Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/283ff1414ffb4a8f4cc5aaa4b1334280ab1f962a.roa
File: 283ff1414ffb4a8f4cc5aaa4b1334280ab1f962a.roa (raw, json)
Hash identifier: xLAiyD83QEm6mGkEo1AVjXz+Sf3lgCDmFB/mZypNsms=
Subject key identifier: 4C:E3:61:80:1A:12:92:BF:0B:6C:8D:E5:08:1D:D2:2E:05:DA:A9:E0
Certificate issuer: /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial: 0E0B00
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/283ff1414ffb4a8f4cc5aaa4b1334280ab1f962a.roa
Signing time: Wed 24 Mar 2021 14:42:05 +0000
ROA not before: Wed 24 Mar 2021 14:42:05 +0000
ROA not after: Tue 24 Mar 2026 14:42:05 +0000
asID: 20299
IP address blocks: 200.30.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920320 (0xe0b00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Validity
Not Before: Mar 24 14:42:05 2021 GMT
Not After : Mar 24 14:42:05 2026 GMT
Subject: CN=283ff1414ffb4a8f4cc5aaa4b1334280ab1f962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:90:c6:d5:72:64:96:ec:46:14:1c:ea:c5:
1b:44:04:ce:74:27:1e:cf:6a:7c:d5:00:a3:bb:9a:
4b:6c:76:d2:91:b7:9f:b5:89:11:ab:69:f9:d4:37:
50:df:fb:92:5f:ce:8f:f8:e5:3e:c7:bf:94:b3:b2:
08:64:60:47:89:c8:3d:71:1a:b8:b1:35:52:0b:4a:
6a:b9:07:3f:df:d9:31:a9:15:01:3c:ac:82:92:d6:
19:d5:b5:66:fa:f9:25:de:32:09:a2:58:62:bb:68:
d1:95:b9:ce:ee:ec:de:e7:8c:87:a2:cc:0b:d3:66:
67:fa:b6:ba:f3:1e:ef:34:b6:49:3b:87:e0:56:83:
2d:8a:66:f9:e8:07:c9:b8:36:bc:d6:38:82:93:ab:
28:31:7d:cb:a1:59:5b:07:d5:ac:d4:0f:f0:92:f1:
55:5d:fc:5c:61:fe:8e:d7:81:e1:58:41:10:83:34:
bc:43:e2:ed:5c:e4:d0:43:e8:fd:01:e4:32:ec:fc:
2a:39:80:9a:31:b2:7c:1b:0c:44:74:1d:11:6c:d2:
eb:cc:37:ec:18:29:03:75:e0:4d:8c:37:41:16:8e:
0b:81:18:83:2f:b2:8f:70:86:1d:90:c3:11:47:e8:
c6:38:f4:56:b4:da:0c:24:18:52:c8:dc:fb:8c:0e:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E3:61:80:1A:12:92:BF:0B:6C:8D:E5:08:1D:D2:2E:05:DA:A9:E0
X509v3 Authority Key Identifier:
keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/283ff1414ffb4a8f4cc5aaa4b1334280ab1f962a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.189.0/24
Signature Algorithm: sha256WithRSAEncryption
24:cc:55:84:9d:6e:3f:f4:1e:a8:72:3b:4c:0b:47:9a:18:ca:
f0:b3:0a:39:2d:34:fd:4a:54:cf:69:e8:4f:bb:f1:0e:2e:ec:
e7:ea:36:22:96:1f:f1:48:f0:0f:7f:6d:25:ca:b0:ea:01:e0:
25:30:5a:9a:ea:24:21:02:bd:34:8a:7f:2a:19:c9:f7:6f:84:
88:ba:c5:6a:0b:b5:e9:26:19:68:23:6a:c8:90:5e:9c:54:af:
8d:5e:cc:55:82:f9:40:e1:fd:bf:57:f9:7c:e1:d1:80:c1:d5:
e8:7a:7d:b8:43:85:00:42:57:29:8b:0d:4a:c1:e2:bd:b4:92:
70:db:d8:25:0c:23:b3:70:b6:07:66:58:be:aa:9c:85:57:62:
28:be:4e:6a:17:3b:0b:4a:44:9d:b1:70:2a:d4:d4:5a:f3:02:
39:a5:3e:64:e6:46:dd:bb:1b:cf:26:13:f9:d9:13:83:c2:e0:
1b:7d:47:c2:43:4f:2c:29:60:ff:52:57:e6:02:6a:b1:bb:b9:
a2:be:00:58:84:aa:2a:45:c1:cf:d3:10:ed:0a:ed:70:36:3a:
f0:4d:99:de:38:e8:26:b8:3c:7f:f4:0e:f5:75:25:60:5c:8b:
90:58:a2:ac:96:82:13:d1:30:50:2b:fd:29:5b:4c:2b:d7:c6:
6e:ad:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org