Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e20333936393832.roa
File: 3230302e33352e3135342e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: DroVdXE3T7CZI3nY15rSZw/tmggKydXzy44EGUH0COw=
Subject key identifier: C1:38:B6:C8:DD:95:3A:C9:B5:EB:A6:1A:5D:7C:A5:43:C2:6D:35:41
Certificate issuer: /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial: 356B6D02E4ED48D3772310C34EF02911464D96D0
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e20333936393832.roa
Signing time: Thu 07 Aug 2025 11:15:03 +0000
ROA not before: Thu 07 Aug 2025 11:10:03 +0000
ROA not after: Thu 06 Aug 2026 11:15:03 +0000
asID: 396982
IP address blocks: 200.35.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:6b:6d:02:e4:ed:48:d3:77:23:10:c3:4e:f0:29:11:46:4d:96:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Validity
Not Before: Aug 7 11:10:03 2025 GMT
Not After : Aug 6 11:15:03 2026 GMT
Subject: CN=C138B6C8DD953AC9B5EBA61A5D7CA543C26D3541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:92:0e:16:2a:3e:52:f5:6c:b5:53:52:ae:
f4:61:17:0a:31:a3:fa:17:4c:46:b8:44:ea:00:f7:
ed:57:af:2a:df:04:f2:34:a5:0f:fd:11:5e:f9:be:
c3:e2:61:ce:35:17:0e:57:a4:c1:f4:b5:c2:8c:b0:
6f:cc:35:f2:57:76:12:3c:92:c8:13:e3:26:74:cf:
95:30:6c:af:67:f5:4b:23:fc:14:dd:e0:33:77:3f:
62:cc:a2:2d:36:1f:73:8c:f0:16:e2:ce:82:c5:da:
76:14:6c:28:32:c1:03:5c:74:f2:37:2e:f4:ab:68:
99:54:1b:c3:0f:70:1a:e8:98:4f:6d:99:0d:b6:30:
e3:e9:5d:d8:aa:29:bb:43:de:4d:3d:b3:92:cf:91:
c3:23:6c:46:34:92:b4:02:fe:62:d1:10:f7:d1:c9:
2d:36:99:e5:d0:16:9c:07:35:0b:dd:58:43:0f:9e:
57:7f:f1:45:c1:4e:39:57:da:6e:15:af:33:22:5b:
68:dd:f1:67:d0:e0:3c:ef:7f:14:8d:a5:57:1f:1a:
3e:2f:94:c4:3e:33:cb:b3:9a:09:28:a6:0b:24:ac:
0e:4d:a5:8a:79:9f:77:38:da:26:bb:dc:5f:d2:05:
6a:46:ef:4b:2f:c5:c6:d3:1c:60:90:af:e7:4f:0b:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:B6:C8:DD:95:3A:C9:B5:EB:A6:1A:5D:7C:A5:43:C2:6D:35:41
X509v3 Authority Key Identifier:
keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.154.0/24
Signature Algorithm: sha256WithRSAEncryption
77:73:a2:50:ee:69:95:fc:53:54:a3:88:cf:92:e2:69:5c:49:
db:cd:4a:90:2a:3f:87:c1:a3:2f:d9:4d:9b:19:28:3f:b1:cf:
ab:47:89:da:07:56:e2:6e:cb:3e:95:42:80:ae:ef:fe:45:5c:
1c:2d:ad:dc:ea:57:f1:78:ba:52:13:a4:be:b0:0a:26:cd:3e:
e6:fa:9e:f0:30:a5:e3:39:5b:9c:d9:1a:58:70:66:c7:99:62:
59:b7:ff:be:e3:d0:9e:86:dd:13:d2:7c:12:ef:a0:01:ee:89:
f0:34:55:ac:16:27:43:86:8b:be:ad:f0:d0:50:99:c6:a5:37:
ff:7d:0f:a7:2c:cb:77:8e:06:ea:cf:b3:48:08:0b:aa:ce:17:
65:95:97:4b:47:7d:5f:95:32:cc:8d:4b:a6:5f:cd:60:91:8f:
20:49:15:22:99:0b:bf:1e:e7:bf:5a:92:c8:c7:15:55:89:3e:
bf:39:4d:da:fd:7b:e9:64:a5:d8:f6:32:95:96:67:bd:b4:48:
ec:a8:09:df:9f:f0:32:53:e5:f0:fc:3d:79:7b:7a:ed:b8:32:
41:c3:20:04:17:ad:97:c5:11:3e:54:a6:da:31:04:77:36:a1:
65:e6:c6:2b:0f:8f:1a:ca:6c:21:6e:8b:14:fa:0a:25:09:38:
bc:c5:fc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:08:57 2025 by rpki-client