Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/afd49b92fa3c31c2a896bf39bbdd591d45788029.roa
File: afd49b92fa3c31c2a896bf39bbdd591d45788029.roa (raw, json)
Hash identifier: F35C8qGh8xmvDRR7+Z64ecOTexj3Dwr9xETUdV/7mSk=
Subject key identifier: A7:74:C4:4A:05:D5:D5:E2:45:D5:E6:3C:EA:E9:E5:9A:8B:17:5D:8E
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 14DB9B
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/afd49b92fa3c31c2a896bf39bbdd591d45788029.roa
Signing time: Mon 06 Nov 2023 21:55:53 +0000
ROA not before: Mon 06 Nov 2023 21:55:53 +0000
ROA not after: Thu 06 Nov 2025 21:55:53 +0000
asID: 26617
IP address blocks: 200.12.40.0/24 maxlen: 24
200.12.41.0/24 maxlen: 24
200.12.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1366939 (0x14db9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Nov 6 21:55:53 2023 GMT
Not After : Nov 6 21:55:53 2025 GMT
Subject: CN=afd49b92fa3c31c2a896bf39bbdd591d45788029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:b6:c0:f4:a4:bc:97:dd:5c:1e:d0:20:69:
bd:58:1d:c5:62:7e:a6:fe:ca:10:4e:d0:ac:df:70:
1b:af:9c:93:29:5b:7c:49:80:43:dc:e4:e8:7e:6d:
4a:20:4a:08:c4:cd:8e:8c:02:49:37:99:5f:2a:49:
cc:bf:54:35:93:ee:5c:28:e5:98:65:a5:9a:35:a5:
a1:a7:15:85:e3:a1:5a:cb:57:70:63:b8:96:be:b8:
2a:7c:e2:38:25:21:b7:6d:66:60:43:8c:03:6e:d3:
80:ab:2e:d7:86:a3:b3:61:cf:1f:e2:d8:de:05:d4:
2f:65:81:0e:0d:83:b2:a3:1c:95:e3:9c:50:06:27:
a8:3f:f9:97:bf:46:78:d5:43:63:c9:61:fa:fb:5b:
83:74:2b:fa:f6:b8:59:a8:45:17:f1:d1:e8:81:e4:
1e:77:fb:f0:2f:c8:48:47:9b:95:c3:72:0e:46:e2:
10:7c:14:e6:c1:21:8e:2b:a9:a0:36:68:82:c9:00:
c4:64:ad:e3:39:d3:86:30:b8:4e:b0:d7:3d:2d:a2:
18:c9:d6:d6:ed:69:0c:9f:8a:8d:09:bd:78:ac:93:
f9:73:d1:77:68:db:90:55:0f:f3:23:8a:55:d2:c1:
9e:2c:c0:72:21:cb:8b:8e:d6:0b:f9:34:13:22:66:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:74:C4:4A:05:D5:D5:E2:45:D5:E6:3C:EA:E9:E5:9A:8B:17:5D:8E
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/afd49b92fa3c31c2a896bf39bbdd591d45788029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.40.0/23
200.12.43.0/24
Signature Algorithm: sha256WithRSAEncryption
57:82:26:e5:61:38:52:fb:6f:d6:09:41:a0:ff:28:2b:5f:1c:
30:91:19:33:d6:19:fd:d7:97:71:ed:fb:10:93:45:2a:b3:f9:
1f:ee:10:87:d2:69:4e:39:97:95:06:ba:60:54:36:1b:a6:c7:
63:99:3e:a1:40:42:92:b3:78:c7:41:cf:91:5c:1d:2d:20:ca:
0f:2c:5c:dd:b1:c4:4c:e7:d1:6e:6e:44:86:ee:49:ab:b8:31:
e5:69:2e:08:f6:47:ae:c0:68:40:a8:37:29:65:ad:a3:17:23:
64:6d:c7:d6:9f:bd:e7:8a:c5:84:93:a4:52:da:94:77:b4:00:
a7:a1:2a:36:8b:bb:ef:c9:4d:57:fb:db:34:8e:3d:38:0e:20:
6d:b0:95:1c:f6:07:0c:80:0a:f6:91:77:41:ef:e2:59:39:59:
74:fc:01:a0:59:8c:3c:85:26:89:6a:68:ea:4d:e3:30:b1:a2:
cc:4c:91:c8:bb:79:9c:6a:15:81:d1:97:3e:c1:eb:c5:13:ef:
8d:c7:4c:31:d3:32:0f:42:bf:ab:54:40:b1:67:18:98:17:83:
77:31:4d:ed:03:19:86:79:c8:b7:d0:fc:72:80:a8:4c:5f:ea:
68:87:b6:72:4d:db:2d:d1:22:55:82:ee:6a:a2:8f:47:0e:08:
0a:13:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org