Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7199d2f72873dce81634fd40d6827a551d8c51b7.roa
File: 7199d2f72873dce81634fd40d6827a551d8c51b7.roa (raw, json)
Hash identifier: YPZDo+OcQjWyzE/9YX+rXiin+YqpfE9m0fYM8fXyTPk=
Subject key identifier: 70:D5:73:64:AE:0B:2A:DB:D0:F5:77:2D:D0:53:AB:B2:E9:86:19:7A
Certificate issuer: /CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Certificate serial: 299801
Authority key identifier: 1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7199d2f72873dce81634fd40d6827a551d8c51b7.roa
Signing time: Sat 16 Mar 2024 22:03:21 +0000
ROA not before: Sat 16 Mar 2024 22:03:19 +0000
ROA not after: Fri 16 Mar 2029 22:03:19 +0000
asID: 23243
IP address blocks: 200.30.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2725889 (0x299801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Validity
Not Before: Mar 16 22:03:19 2024 GMT
Not After : Mar 16 22:03:19 2029 GMT
Subject: CN=7199d2f72873dce81634fd40d6827a551d8c51b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:9c:70:36:df:1d:cb:2c:81:f1:81:40:56:
1e:e5:70:a4:45:c2:dd:ce:a9:a9:cf:11:e5:f9:b8:
2b:4f:40:e2:2b:0d:af:ce:15:0a:a7:fd:88:f2:b2:
a9:a7:cb:6d:92:f1:46:4c:e0:00:e8:39:d5:73:1f:
5f:b7:25:fe:3a:a0:40:cf:1f:02:1b:72:ac:ea:44:
ca:f4:b9:7d:cc:8d:e6:b2:15:0a:1f:3b:9e:43:c8:
9b:c2:9f:0b:a7:21:9b:0b:8d:b4:74:4b:92:98:b7:
6e:21:a7:c8:58:92:2c:2b:7e:af:14:3f:49:5a:34:
0b:e1:19:1e:28:ed:8f:c0:cd:3b:6b:11:61:5e:ad:
25:19:eb:b1:43:b4:99:9c:13:d2:cb:16:4a:93:c6:
2c:f6:a9:47:7d:94:45:c3:b0:00:59:94:dd:82:18:
0b:81:fc:5c:3f:12:7f:b4:23:dd:b0:24:f1:d0:75:
14:eb:d8:31:fa:d5:0b:77:59:40:74:9b:bd:8b:5a:
b1:e3:88:53:51:b3:bd:b1:d2:05:cb:2e:25:c0:cf:
fd:4f:85:0f:85:a7:e4:cc:ac:fa:ed:ab:cf:14:f2:
4f:e9:30:f3:df:3e:0e:e0:03:39:71:08:e5:09:47:
75:de:69:4c:e9:71:18:3d:be:b7:b9:e6:28:16:71:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D5:73:64:AE:0B:2A:DB:D0:F5:77:2D:D0:53:AB:B2:E9:86:19:7A
X509v3 Authority Key Identifier:
keyid:1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7199d2f72873dce81634fd40d6827a551d8c51b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b5d1117ae408cf5674d277fb7690575abaf8ac60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.150.0/24
Signature Algorithm: sha256WithRSAEncryption
04:bc:c9:1f:ba:63:1e:c0:e5:bb:18:5a:3c:84:b4:8d:f5:3b:
99:1f:84:46:7f:69:2f:ba:c7:65:f2:6e:02:31:03:1d:fa:7f:
d2:7f:c1:fd:a2:06:d6:e8:2b:d1:33:7a:d7:ef:76:45:68:bf:
c1:fb:83:a7:9d:da:26:26:c3:64:07:c5:39:22:e3:9b:2d:22:
00:a7:6a:43:06:aa:85:22:98:24:3f:ce:d6:f9:8a:68:af:bf:
4f:4a:12:50:2a:86:54:7d:ea:39:e8:9b:27:ae:fd:2a:70:f0:
0c:05:08:00:25:8c:d1:8d:11:f0:44:85:a2:b2:bd:d0:ef:98:
2e:d1:9f:a9:64:0d:fd:04:f1:b2:b6:2c:14:ac:28:aa:74:79:
e7:e9:72:52:d7:ed:c8:4f:18:b6:d3:7e:6d:50:f3:eb:9e:4d:
e7:cd:f6:fc:3e:34:a1:19:72:f6:bb:bb:54:08:4f:b1:f4:6a:
2e:2a:76:c9:39:3b:dc:16:49:81:f9:36:21:2f:db:e5:29:b1:
ce:cf:33:37:7e:cd:fe:8a:69:d2:d5:e8:96:50:26:53:e3:34:
8a:7d:18:e9:0b:34:b7:07:f0:04:1b:9d:f8:c3:a0:7a:1c:f5:
f6:c8:0c:01:a1:5a:27:6a:ff:2c:f1:02:44:8e:57:16:c4:75:
6b:d3:6d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org