Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/e686e66b6c4808c3d849c5a20766fc396be1aefd.roa
File: e686e66b6c4808c3d849c5a20766fc396be1aefd.roa (raw, json)
Hash identifier: tfQLeNTg2nvPYPo7R0JCdjkQk0qfMdaqN4DUUapxdLo=
Subject key identifier: BC:3B:7A:3C:0C:D5:49:CF:2F:C0:74:74:28:08:BF:15:6C:AB:E6:60
Certificate issuer: /CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
Certificate serial: 0DAE88
Authority key identifier: A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/e686e66b6c4808c3d849c5a20766fc396be1aefd.roa
Signing time: Tue 20 Apr 2021 13:26:34 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Thu 24 Mar 2022 03:00:00 +0000
asID: 14522
IP address blocks: 200.50.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896648 (0xdae88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2022 GMT
Subject: CN=e686e66b6c4808c3d849c5a20766fc396be1aefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:bc:5b:72:b6:78:18:b5:27:bb:6b:49:56:
ec:fa:64:a6:db:89:39:eb:c1:35:76:03:65:d4:54:
90:32:76:ce:f9:26:3f:74:a3:01:2e:33:8f:63:1f:
8f:45:2c:44:21:77:ea:f5:d2:18:a4:31:31:42:9b:
a5:ca:37:cc:d5:7a:f9:9d:68:3d:ee:d4:33:e3:fd:
cb:9b:1e:e7:0c:3f:84:96:ac:40:23:93:cd:d9:08:
fb:2f:c6:42:97:78:63:e9:e1:3e:61:50:7c:48:92:
4b:8d:ec:79:b4:cd:3b:b5:44:be:aa:fd:4d:08:e7:
f6:33:de:86:c0:75:3b:4b:bb:e0:81:56:1d:f7:ad:
3c:58:1e:9a:e3:3d:e2:53:eb:f7:76:96:50:c0:c8:
c1:71:fd:22:4c:57:61:e2:33:22:8c:f4:96:15:bc:
89:9f:6c:e7:dd:c2:39:b4:c3:35:30:a3:91:f4:8f:
75:07:00:0a:2f:dd:bf:be:b7:12:83:17:bf:7e:4b:
40:ac:a6:ec:1d:b7:05:83:6f:0b:e5:6d:3b:ab:e5:
c2:aa:06:61:70:ed:dc:4b:97:18:8e:61:60:7c:7f:
8f:33:bc:1e:77:80:12:4d:c1:86:dc:50:ae:0d:31:
dd:0a:68:47:d8:91:e2:a6:0d:c9:13:17:aa:d8:f2:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3B:7A:3C:0C:D5:49:CF:2F:C0:74:74:28:08:BF:15:6C:AB:E6:60
X509v3 Authority Key Identifier:
keyid:A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/e686e66b6c4808c3d849c5a20766fc396be1aefd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/bd7f33cd5376098fb55565247f8dae5ea5de2952.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.232.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fc:a7:1f:84:4f:a7:e6:00:8f:48:3b:1e:30:76:2a:ba:3e:
fd:b0:cd:65:bb:ec:e2:9c:f6:84:b1:00:81:f4:d3:1c:c0:78:
8f:3b:fe:7f:bc:61:b5:ba:0d:12:12:9a:2d:2a:49:83:46:91:
bb:3d:b2:6e:ee:da:19:da:d7:c9:4b:52:3f:5c:50:df:8f:b3:
66:7d:56:1f:0c:df:22:8e:c8:ba:af:6b:05:65:e2:19:22:70:
9e:79:fb:0a:dc:74:e4:20:5a:31:cc:0b:6f:a2:9c:0f:27:eb:
24:3e:f4:88:4f:cd:83:c7:63:06:ee:8e:ca:06:a5:7d:e0:a4:
40:12:3e:e5:36:bf:a3:47:f4:9f:d2:62:3b:cc:b0:52:1f:c4:
f8:a8:15:05:d5:a4:9c:6b:e9:46:c0:51:1d:11:6c:8c:65:90:
f1:d4:02:4d:89:ad:f5:31:1a:ef:a9:d3:6b:fd:71:0b:5d:80:
01:40:3a:23:d2:a2:5b:9c:a8:72:79:3b:71:f1:ea:7d:42:e2:
47:06:5d:61:d7:0e:ed:5d:92:33:a8:db:ad:2d:42:f9:d3:50:
47:01:8f:aa:7e:37:4a:50:e7:f0:71:71:3a:5e:0e:3c:b7:fb:
90:f9:32:05:97:e9:c8:8b:a8:f3:1c:3a:11:e4:87:d2:4b:5e:
6a:fc:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org