Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/996667bf0c78f401d5dda65d676d62c1a9c30f19.roa
File: 996667bf0c78f401d5dda65d676d62c1a9c30f19.roa (raw, json)
Hash identifier: m8RaZGYW+BxUHF8OAa+ktKeNLfYOJaLyA1jCULGe/xo=
Subject key identifier: D1:59:C5:91:62:85:EB:DD:6D:46:8F:F4:B1:04:B2:FD:9E:1D:7E:FA
Certificate issuer: /CN=6f01319158b481143f9879918e0466aa4e1e5377
Certificate serial: 084C88
Authority key identifier: C9:EF:20:70:94:03:0B:DE:C7:31:82:3C:FA:31:45:BF:17:FB:C2:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f01319158b481143f9879918e0466aa4e1e5377.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/996667bf0c78f401d5dda65d676d62c1a9c30f19.roa
Signing time: Thu 07 Mar 2024 20:12:51 +0000
ROA not before: Thu 07 Mar 2024 20:12:51 +0000
ROA not after: Sat 07 Mar 2026 20:12:51 +0000
asID: 270008
IP address blocks: 200.23.140.0/24 maxlen: 24
2803:89e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543880 (0x84c88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f01319158b481143f9879918e0466aa4e1e5377
Validity
Not Before: Mar 7 20:12:51 2024 GMT
Not After : Mar 7 20:12:51 2026 GMT
Subject: CN=996667bf0c78f401d5dda65d676d62c1a9c30f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:65:5b:21:98:c5:48:5a:a2:6f:5c:6c:f1:
02:ce:bf:85:b5:e1:ee:84:36:c9:78:33:37:bd:04:
f8:9a:55:42:b7:65:5a:de:70:20:2e:97:21:f0:75:
3b:89:19:63:94:d0:3f:53:89:81:bb:87:43:7f:75:
36:68:6a:6f:db:b5:e9:c6:a4:6c:00:56:73:c1:8a:
2b:04:33:28:ef:9f:fd:59:c8:c4:53:0f:31:4c:16:
16:d8:b0:73:3f:e4:d1:49:59:66:2f:d1:0b:66:72:
ef:5a:f5:c3:53:f1:18:86:bc:64:ab:d6:76:59:a4:
13:21:08:4b:47:72:b2:d1:d3:6f:8a:e1:39:2f:d6:
f4:ce:54:df:e1:7a:5b:d3:82:30:e8:a7:fc:9a:3a:
14:07:13:22:88:03:7f:4c:a0:d2:94:42:4d:c7:84:
28:d3:6b:27:53:51:f9:e4:f3:31:17:2d:90:44:8b:
08:7b:9e:78:87:47:19:cf:c3:9c:2d:18:18:fe:72:
ea:54:2b:5f:47:c0:4b:9e:d3:07:15:9e:f4:9d:4a:
7e:df:77:d0:ed:c4:92:42:0b:78:ff:c5:15:76:0c:
b1:37:6d:1a:74:b6:95:4c:da:58:94:e2:a9:f8:c3:
44:9b:ee:10:7c:0d:44:02:b3:7b:24:d0:b1:0a:64:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:59:C5:91:62:85:EB:DD:6D:46:8F:F4:B1:04:B2:FD:9E:1D:7E:FA
X509v3 Authority Key Identifier:
keyid:C9:EF:20:70:94:03:0B:DE:C7:31:82:3C:FA:31:45:BF:17:FB:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f01319158b481143f9879918e0466aa4e1e5377.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/996667bf0c78f401d5dda65d676d62c1a9c30f19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/6f01319158b481143f9879918e0466aa4e1e5377.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.140.0/24
IPv6:
2803:89e0::/32
Signature Algorithm: sha256WithRSAEncryption
92:b0:8e:0a:6d:f2:96:e7:d8:cf:ab:95:5c:71:c0:d5:d7:9f:
81:a9:f8:8f:f0:5c:ef:d3:c4:bb:54:af:9b:87:cd:65:11:75:
bc:c8:b0:a6:1d:92:d1:02:08:c0:9d:90:43:d0:42:61:70:e9:
46:72:21:f1:f4:15:2b:38:c4:8e:bc:7b:ce:04:89:1a:64:aa:
91:8a:e9:ef:dd:a9:90:ef:51:f7:a9:7e:f7:23:a2:76:de:df:
40:2e:2c:2b:ca:e8:0e:2e:8d:55:e8:c6:82:25:67:76:45:64:
1e:a4:71:57:ee:9a:6a:02:fa:63:55:37:4e:a9:bb:9d:ff:cb:
18:48:2c:5f:61:f8:76:2c:42:16:da:02:e8:d6:79:ee:b0:fe:
03:0c:37:4c:2d:8b:73:0f:f8:64:00:a7:54:4d:a7:6e:7b:65:
df:cb:16:3e:5e:11:db:fe:9b:f2:9b:28:d8:7d:a6:ef:52:82:
40:d7:78:a5:83:4b:3b:31:08:1f:e9:c7:14:a4:ac:66:c9:59:
20:26:02:af:f7:ac:45:87:93:bd:18:1c:48:8a:62:28:b3:07:
c3:5c:ec:4d:cc:55:5c:b8:6d:d8:d6:57:36:8f:d8:ab:a7:53:
3d:ac:9f:d6:10:5c:e3:d1:07:98:ad:90:b3:ed:f4:c7:e6:aa:
cf:f0:a1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org