Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343733.roa
File: 3230302e33352e3135342e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: 2SbnHVuoMkquIjfcjVlEwQSay4DiwD8r5olG5In6vUU=
Subject key identifier: 6A:0A:F6:FA:C1:4D:55:D0:4F:55:0F:EC:B2:FC:5B:DF:71:E7:5B:86
Certificate issuer: /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial: 2017B02189B3AF9353E894247381514D0ECAA95C
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343733.roa
Signing time: Fri 09 May 2025 10:50:01 +0000
ROA not before: Fri 09 May 2025 10:45:01 +0000
ROA not after: Fri 08 May 2026 10:50:01 +0000
asID: 20473
IP address blocks: 200.35.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:17:b0:21:89:b3:af:93:53:e8:94:24:73:81:51:4d:0e:ca:a9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Validity
Not Before: May 9 10:45:01 2025 GMT
Not After : May 8 10:50:01 2026 GMT
Subject: CN=6A0AF6FAC14D55D04F550FECB2FC5BDF71E75B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:d7:b1:23:49:bc:02:ef:0f:40:7a:70:3d:
a1:d2:f0:38:62:b5:5b:b6:2c:f1:69:7d:60:5a:25:
ea:c5:fb:71:4c:63:74:ad:da:28:7d:d8:35:f2:4f:
7c:9b:49:0e:4b:cb:38:39:aa:c9:2e:a4:99:22:b4:
54:62:04:e3:70:b1:88:2f:f6:b1:e8:13:ce:f7:d6:
8d:a2:43:e1:11:d0:86:4a:66:28:d4:07:20:8d:4c:
c0:06:0a:e2:cf:88:17:b9:5f:b9:53:36:69:77:4d:
bc:c2:55:2b:8b:5a:b2:4d:92:de:97:4a:f7:74:4b:
c3:77:fd:fb:58:33:16:bd:e0:d1:48:cb:21:df:b8:
b8:a8:5f:af:43:f3:fd:c6:84:98:b5:b5:a1:78:00:
a7:3a:be:15:ad:a9:bf:ae:f6:c9:48:2d:98:4b:7b:
95:81:c0:78:4c:38:d8:49:04:c3:d2:35:43:d2:6f:
5e:91:b3:c9:45:da:0b:e5:1e:89:87:6a:b5:ef:57:
ec:1f:3e:e1:12:e4:f7:c8:6f:eb:22:69:a7:f8:0e:
43:68:c5:7d:8e:a0:04:b8:f1:91:f6:4a:69:9a:da:
80:75:59:dc:f4:9e:2d:af:d0:f0:b8:8e:8d:af:6a:
9d:27:fc:d2:66:a1:cf:22:d0:c8:1a:f4:e6:da:a4:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:F6:FA:C1:4D:55:D0:4F:55:0F:EC:B2:FC:5B:DF:71:E7:5B:86
X509v3 Authority Key Identifier:
keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.154.0/24
Signature Algorithm: sha256WithRSAEncryption
73:17:e1:ae:ca:6b:ba:26:2f:5b:af:74:97:d8:a6:7f:89:8d:
8a:93:82:a8:a6:0a:6a:cd:8a:bd:04:10:94:06:51:c3:87:17:
0f:74:82:c8:83:17:09:74:1c:0b:97:31:40:d4:64:5f:84:4c:
85:16:72:33:0e:81:e7:dd:5b:8e:5d:a7:ce:cb:05:66:ad:01:
49:2b:e4:7f:2f:b7:55:27:f1:5d:6c:a0:2a:a3:ec:eb:0d:1d:
07:da:95:cb:cc:08:bd:ed:4a:41:db:de:95:ac:8f:d0:af:82:
e9:76:8c:f6:10:62:62:4d:0d:bc:19:cc:d6:b1:28:ba:38:5a:
59:ae:93:4a:be:41:a1:b5:dd:85:19:40:ae:79:a4:d1:34:96:
a3:b8:97:5e:3d:fa:ad:8d:d9:da:1d:04:cd:19:e8:49:16:52:
90:2c:8b:d9:d2:68:04:21:47:93:37:6c:32:39:92:a2:7e:7c:
39:d6:59:b2:f9:41:51:e8:12:0d:38:5b:3b:a4:1c:12:dd:d5:
9d:b5:a5:b4:94:45:7f:0c:82:53:6c:53:d6:9b:52:4e:d5:08:
16:30:07:40:9f:f0:df:d3:0f:61:a5:6a:fb:c1:ff:2c:5d:9d:
bb:bb:14:5f:59:f3:6d:ed:7e:e9:27:fa:6b:a3:f8:31:0c:be:
52:43:5c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:09:11 2025 by rpki-client