
File: 3230302e33352e3135342e302f32332d3233203d3e203230343733.roa (raw, json)
Hash identifier: YCfTrgq+nYjJAsqm0L+yUkHIsH9JlRTqtQdsPbgPabY=
Subject key identifier: FE:F3:CA:9C:58:DC:CF:98:CA:73:07:30:F5:3F:15:F9:7D:B8:32:0B
Certificate issuer: /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial: 160DAFBC0EF5DFF45776862618FE42956DA7ED7F
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32332d3233203d3e203230343733.roa
Signing time: Tue 29 Jul 2025 15:25:00 +0000
ROA not before: Tue 29 Jul 2025 15:20:00 +0000
ROA not after: Tue 28 Jul 2026 15:25:00 +0000
asID: 20473
IP address blocks: 200.35.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0d:af:bc:0e:f5:df:f4:57:76:86:26:18:fe:42:95:6d:a7:ed:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Validity
Not Before: Jul 29 15:20:00 2025 GMT
Not After : Jul 28 15:25:00 2026 GMT
Subject: CN=FEF3CA9C58DCCF98CA730730F53F15F97DB8320B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:63:c1:96:dc:62:4a:cc:aa:cd:ad:8a:2a:
2a:31:2d:5b:6b:20:02:1a:6b:6c:f0:6a:aa:ab:ca:
f5:a1:63:4f:b3:b7:e4:b5:f5:c2:f7:61:0a:3d:04:
51:5f:3f:9f:3c:50:51:f4:cc:d3:f4:da:b9:75:60:
59:ba:79:bb:04:d7:7b:e6:21:a6:cc:23:3b:e8:fd:
f2:4e:60:a2:4a:dd:3f:bd:ba:95:09:95:60:4e:02:
80:ff:a3:5e:b8:ea:2c:53:ee:fd:7b:a6:77:d6:7e:
cb:f8:35:7d:14:6c:91:99:b7:0a:57:68:53:56:58:
fc:78:28:bb:91:d6:a9:7a:f0:35:8f:4a:16:76:8f:
3c:ee:27:bb:73:de:31:a2:00:01:f2:60:73:f7:4a:
2e:d7:de:c8:d7:4c:67:10:f3:ca:81:f8:92:27:d5:
c3:e0:38:ca:7b:e1:b0:02:3f:e0:d1:7b:4e:8b:a7:
77:95:8b:1e:cf:b5:35:40:33:7d:9d:c5:65:7e:99:
76:27:b2:e7:23:67:ff:73:05:bf:66:3e:cf:75:0d:
4c:01:9d:1a:ca:a1:73:df:55:31:9a:40:24:5d:82:
bc:1a:92:57:ec:ea:56:25:a4:60:67:cc:c8:0f:89:
d8:0d:a8:4f:31:96:e0:02:91:79:01:07:bc:83:8d:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F3:CA:9C:58:DC:CF:98:CA:73:07:30:F5:3F:15:F9:7D:B8:32:0B
X509v3 Authority Key Identifier:
keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32332d3233203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.154.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:45:14:83:2c:c7:59:e0:1d:49:04:12:7b:c1:26:fb:18:ff:
68:a6:7c:c8:7c:f9:b7:62:a6:1b:f9:a0:7c:f0:0f:4e:56:7b:
02:07:37:45:7f:e3:15:84:c7:a2:0c:4a:d5:c2:a0:e1:21:d3:
a2:c7:ef:c7:54:b0:ee:72:23:b8:38:b6:bd:51:13:f4:52:cf:
e7:b3:fc:de:50:47:61:de:54:e2:06:6a:eb:e9:78:fd:f8:25:
d6:b0:a4:4d:37:d9:87:93:a4:44:b2:4e:ea:e7:f6:f4:70:da:
24:99:a6:68:8f:ea:28:10:19:2a:13:c8:ad:02:f8:49:3d:3d:
70:ca:7a:86:39:6d:10:96:dd:35:f4:dd:c3:60:30:67:b7:19:
80:fe:12:53:63:87:52:ef:42:0f:a8:d3:37:07:aa:87:68:21:
aa:72:52:8d:10:4c:4f:8a:cc:63:41:e8:3f:c5:19:4d:12:72:
96:75:49:f1:21:22:48:e0:91:99:77:49:64:4e:66:4d:5b:68:
2b:0d:71:7c:0c:d4:22:f8:d8:b6:f2:e2:14:13:a3:07:85:e5:
10:c4:93:50:55:e7:ea:da:72:e5:c7:d6:65:e0:54:6e:83:ac:
4e:b1:af:fa:b1:ce:c9:29:17:92:27:cb:91:16:cb:3b:e6:ed:
44:e6:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:39:31 2025 by rpki-client