Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b994c4a0-89b1-48ad-b381-fb095ea39951/66c89a25af189cda04c6d1b00301bf38cac12b0a.roa
File: 66c89a25af189cda04c6d1b00301bf38cac12b0a.roa (raw, json)
Hash identifier: zJg1XCXMBzinudXuU2BB3GOj4rOgiyKyW4S26RvnYSI=
Subject key identifier: F2:6F:84:67:5A:CE:B3:5A:FC:9E:65:6C:17:A7:8D:E4:EB:44:7E:36
Certificate issuer: /CN=9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5
Certificate serial: 01A222
Authority key identifier: 3D:1C:E7:25:75:2B:68:39:0F:21:A0:1F:29:5C:28:F6:58:9F:DB:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b994c4a0-89b1-48ad-b381-fb095ea39951/66c89a25af189cda04c6d1b00301bf38cac12b0a.roa
Signing time: Tue 22 Aug 2023 15:02:27 +0000
ROA not before: Mon 21 Aug 2023 15:02:27 +0000
ROA not after: Fri 22 Aug 2025 15:02:27 +0000
asID: 269998
IP address blocks: 200.59.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107042 (0x1a222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5
Validity
Not Before: Aug 21 15:02:27 2023 GMT
Not After : Aug 22 15:02:27 2025 GMT
Subject: CN=66c89a25af189cda04c6d1b00301bf38cac12b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:f5:6b:0a:08:fd:60:bf:e6:ac:5e:4b:c5:
18:96:89:c4:e3:c9:72:e8:35:33:c2:0a:d3:7d:ba:
3e:ab:cd:91:60:50:60:d5:ff:e9:de:94:c8:8a:05:
c0:54:26:c2:87:5b:72:9c:36:a0:62:76:98:29:b2:
b4:12:3c:96:c3:59:b0:fb:50:83:44:c4:7e:ca:5e:
e9:24:b6:3e:0d:2f:1e:93:f1:16:1a:a0:31:e0:aa:
7c:9e:9b:74:7c:43:1e:60:40:1e:b2:a4:f6:d7:af:
34:e8:48:c7:7c:a1:bd:40:c7:0d:96:64:57:59:5b:
d0:ce:b2:80:f0:b2:9b:74:a1:72:bc:15:49:82:dc:
1a:80:a0:1b:12:d3:13:ca:15:cd:ac:22:63:73:e1:
36:38:bd:f7:a4:96:2e:c3:e5:80:65:68:48:ae:f3:
b9:b2:23:f0:6f:65:a5:00:cf:92:ac:b9:b7:0c:82:
33:28:b8:23:5c:e0:ab:bd:d4:99:f1:c7:a1:64:28:
35:bc:32:3d:3b:d9:30:fe:8a:45:49:81:9c:dd:e0:
d6:17:bb:9e:f3:1a:c0:a0:2a:86:af:c5:5a:b7:6d:
f5:ba:22:10:27:ea:72:23:74:2b:d3:a8:8e:c5:44:
12:35:4b:3a:25:d6:20:04:62:30:4e:6f:70:85:1c:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:84:67:5A:CE:B3:5A:FC:9E:65:6C:17:A7:8D:E4:EB:44:7E:36
X509v3 Authority Key Identifier:
keyid:3D:1C:E7:25:75:2B:68:39:0F:21:A0:1F:29:5C:28:F6:58:9F:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b994c4a0-89b1-48ad-b381-fb095ea39951/66c89a25af189cda04c6d1b00301bf38cac12b0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b994c4a0-89b1-48ad-b381-fb095ea39951/9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.59.208.0/22
Signature Algorithm: sha256WithRSAEncryption
10:d6:ba:2b:11:58:30:f7:3d:36:2a:f0:30:7d:bf:23:4d:2b:
69:23:b0:22:b7:b3:b5:08:51:12:cd:63:07:9b:04:e9:06:ec:
f7:ab:0a:73:66:ca:aa:f4:2a:c3:7e:1e:aa:1d:f5:a8:c7:a8:
2f:26:02:fb:92:7e:1a:af:f5:c7:11:2f:51:48:a2:bb:d2:10:
d0:d8:26:80:db:0b:96:94:a1:7c:05:0b:51:b0:d0:94:e1:81:
e9:ec:60:e4:29:9b:f5:a6:12:af:2d:05:f6:c9:43:d2:52:0f:
d5:3f:19:42:11:8c:f5:67:3a:99:58:27:16:64:42:b8:53:d1:
ac:eb:b9:57:2a:5b:4e:36:9c:c5:5b:6a:13:5d:87:16:c9:46:
4f:77:96:f5:51:1e:7f:44:f6:11:df:e8:a8:66:5c:b3:ef:63:
5c:29:7d:b9:18:8e:a8:bc:f5:d5:6e:af:7a:f4:74:bc:c2:c5:
09:96:a5:40:eb:4f:ce:68:e3:58:61:a4:13:c4:d7:10:4b:cf:
3d:ae:d8:92:0e:bd:8b:37:0a:48:3f:2d:0e:77:fa:13:3c:6b:
7e:da:85:c9:3f:69:fe:6f:46:00:28:20:b1:be:de:bf:73:57:
7e:9e:0c:5e:49:cb:af:2b:47:d8:fb:1b:5d:0f:42:aa:94:d4:
67:f8:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org