Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/824b2847db5b05b663f640ac82f6c6e79bfee86d.roa
File: 824b2847db5b05b663f640ac82f6c6e79bfee86d.roa (raw, json)
Hash identifier: y3rFATwTNqDKsj4az/KkJZ8Xhb0kXWoV4DRJnwKCoiw=
Subject key identifier: A5:76:6D:AE:50:98:B1:C0:FD:DE:B0:38:D8:A8:32:C7:B1:B4:AC:74
Certificate issuer: /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial: 0E1157
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/824b2847db5b05b663f640ac82f6c6e79bfee86d.roa
Signing time: Wed 24 Mar 2021 14:42:05 +0000
ROA not before: Wed 24 Mar 2021 14:42:05 +0000
ROA not after: Tue 24 Mar 2026 14:42:05 +0000
asID: 23243
IP address blocks: 200.30.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921943 (0xe1157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Validity
Not Before: Mar 24 14:42:05 2021 GMT
Not After : Mar 24 14:42:05 2026 GMT
Subject: CN=824b2847db5b05b663f640ac82f6c6e79bfee86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:a5:b4:8d:6a:55:3f:94:73:39:3f:d6:be:
b0:29:8e:40:15:0c:9a:8b:ef:67:cd:5f:e6:6e:1c:
fc:23:55:2a:37:fa:62:16:cd:ce:77:25:c2:dd:86:
a9:41:25:63:72:fc:71:65:b6:02:99:ec:b8:44:83:
2d:10:b0:01:dd:7d:cf:a0:4e:44:4f:ff:09:d2:18:
a1:ec:ce:67:22:21:fa:3e:2c:a2:ce:5c:a3:8d:32:
75:ff:61:20:81:cf:ad:08:e5:51:c1:fc:07:03:96:
67:af:d6:1d:75:bb:e3:7a:a8:99:37:23:e7:41:98:
9f:d3:b1:55:95:48:b4:21:7e:c3:aa:0d:8c:79:33:
da:e8:23:d6:8f:6c:b3:e5:6d:4e:01:01:75:7a:03:
87:6c:1e:3b:44:78:44:4f:b7:c6:08:fe:2e:6a:7d:
d0:62:de:99:eb:d0:61:ea:48:a1:4f:34:6b:d4:08:
a8:fe:32:54:9d:be:b8:d0:98:5b:5d:48:83:6a:1d:
da:6d:11:30:84:5b:41:49:e0:c7:7c:93:ef:20:e4:
0c:f9:2d:25:ba:e3:d9:ca:1b:34:8b:7e:a9:31:63:
c1:f9:67:a8:ed:ae:98:4a:aa:9f:c6:bc:21:47:47:
40:27:a9:04:26:8f:f7:18:d3:46:6b:79:07:49:5e:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:6D:AE:50:98:B1:C0:FD:DE:B0:38:D8:A8:32:C7:B1:B4:AC:74
X509v3 Authority Key Identifier:
keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/824b2847db5b05b663f640ac82f6c6e79bfee86d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:52:bd:b5:0d:31:7a:27:1e:2d:a2:55:35:ff:6b:22:73:8f:
65:96:ca:f8:30:a4:22:18:f9:6d:51:dc:09:2c:e5:df:69:ea:
2a:4d:3b:da:d3:8a:3c:7f:00:d3:fb:20:12:b0:6f:eb:28:12:
3d:5e:3e:17:ae:dd:8c:44:78:b5:02:c1:c7:88:df:6d:c7:0f:
d5:e3:21:c0:8e:86:5f:1e:7b:d7:ef:fc:5b:52:0d:91:f8:5b:
0c:fd:ba:ca:0c:a2:c3:ad:8f:0b:21:d5:8e:a2:f5:db:45:94:
15:6d:a4:f4:e7:e1:15:6c:b2:bd:d5:b0:ab:b0:fc:ba:00:8e:
11:3e:cf:5b:1d:12:f4:d7:63:f5:44:0e:2a:3b:69:9c:41:25:
cd:9d:8c:68:70:2b:1b:d2:cd:cb:65:aa:68:ff:14:26:00:6a:
e7:13:fc:c8:00:3f:9c:ca:dd:38:1e:8e:32:df:c7:e3:d0:26:
d9:cc:e1:70:2d:6d:72:75:36:e4:3e:3b:cf:65:b2:ca:7d:c7:
a3:36:7f:d4:6c:6c:71:ff:05:b8:90:1f:c6:cc:e2:2f:bd:52:
d0:c4:72:18:67:e9:e0:39:f0:36:16:93:ca:c4:85:2a:52:c9:
1d:6e:55:93:6f:33:5c:14:fa:5b:01:cd:ea:82:b1:87:56:45:
e9:ff:d5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 00:39:15 2024 by rpki-client on console-fra.rpki-client.org