Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/61f6d7d68f9e69a2a01675af83e8a3db07b676d1.roa
File: 61f6d7d68f9e69a2a01675af83e8a3db07b676d1.roa (raw, json)
Hash identifier: Ec5Jrj+P0OgI9G90VsXMfNXvZ6YIwkkeSNW6ZuLBzRk=
Subject key identifier: 0C:63:A1:74:1F:11:9D:42:D6:88:77:7B:19:62:37:39:F6:97:72:6D
Certificate issuer: /CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Certificate serial: 29BB89
Authority key identifier: 1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/61f6d7d68f9e69a2a01675af83e8a3db07b676d1.roa
Signing time: Sat 16 Mar 2024 22:03:32 +0000
ROA not before: Sat 16 Mar 2024 22:03:19 +0000
ROA not after: Fri 16 Mar 2029 22:03:19 +0000
asID: 23383
IP address blocks: 200.30.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2734985 (0x29bb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Validity
Not Before: Mar 16 22:03:19 2024 GMT
Not After : Mar 16 22:03:19 2029 GMT
Subject: CN=61f6d7d68f9e69a2a01675af83e8a3db07b676d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:73:2f:45:e8:90:c3:3d:2c:83:01:4f:24:02:
98:b4:f7:0e:72:95:70:05:a2:27:5a:f2:30:b6:a3:
d3:a3:f0:3f:45:2d:10:90:17:7b:03:b1:e4:24:22:
8a:e2:04:6e:54:06:81:7a:2c:19:8c:94:4c:7c:3f:
1d:9b:db:b8:ad:35:d9:84:bb:a9:35:1f:87:20:99:
1f:2b:25:03:18:03:6d:89:09:ea:d3:0c:e0:77:1e:
af:86:6a:c5:42:20:81:96:83:5f:be:a1:68:af:eb:
b5:8f:02:6c:de:b7:47:2a:97:53:78:8b:2b:2a:9e:
7e:0f:f6:01:87:c8:11:3c:51:d4:de:30:d2:9a:94:
45:3f:b8:8d:b9:0e:04:08:cf:8b:01:04:cc:01:98:
cc:fb:ff:63:f7:99:9d:a5:50:48:4e:16:1a:c3:91:
8a:ea:6e:32:eb:5e:72:02:77:f8:af:41:68:0c:2e:
79:6f:04:33:1c:4d:41:a4:d1:16:89:b6:c1:92:4a:
b8:7f:fd:77:4b:d8:b3:fd:ee:9f:9d:40:b6:8b:70:
d3:78:4b:b7:ba:4d:c2:a2:5a:40:67:b8:fa:7b:7c:
66:c0:ce:f5:10:e1:ce:11:cf:bd:48:a0:ed:b2:36:
4e:d3:be:c6:21:57:4e:9a:5b:c7:64:83:75:b4:82:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:63:A1:74:1F:11:9D:42:D6:88:77:7B:19:62:37:39:F6:97:72:6D
X509v3 Authority Key Identifier:
keyid:1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/61f6d7d68f9e69a2a01675af83e8a3db07b676d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b5d1117ae408cf5674d277fb7690575abaf8ac60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.157.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b3:56:c7:46:20:ae:e7:f2:b0:60:52:66:a2:cc:56:c6:1c:
ec:b4:3f:e5:16:3a:d9:ad:29:8e:9c:bf:46:3d:59:0a:23:22:
c5:d6:df:72:75:9b:4a:ab:88:8f:7c:df:67:69:9f:cd:72:98:
a3:4a:bf:3b:08:a2:44:37:54:79:c6:d0:64:c9:8f:27:14:e5:
9f:30:a2:08:c0:1f:19:6d:fd:93:dd:34:60:33:10:f1:26:0e:
e6:1b:b3:04:87:8b:87:f0:f3:9a:a5:20:9b:cf:1a:aa:d8:69:
38:e0:de:40:9d:05:97:e6:18:19:e5:66:8e:fc:10:4f:69:f9:
dc:75:99:b4:76:29:bf:c6:55:dd:68:bf:62:89:b9:e2:f8:e3:
a8:3b:f2:87:ee:a0:8f:54:ec:8e:c1:57:43:53:e0:e7:83:3f:
9d:0b:5d:51:2c:7c:e7:98:bc:43:d7:fc:55:88:7c:aa:9a:d8:
7b:76:4a:76:28:b6:aa:26:6a:90:86:84:96:3d:58:50:32:d5:
c4:e6:53:5a:6d:09:23:89:ba:6a:c2:41:ff:59:fe:4f:3a:25:
d4:55:a0:40:6e:28:90:d5:5d:22:53:bf:12:81:32:2f:4d:b9:
72:f1:66:6e:50:0f:69:57:3d:99:97:39:d7:41:b8:53:32:b1:
24:01:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org