Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/858c456d74e48be70d75332e16bb3acbdba938e0.roa
File: 858c456d74e48be70d75332e16bb3acbdba938e0.roa (raw, json)
Hash identifier: 6SgBeYiu3JpSrdoClLg6JdNRG1UCYP4l5TqJlJoO6GM=
Subject key identifier: 3E:7D:07:EE:C9:74:59:56:AF:39:F4:AA:9E:9B:B2:59:BD:26:80:AF
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 03AB64
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/858c456d74e48be70d75332e16bb3acbdba938e0.roa
Signing time: Fri 28 Jul 2023 13:27:32 +0000
ROA not before: Thu 27 Jul 2023 13:27:31 +0000
ROA not after: Mon 28 Jul 2025 13:27:31 +0000
asID: 15311
IP address blocks: 201.236.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240484 (0x3ab64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Jul 27 13:27:31 2023 GMT
Not After : Jul 28 13:27:31 2025 GMT
Subject: CN=858c456d74e48be70d75332e16bb3acbdba938e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:13:10:b4:fc:81:6e:8c:5b:97:7e:22:a5:a4:
ea:d7:55:f7:36:bb:1b:ae:cf:05:19:92:5a:d6:fd:
f2:6a:f8:e2:a7:dc:cd:8f:af:aa:70:7d:97:bf:88:
ac:3a:f9:69:28:60:9d:5f:1a:8c:9a:b9:71:d5:2d:
99:e4:2f:6b:c0:55:9c:f9:10:7a:88:b1:fc:5e:16:
1c:01:b9:14:64:30:ae:6f:36:c1:d7:a4:b1:2b:c8:
fc:be:96:51:c5:3c:d7:e5:7c:cb:36:91:80:46:5d:
e8:5b:86:9b:a0:02:22:a6:1f:5c:b5:7b:23:b0:f8:
00:00:4b:26:d1:12:99:11:2f:01:87:90:74:84:6e:
cb:65:d9:20:d7:b1:91:d8:0a:75:1d:65:67:df:9b:
fd:2a:1c:b4:a1:70:d5:ad:00:17:e0:55:1b:15:0b:
d2:1c:38:85:24:b9:47:6a:2f:9c:c2:73:e3:3b:58:
bf:5c:72:e5:1c:8a:8b:d4:bd:b8:81:a1:32:03:35:
98:ab:17:7c:5a:eb:27:b0:5c:18:7f:ed:5c:12:6e:
b3:f4:d5:60:34:45:0a:6f:58:eb:e2:0a:22:b4:89:
8a:33:e8:ff:59:45:37:12:88:59:e0:f7:c7:4f:a4:
cc:e0:34:c4:5a:2d:a4:6f:82:8d:a6:99:33:2f:ba:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:07:EE:C9:74:59:56:AF:39:F4:AA:9E:9B:B2:59:BD:26:80:AF
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/858c456d74e48be70d75332e16bb3acbdba938e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.236.128.0/18
Signature Algorithm: sha256WithRSAEncryption
60:d2:04:45:0e:34:45:b6:26:75:39:31:af:a3:ef:7b:70:d5:
c2:35:7e:a6:91:98:ea:1b:00:55:fa:43:65:fe:92:b4:08:c4:
fd:98:2c:26:69:d6:58:a2:a6:3f:33:b9:87:fd:2b:06:84:48:
2f:55:f7:f5:97:37:21:2d:cc:6c:35:cb:23:97:d0:0e:6c:81:
31:2d:95:37:c1:d1:6f:58:0d:94:2d:2a:07:96:72:0e:70:83:
80:f3:10:32:50:c8:bc:ce:67:ab:31:8e:48:60:c2:89:4c:9a:
5e:a4:07:7c:41:76:ef:e2:6e:50:62:03:1c:0e:97:4f:d0:68:
37:ed:57:8d:9c:db:ea:90:60:46:f4:09:e1:ff:a9:61:13:b8:
22:a0:ba:03:1f:12:cf:94:86:dd:0d:68:54:73:d1:dd:3b:f4:
03:ae:61:28:82:2e:c0:92:c3:dc:45:d4:9e:01:6b:74:2a:4b:
75:3e:32:94:07:7b:1e:46:ed:6b:3a:39:6f:c7:84:09:f5:c3:
ed:20:53:d2:0f:0d:59:9d:7a:53:5e:6c:96:74:33:9c:ee:72:
5c:04:be:69:0d:bc:2f:6c:53:8d:44:21:65:9a:50:0c:1e:ed:
1b:a3:d5:07:ee:16:95:5b:73:f7:d5:6c:53:10:2d:9b:6b:ec:
00:2a:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:22:07 2025 by rpki-client