Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/a5a5fd7efe47f6926363fec067b56c3d236dcc4c.roa
File: a5a5fd7efe47f6926363fec067b56c3d236dcc4c.roa (raw, json)
Hash identifier: SLZRdj/k34psbyxGUHsjFdRgdIpOtj5ovpwhkAA+xZg=
Subject key identifier: 5A:38:91:15:48:AB:28:8B:54:61:D9:2F:7D:78:FA:36:90:92:8B:01
Certificate issuer: /CN=ae3b6dcb33e6143b4093d7f50d6cdab29eaec143
Certificate serial: 38B5
Authority key identifier: 99:0F:80:7D:3A:92:E7:29:88:03:22:F0:A7:45:7C:2B:F2:60:93:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae3b6dcb33e6143b4093d7f50d6cdab29eaec143.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/a5a5fd7efe47f6926363fec067b56c3d236dcc4c.roa
Signing time: Wed 24 Mar 2021 14:46:48 +0000
ROA not before: Wed 24 Mar 2021 14:46:47 +0000
ROA not after: Tue 24 Mar 2026 14:46:47 +0000
asID: 16906
IP address blocks: 200.31.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14517 (0x38b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3b6dcb33e6143b4093d7f50d6cdab29eaec143
Validity
Not Before: Mar 24 14:46:47 2021 GMT
Not After : Mar 24 14:46:47 2026 GMT
Subject: CN=a5a5fd7efe47f6926363fec067b56c3d236dcc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bd:de:87:c6:1a:f9:bf:40:5d:8f:dc:db:7e:
8b:d6:df:02:7d:7e:37:23:f2:5c:df:d9:70:81:a5:
39:b4:a4:0c:10:a6:8b:1c:dd:43:65:4d:64:e9:f7:
7c:2c:d8:e9:89:d3:f2:88:31:49:e8:b6:f7:12:22:
d2:76:4b:03:5d:02:37:d8:a2:d1:88:8b:b3:fe:82:
3d:a9:78:67:67:74:b8:eb:82:86:7e:38:ce:ff:7a:
ca:2f:5c:5e:ec:16:00:34:f1:81:42:c6:9f:09:16:
ba:4c:67:e0:a0:86:74:3b:a3:2c:58:26:e1:46:12:
54:e9:bf:29:f7:87:ea:d9:e1:a8:4f:04:2c:37:a4:
2c:f9:73:d8:61:c5:3f:38:00:88:7f:79:7e:3b:b9:
b2:2c:e9:28:78:97:7e:cc:20:16:b4:5f:51:98:ed:
ed:c8:ab:39:ae:38:c7:ca:85:88:92:aa:cb:48:85:
71:a3:9b:ae:ca:8e:56:40:8a:ba:af:29:00:f9:41:
52:05:42:7b:37:20:cc:47:1f:18:35:70:c0:97:ed:
ff:5a:23:23:21:78:e1:d2:19:91:3b:33:6c:be:23:
c6:05:5c:97:aa:ec:9a:f6:a2:00:bb:1f:3a:3f:38:
25:25:5e:43:3f:82:5c:56:a4:18:1d:39:8a:28:a1:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:91:15:48:AB:28:8B:54:61:D9:2F:7D:78:FA:36:90:92:8B:01
X509v3 Authority Key Identifier:
keyid:99:0F:80:7D:3A:92:E7:29:88:03:22:F0:A7:45:7C:2B:F2:60:93:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae3b6dcb33e6143b4093d7f50d6cdab29eaec143.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/a5a5fd7efe47f6926363fec067b56c3d236dcc4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/ae3b6dcb33e6143b4093d7f50d6cdab29eaec143.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.160.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:2b:5e:56:b2:58:7e:1d:2d:f8:92:ef:df:7c:69:5f:bb:0b:
18:f3:c8:1b:b7:2a:4e:25:bd:86:03:d8:35:65:2e:8d:6a:22:
db:99:a9:45:de:08:8e:24:31:b4:e4:fd:cc:09:db:c6:f9:6d:
be:e8:87:fe:08:a2:ea:90:76:b8:87:7c:0d:bc:58:88:3d:98:
15:d8:9f:97:c5:27:17:68:ab:b4:8f:b3:b2:21:7b:ce:d9:a7:
3c:10:91:8e:ef:8f:bb:c2:52:fc:d4:06:2c:89:e2:d7:3d:66:
6f:48:b0:12:d0:6a:d2:bd:1b:99:91:f3:82:26:3a:f2:6f:41:
cd:37:26:e4:d7:59:2f:09:fe:dc:78:08:91:75:21:ec:d6:24:
30:d3:67:20:de:47:c9:e1:ea:7b:36:44:2b:4f:f1:84:6d:e7:
f7:ad:15:1b:a4:ff:6a:53:7d:41:e9:a7:3f:f7:48:ea:c0:39:
d3:47:db:67:12:03:c7:02:75:28:84:74:03:49:96:27:ef:e6:
a1:83:6c:e5:d0:4d:5e:8e:52:ed:c6:38:02:1e:52:d0:33:67:
9f:6e:63:e1:c4:aa:6d:d8:87:54:f5:28:13:5e:38:b5:50:27:
5d:31:f5:6e:fd:97:de:7d:39:54:ff:7d:5d:13:7c:75:96:32:
6f:2e:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org