Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/39c7a5b459607ec7855a42d50d6c98bd62761cf7.roa
File: 39c7a5b459607ec7855a42d50d6c98bd62761cf7.roa (raw, json)
Hash identifier: 7TyBLnuOwXMDTe3dKWTRfPIPJ0DMagTeekT9/oVrqQ4=
Subject key identifier: 43:A0:AB:F9:2B:DE:14:10:E0:0A:DB:35:6E:CD:71:46:3D:A2:02:A3
Certificate issuer: /CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Certificate serial: 1C63B6
Authority key identifier: 2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/39c7a5b459607ec7855a42d50d6c98bd62761cf7.roa
Signing time: Thu 17 Aug 2023 19:55:19 +0000
ROA not before: Wed 16 Aug 2023 19:55:18 +0000
ROA not after: Sun 17 Aug 2025 19:55:18 +0000
asID: 273007
IP address blocks: 200.107.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860534 (0x1c63b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Validity
Not Before: Aug 16 19:55:18 2023 GMT
Not After : Aug 17 19:55:18 2025 GMT
Subject: CN=39c7a5b459607ec7855a42d50d6c98bd62761cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:eb:52:86:db:bd:6d:60:d1:70:5c:e0:d6:
b8:0a:f6:e1:1e:aa:b7:ad:65:d6:6d:e3:63:d8:db:
f4:c6:6c:c0:dc:c5:c2:fc:45:b0:7f:3d:68:50:a6:
c7:da:e1:83:fa:ce:ad:5f:1d:87:4e:0b:09:56:e8:
a9:0c:94:38:5e:32:95:de:60:05:b9:84:fa:d8:7d:
8e:ee:0c:55:88:d3:ff:1c:9a:5a:b5:4f:af:75:21:
b8:0a:ae:80:d9:01:7d:32:49:65:bd:71:5e:7b:d1:
0d:68:5b:f4:ef:0c:44:07:37:a6:49:92:3c:46:0a:
8f:e5:8e:04:1a:97:3f:61:63:84:7e:9f:8c:3f:48:
9c:f1:10:77:10:ab:6e:3b:b3:d4:61:e6:81:a7:e2:
33:dd:95:73:1e:3c:df:ec:73:44:0f:f8:cc:98:be:
7c:40:8f:21:40:98:cc:03:0c:ef:6e:df:21:cb:da:
5a:cf:7a:13:1b:be:a3:9b:1f:a7:39:e0:78:f7:ce:
da:e0:d5:27:6e:df:56:42:48:d8:15:e7:9b:d6:88:
3f:0d:21:b3:84:b2:a9:9b:83:3c:ba:a4:3a:af:e7:
c8:c7:91:0f:b5:9e:c0:13:51:89:7d:e4:da:60:56:
42:53:72:67:a8:f6:96:5c:fa:d8:b6:7f:3f:ae:46:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A0:AB:F9:2B:DE:14:10:E0:0A:DB:35:6E:CD:71:46:3D:A2:02:A3
X509v3 Authority Key Identifier:
keyid:2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/39c7a5b459607ec7855a42d50d6c98bd62761cf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.107.204.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e2:ef:d4:a0:ca:dd:d7:e3:6c:3a:a4:03:1f:67:e8:9b:5f:
37:52:ce:1d:f3:60:8e:2c:d5:4d:26:7f:71:ce:cc:93:c8:ad:
69:bc:d1:9b:79:e3:a3:33:70:b6:f9:82:de:3c:4a:f7:c7:84:
a0:70:dc:0a:9f:a7:23:5a:ad:8f:eb:95:62:81:8c:58:ff:e0:
61:3a:f0:29:f8:f5:0c:94:47:74:f9:0f:30:02:83:f9:57:03:
98:90:90:16:85:b4:81:ae:b8:46:56:99:f4:78:b3:bf:19:19:
26:72:f2:04:07:86:ea:ae:ed:a5:95:5a:ef:d7:59:35:61:d6:
ad:bf:ea:bf:55:67:a8:eb:70:9f:c8:25:4f:90:6e:be:53:07:
f5:c6:1b:fa:a6:84:13:3b:31:92:6a:15:d3:31:c8:bc:ab:53:
5a:e7:7b:ac:bf:37:79:fb:d2:00:6f:f2:92:1b:ee:fb:f4:b2:
f3:8a:6f:99:c9:ed:dd:37:99:71:ca:b7:fd:4b:45:98:df:e6:
55:f8:86:a9:b8:71:74:70:33:e0:d9:3c:16:43:88:e4:12:d4:
ac:9f:39:f4:4b:a1:31:8a:2e:31:32:33:08:92:c5:7f:4a:bd:
79:a9:2b:c1:1c:5c:79:42:74:66:d1:4f:88:60:d7:cd:85:4b:
6e:2f:ca:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:54:10 2025 by rpki-client