Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/592516e066be90dbebb448c445c082a1fd777045.roa
File: 592516e066be90dbebb448c445c082a1fd777045.roa (raw, json)
Hash identifier: S0KM7FbfivNLtRgRF4snZT30nZbaZUcDhpWw6pWaxK8=
Subject key identifier: A6:29:99:21:71:C4:B9:F4:2B:C0:4B:82:B1:D8:EB:A2:92:AF:5A:C1
Certificate issuer: /CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
Certificate serial: 2870CD
Authority key identifier: 81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/592516e066be90dbebb448c445c082a1fd777045.roa
Signing time: Sun 25 Feb 2024 20:06:56 +0000
ROA not before: Sun 25 Feb 2024 20:06:55 +0000
ROA not after: Wed 25 Feb 2026 20:06:55 +0000
asID: 267781
IP address blocks: 200.229.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2650317 (0x2870cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
Validity
Not Before: Feb 25 20:06:55 2024 GMT
Not After : Feb 25 20:06:55 2026 GMT
Subject: CN=592516e066be90dbebb448c445c082a1fd777045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:03:99:77:12:5a:b6:b3:80:f9:39:bd:05:bc:
b6:cb:17:83:0e:8a:03:e1:30:30:7a:b3:49:2e:fe:
24:21:45:3c:10:45:c5:62:8e:70:86:4e:ea:97:8c:
fa:ec:15:39:ff:2e:6a:bf:00:44:40:0e:0d:eb:d4:
04:f9:f5:b0:88:06:ee:34:b1:44:3a:34:76:53:60:
90:94:76:da:df:5f:16:fb:58:fb:6a:5c:42:cf:81:
ac:ef:7d:d7:54:18:c2:26:9d:d2:4b:f2:3d:6d:a1:
2b:02:a0:33:e5:f2:86:78:40:68:32:bf:87:cb:d6:
db:7c:08:37:d4:5b:f7:f6:60:b5:32:c4:5b:11:14:
de:56:0b:93:3c:e9:9f:19:a8:f5:bc:91:49:5d:b5:
12:24:f2:cd:27:b3:9a:50:0c:fb:0f:3c:eb:4e:11:
36:d5:d2:8c:c3:51:f7:9b:03:c5:e4:4d:cb:17:92:
0a:29:1e:52:aa:37:47:77:d8:cd:98:0c:62:df:5b:
eb:0e:23:8b:03:ad:26:4d:63:7c:79:6c:ae:25:15:
98:17:4b:82:02:ac:8a:07:bc:75:4c:dc:07:cf:94:
31:ed:85:c3:7b:58:65:1f:ab:bf:fc:41:2b:35:93:
64:04:ee:ce:28:3c:7a:e1:75:98:bd:45:41:c2:ab:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:29:99:21:71:C4:B9:F4:2B:C0:4B:82:B1:D8:EB:A2:92:AF:5A:C1
X509v3 Authority Key Identifier:
keyid:81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/592516e066be90dbebb448c445c082a1fd777045.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/79accacc0240f5ad175ea4c7ab2598e062ba3852.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.216.0/24
Signature Algorithm: sha256WithRSAEncryption
50:39:d2:34:28:4a:be:38:58:71:a5:5b:ad:25:01:c6:24:54:
c1:15:6e:4b:26:ea:3a:b1:51:4c:6f:5d:fc:73:05:12:d3:49:
02:a4:c7:51:cc:b1:a2:94:1c:c0:dc:07:9f:24:09:0a:63:e0:
38:61:62:57:f2:45:89:64:bb:e8:45:ee:f3:b0:a5:5e:a7:c0:
ff:cc:e2:fa:9e:0c:12:bf:10:11:af:e7:f6:64:ef:62:f2:7d:
5e:2a:e1:59:9e:d9:7e:0b:35:62:54:22:68:19:1a:94:93:ab:
8f:ee:d3:46:f4:59:86:24:ac:92:83:f7:84:9c:92:8e:10:7a:
91:20:72:d9:48:c0:da:8b:cf:93:24:6f:78:b0:c3:f5:bf:a4:
bd:8e:82:93:03:73:df:5a:65:09:9d:18:6a:6d:99:b1:e4:c9:
83:12:45:06:2d:99:b4:b8:a0:eb:a9:3f:40:68:20:e3:86:d7:
4c:6e:fa:45:8b:0a:15:5c:97:81:0f:31:c2:9b:6f:b3:fb:ca:
6f:4f:04:a6:d2:e4:98:ab:1b:55:8a:f4:3f:aa:62:2c:12:2d:
31:a3:7c:36:23:62:37:88:92:4b:1a:c2:69:74:85:89:00:58:
c3:20:8d:2e:bf:8a:83:ad:d8:69:f7:2d:6f:5b:07:9d:ef:11:
3b:40:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org