Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/3b8223b21a91ae5c65adda9681b450d69325a1e1.roa
File: 3b8223b21a91ae5c65adda9681b450d69325a1e1.roa (raw, json)
Hash identifier: tZSZhvhlSvVLwU/z0KgOh+IEg65S8in1azcFRugPQuI=
Subject key identifier: 3D:A0:A8:95:D1:19:04:56:36:EE:58:AB:E3:B1:A2:B0:D0:4A:AF:6C
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 245760
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/3b8223b21a91ae5c65adda9681b450d69325a1e1.roa
Signing time: Fri 21 Jul 2023 20:55:00 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 22411
IP address blocks: 200.41.86.0/24 maxlen: 24
200.41.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381664 (0x245760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=3b8223b21a91ae5c65adda9681b450d69325a1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:5a:eb:e7:04:9b:83:d3:e4:4e:da:f6:26:
03:99:8a:36:fb:75:31:b1:03:bc:97:02:00:c5:cd:
61:74:32:da:3b:28:ac:47:8e:d8:d9:1d:51:3b:46:
2c:e1:c5:13:86:23:8c:80:2d:a3:89:69:5a:ec:65:
68:21:63:58:11:f5:f8:66:8a:4b:80:e8:39:44:e3:
65:2c:56:73:62:e9:3c:6a:93:1f:82:76:89:b9:f6:
75:db:5b:24:f2:9b:b8:19:7d:31:44:74:2e:77:f5:
21:ca:41:d6:b5:56:1e:c6:30:e5:06:49:ae:af:bb:
2b:cf:8f:fd:0a:2b:82:93:63:48:02:42:65:f1:74:
7a:8a:73:d3:29:51:81:51:04:0d:a2:2b:4b:64:0c:
29:19:d0:b7:01:d5:10:a9:ca:62:3e:d2:7c:ac:56:
ca:44:91:26:11:5b:d7:73:1c:42:40:de:fa:64:4e:
d8:b6:2a:69:ae:a0:13:dd:23:78:82:c4:1c:35:48:
f0:45:91:e9:6d:1c:07:39:20:b3:d9:44:89:61:ec:
6a:43:98:34:da:90:35:f6:8b:bb:5e:4c:fb:24:4c:
f8:a3:8b:4e:9f:4f:e6:67:fe:a1:a6:2e:e9:67:45:
70:92:67:8f:dc:ad:33:61:3e:48:ca:f1:c3:ac:9a:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A0:A8:95:D1:19:04:56:36:EE:58:AB:E3:B1:A2:B0:D0:4A:AF:6C
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/3b8223b21a91ae5c65adda9681b450d69325a1e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.41.86.0/24
200.41.100.0/24
Signature Algorithm: sha256WithRSAEncryption
27:50:8b:b1:14:db:66:a4:93:52:75:38:c8:33:f6:39:a0:4a:
7d:cc:db:7e:ff:dd:38:e0:73:70:ec:07:24:35:dd:95:e0:3e:
8c:ff:cb:24:12:4b:af:fe:27:70:15:68:71:41:a4:20:b7:6d:
79:b5:01:6b:bf:05:b1:9b:bf:00:9e:7f:5b:6f:d2:07:89:9f:
73:21:d2:18:16:78:6e:8e:57:0d:e8:2f:26:de:84:36:86:47:
ce:fd:19:b7:b3:4f:d6:66:32:ef:2e:40:3b:d6:8c:2f:7e:4e:
61:01:8e:7a:1d:cb:ef:1f:e3:15:58:22:77:12:9a:54:21:c3:
85:65:7d:99:ec:19:0b:87:60:70:27:a4:07:68:e7:0a:09:09:
53:0e:69:f3:b5:38:6a:b9:c6:06:44:6f:af:dd:06:5d:0a:8b:
ca:fe:41:ea:e8:48:a7:36:fc:61:ae:f1:f8:c0:03:a5:e1:e9:
33:1b:b7:22:35:92:23:31:48:9f:9c:fd:a3:84:54:02:88:a5:
20:77:60:d4:98:af:fe:a4:ee:fa:dd:75:f2:00:99:8a:cc:59:
8e:b2:18:55:45:33:69:9e:af:7c:2c:42:1a:68:83:e6:fc:f6:
f2:ff:dc:10:26:79:d1:67:dc:2e:08:98:f3:03:2f:c8:4f:60:
24:ad:8e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org