Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8c422c51f025e00055fb55286e87a01384afe7b3.roa
File: 8c422c51f025e00055fb55286e87a01384afe7b3.roa (raw, json)
Hash identifier: NIKYEA0I0dax7/BZcYB6VJHLqMOoKB/nESlyTfbxAx8=
Subject key identifier: 78:38:E5:8B:81:84:55:AD:82:9C:EB:5D:A5:AE:9A:59:A0:6B:16:65
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 20A608
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8c422c51f025e00055fb55286e87a01384afe7b3.roa
Signing time: Thu 23 Mar 2023 08:30:03 +0000
ROA not before: Wed 22 Mar 2023 08:30:03 +0000
ROA not after: Fri 21 Mar 2025 08:30:03 +0000
asID: 21599
IP address blocks: 200.46.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2139656 (0x20a608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Mar 22 08:30:03 2023 GMT
Not After : Mar 21 08:30:03 2025 GMT
Subject: CN=8c422c51f025e00055fb55286e87a01384afe7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:92:6b:49:cf:de:5b:1d:ec:62:dc:ec:06:
2d:e0:bb:88:4b:53:be:31:fe:dc:2a:d9:5d:63:af:
d5:3e:88:15:60:a0:ac:22:01:d3:d2:db:f1:0d:e8:
a0:92:ab:83:6e:88:59:23:3e:02:d9:e0:a5:80:d1:
13:7b:ed:69:60:08:3c:49:59:4d:8c:28:f4:29:e3:
b4:a1:f9:58:95:d6:c3:84:4e:77:6e:d0:f3:0d:23:
b2:99:06:88:85:e1:4d:1f:98:2d:6c:f1:7f:25:c5:
92:c2:22:ef:77:d3:0b:e3:65:65:3e:18:a0:99:fd:
79:66:d6:db:cf:3e:ec:c5:04:7a:b7:3a:23:35:57:
3e:0d:48:ff:6c:d7:b5:b2:fe:cd:65:a3:b9:92:7f:
48:1f:3a:2a:0e:63:9f:c3:c9:42:e7:f3:cb:94:2d:
b6:eb:75:2b:96:64:67:dd:08:10:c0:87:9a:d3:61:
50:8e:54:f7:88:36:76:84:5b:f3:d0:c4:e1:ae:1f:
db:90:10:e5:43:bd:5f:ee:6a:6a:13:3b:98:1a:80:
09:c3:7b:b5:90:cb:1e:6a:b3:c0:a0:ec:0f:13:81:
ce:bb:d6:80:ca:c2:33:3f:4f:75:90:4b:31:e5:fe:
3a:09:b2:1a:0f:e5:aa:6e:44:9e:be:f4:99:6b:a4:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:38:E5:8B:81:84:55:AD:82:9C:EB:5D:A5:AE:9A:59:A0:6B:16:65
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8c422c51f025e00055fb55286e87a01384afe7b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5c:01:1e:4d:b6:3a:fd:cc:2f:d0:6a:1f:87:64:1b:65:dc:90:
96:e7:a1:9e:d6:d8:eb:a2:23:4c:82:0a:1a:d4:fb:06:1e:b5:
3a:45:25:0a:21:25:4d:78:65:73:fe:6a:3b:05:74:40:72:cd:
17:e9:d8:84:c0:4d:fb:c8:e6:d8:62:5a:20:ca:48:8c:9c:26:
6b:61:34:b1:6f:e2:76:18:f4:02:d2:79:c8:3e:de:33:a9:38:
db:39:b9:8d:78:4b:e3:c7:c3:96:56:91:df:bb:2e:ee:0b:a9:
07:38:7f:15:10:af:7f:3d:ba:6a:a0:54:b4:90:5f:fd:32:e7:
7f:0f:20:38:fd:64:34:63:c5:23:45:9a:7c:b6:b8:a7:28:40:
1e:18:6d:ed:a9:e2:7f:1d:43:da:39:80:e2:d4:dc:58:73:c2:
cd:56:fb:5e:52:9d:2e:25:96:9e:0d:ca:71:07:2a:5b:c6:73:
8c:14:17:fe:13:36:99:8c:86:98:5b:4d:f3:4b:c2:38:1f:99:
c0:4f:70:1e:29:43:75:48:52:40:69:72:02:bc:17:e5:a3:ef:
74:3f:2c:fe:33:20:2c:77:24:9a:92:6f:22:62:42:b2:3e:99:
e5:44:d8:ef:fd:8b:a4:e8:1c:3a:a3:21:b9:9f:fd:3e:65:3e:
54:2b:47:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org