Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/29bf38448ebbe43592876023ebbe65887bc9a223.roa
File: 29bf38448ebbe43592876023ebbe65887bc9a223.roa (raw, json)
Hash identifier: f3yCI42kqaIX7zECjSK1kVtGuLHHKKlIcnI1ykr6LO4=
Subject key identifier: F5:EE:21:1B:84:46:F0:7A:15:D9:76:A1:1B:9D:17:58:68:0E:50:80
Certificate issuer: /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial: 03D5A7
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/29bf38448ebbe43592876023ebbe65887bc9a223.roa
Signing time: Wed 24 Mar 2021 14:47:12 +0000
ROA not before: Wed 24 Mar 2021 14:47:12 +0000
ROA not after: Tue 24 Mar 2026 14:47:12 +0000
asID: 52289
IP address blocks: 200.93.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251303 (0x3d5a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Validity
Not Before: Mar 24 14:47:12 2021 GMT
Not After : Mar 24 14:47:12 2026 GMT
Subject: CN=29bf38448ebbe43592876023ebbe65887bc9a223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:4a:76:9e:ed:f5:b1:52:64:48:8d:f4:26:
94:40:e6:94:12:54:1e:37:a5:fc:fc:b7:c2:b9:23:
9b:3a:42:64:b8:a8:77:a8:bc:59:40:41:44:ca:eb:
4a:7c:08:21:7a:92:29:ee:d3:49:19:7e:bd:e8:b0:
1d:ee:de:7e:2f:91:fa:16:1b:41:87:ee:28:42:02:
44:0c:1a:17:37:39:51:ff:e6:ed:72:a7:15:cc:e6:
33:8d:09:63:a0:e9:12:c2:ce:8d:12:60:05:81:c1:
6f:23:49:6f:6a:0c:a3:81:82:86:5d:43:70:76:8e:
68:7c:06:02:ce:77:1e:97:e8:7c:16:d2:b3:72:ad:
4d:87:4a:de:52:f4:f3:2d:63:58:f1:c2:1a:36:38:
3d:a9:89:0c:0c:70:03:8b:92:96:9c:2d:a2:e8:2a:
07:9a:64:11:9f:b8:f4:82:96:fd:a0:58:a3:b5:63:
26:99:64:e1:9e:a2:1c:f9:b6:7f:00:ab:11:10:f3:
64:99:e9:19:ca:73:4b:0a:98:cd:48:5c:42:e7:a4:
1e:bc:d5:77:56:f5:6e:21:a5:97:0d:60:18:e8:5f:
d0:44:a1:8c:fd:95:1a:17:8a:b2:15:fe:2f:95:57:
1d:d5:f3:95:0e:17:4f:16:70:5d:47:6b:f5:ac:d6:
ee:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EE:21:1B:84:46:F0:7A:15:D9:76:A1:1B:9D:17:58:68:0E:50:80
X509v3 Authority Key Identifier:
keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/29bf38448ebbe43592876023ebbe65887bc9a223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.93.246.0/24
Signature Algorithm: sha256WithRSAEncryption
96:10:2f:83:f0:3c:b1:7a:02:20:89:83:85:4a:96:35:d0:45:
d1:0d:e8:ae:0a:8b:60:61:ef:85:25:bb:91:fa:7d:e3:34:e3:
7b:24:7f:69:29:95:a2:25:0e:b2:9b:b7:bd:5c:7d:a1:e7:81:
c2:e4:ca:bd:b1:88:b9:91:25:2e:21:18:97:74:0a:71:3d:4f:
2e:d3:56:34:50:37:dc:f4:bd:0b:cd:c0:57:dd:9a:fb:80:9c:
88:4b:c6:55:aa:b1:b1:50:cf:b6:24:7a:05:08:0c:32:55:c5:
d3:39:0f:ac:29:9e:cb:e5:c9:eb:17:87:8c:15:84:75:fb:49:
61:c3:6c:f0:0e:6f:9a:69:61:6e:0c:8e:0c:d8:91:68:40:8b:
7c:b3:c8:a4:66:86:9b:ca:fd:e8:7b:d5:40:df:1d:83:00:a7:
f3:dd:ba:9f:8f:0b:fd:7a:4d:15:0b:7d:ce:30:ef:69:d5:b5:
3e:49:5d:54:56:23:27:30:1a:97:98:2a:b9:09:77:86:a9:81:
3e:a2:9c:e2:57:fc:b6:22:51:03:ad:b0:90:bc:02:fe:9a:7e:
f4:63:3d:07:1d:d1:c8:5f:27:5e:e7:53:dc:07:fe:66:fb:fe:
d1:f7:97:ee:45:9b:ce:64:70:ed:70:42:44:0a:49:2c:ff:c0:
db:a4:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org