Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/3e42280bae86014dc1d39e3bf67b3059c5473cfd.roa
File: 3e42280bae86014dc1d39e3bf67b3059c5473cfd.roa (raw, json)
Hash identifier: qpahPz6E63uQuX9wEtCSBN9qRzhekeTjgri7MSDjRXA=
Subject key identifier: EE:11:60:C5:34:DD:A7:6F:17:76:EC:0B:12:DA:54:F5:F2:34:3F:5A
Certificate issuer: /CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
Certificate serial: 2747B1
Authority key identifier: E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/3e42280bae86014dc1d39e3bf67b3059c5473cfd.roa
Signing time: Thu 16 Nov 2023 14:06:11 +0000
ROA not before: Thu 16 Nov 2023 14:06:11 +0000
ROA not after: Sun 16 Nov 2025 14:06:11 +0000
asID: 7049
IP address blocks: 200.59.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2574257 (0x2747b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
Validity
Not Before: Nov 16 14:06:11 2023 GMT
Not After : Nov 16 14:06:11 2025 GMT
Subject: CN=3e42280bae86014dc1d39e3bf67b3059c5473cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:c4:1e:d7:99:3f:30:14:75:3c:2e:7a:63:
d2:b3:a9:62:0f:f2:d5:18:a1:fa:50:ee:89:e9:e7:
a7:21:80:79:94:aa:b5:90:03:28:9c:e5:70:3d:d5:
65:b6:b1:26:6d:39:4f:b7:da:cc:e6:fb:76:38:27:
e4:53:f8:25:73:1b:db:9b:86:0c:b6:e6:74:f6:5f:
16:f3:12:9a:9a:ae:68:81:4f:d7:a5:91:3f:b8:e5:
f8:e0:47:b7:1b:e4:5a:21:00:92:40:4a:20:d6:2c:
8e:6b:3f:d1:bb:3f:6f:b7:a0:c0:2b:6c:8e:c3:ab:
28:1b:f9:04:4f:6f:dc:70:83:b8:a8:9b:90:39:f2:
df:c1:fb:97:76:5e:2a:b0:34:41:78:88:88:be:60:
47:99:b0:82:7c:de:f7:9e:76:a5:13:25:ee:31:ab:
f0:47:c1:77:60:db:9c:2e:2e:e5:4d:78:bc:0b:0d:
45:69:5b:07:35:d4:93:e0:28:76:7a:ba:ad:52:06:
6e:54:ee:e3:37:4b:9d:10:fb:9b:61:5e:4e:3d:02:
b9:fb:e4:c7:13:d5:f8:d2:6f:10:76:9b:18:c3:ea:
18:5a:be:85:7f:dc:3d:29:4c:b9:c1:0e:77:33:ce:
d3:40:1e:7c:2e:9b:3c:7d:99:ba:d1:8f:f0:8f:e5:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:60:C5:34:DD:A7:6F:17:76:EC:0B:12:DA:54:F5:F2:34:3F:5A
X509v3 Authority Key Identifier:
keyid:E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/3e42280bae86014dc1d39e3bf67b3059c5473cfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/07a3e63d1966870c34f83b79e6705d8dc3f9b809.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.59.206.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a1:e8:f5:82:26:9e:05:5c:e4:f0:39:bb:c8:f4:ab:54:03:
8c:3e:8f:0c:39:86:e1:cd:dd:be:32:f6:6a:12:46:18:63:52:
fd:19:51:54:a1:62:c9:cf:8c:b6:ec:55:2c:5f:4c:9e:c9:b6:
7f:a2:69:9f:ff:69:93:de:01:50:50:fb:1f:2a:2b:9d:a5:19:
2c:05:dc:fc:a4:ec:08:d7:f6:4d:7f:d1:e3:4a:1f:bb:af:d7:
ec:9b:88:2b:50:c7:a6:df:e7:ac:2b:c3:c9:53:a5:90:30:0b:
b4:86:6c:6b:69:a3:e0:4b:5d:31:b1:5b:10:ad:b6:6c:5b:32:
ad:da:90:cc:ea:98:4d:30:87:f3:b8:f0:c8:5b:6d:81:48:a4:
e9:8a:3d:fa:20:47:7b:d0:aa:1b:59:70:cd:f3:af:f7:76:0b:
20:a3:a5:7b:81:a4:2b:dd:2c:81:1d:66:82:40:8c:06:df:29:
e7:fc:df:87:fc:08:2c:f1:d5:eb:64:c0:23:51:5a:e7:2a:be:
c7:48:76:ee:e3:4d:1d:fb:2e:89:61:c7:c3:02:c4:6c:9e:75:
ac:7d:5d:ea:27:4b:60:86:cc:be:36:e2:2f:b4:98:91:ad:cf:
e8:6a:bf:53:52:44:74:9d:2d:29:80:eb:af:ff:28:37:23:77:
9f:52:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org