Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/3fb5edbd99a3cc68e8b5da2fcc951b13302f783d.roa
File: 3fb5edbd99a3cc68e8b5da2fcc951b13302f783d.roa (raw, json)
Hash identifier: UohfGySXJa6NKlOnGNI40SIRFs9SFSvp50BskQ0GDD8=
Subject key identifier: 4A:4E:31:FE:F8:B4:D8:6F:2B:E2:B1:27:99:CD:7D:33:17:6B:7C:4A
Certificate issuer: /CN=289859cc11d10ba9411ed4b13485469204a4b868
Certificate serial: 01065B
Authority key identifier: E4:18:86:83:2A:FD:31:58:09:65:48:D6:88:76:49:93:35:5A:BF:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/289859cc11d10ba9411ed4b13485469204a4b868.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/3fb5edbd99a3cc68e8b5da2fcc951b13302f783d.roa
Signing time: Mon 19 Apr 2021 22:18:33 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 16906
IP address blocks: 200.73.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67163 (0x1065b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=289859cc11d10ba9411ed4b13485469204a4b868
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=3fb5edbd99a3cc68e8b5da2fcc951b13302f783d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:b2:3e:f5:21:81:c8:7b:80:3a:b4:8d:6d:
ed:77:30:05:0a:31:ee:9c:5a:a8:32:85:3c:5a:d6:
8a:18:1f:04:c3:d5:54:25:ed:d6:27:6f:21:5c:d0:
8b:f1:86:ca:7f:f6:8b:33:81:29:8f:54:0a:0c:6c:
ec:38:44:7c:c2:85:89:33:de:ed:57:88:79:ad:ae:
ec:64:fb:27:68:25:1a:b1:c5:0e:ea:43:da:9d:61:
79:78:53:ba:b5:cb:41:3e:f8:fb:15:32:3f:54:3f:
34:f7:47:0d:cc:25:d9:99:f9:3b:65:08:92:c5:4a:
ed:b0:63:c2:58:a2:e1:d6:28:2e:6f:7c:1b:d8:06:
73:69:1e:93:4b:45:73:59:40:26:67:cf:27:55:71:
2b:ec:c0:df:04:73:01:2a:c6:6e:c1:2d:37:fb:23:
6e:25:da:eb:fa:cc:08:30:39:8e:e5:80:c7:86:da:
6e:ee:cf:2c:38:59:21:4f:f2:77:cc:69:c8:ad:45:
2b:f0:a7:f3:00:67:68:62:78:61:b3:a7:0d:80:92:
4b:b3:8d:05:5d:cc:2e:36:f6:fe:0a:1f:7d:42:28:
00:a9:69:9f:a5:18:88:40:a4:ff:c6:e6:65:25:46:
f6:ba:43:fb:62:08:30:5f:ff:0a:5c:01:47:6d:cd:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4E:31:FE:F8:B4:D8:6F:2B:E2:B1:27:99:CD:7D:33:17:6B:7C:4A
X509v3 Authority Key Identifier:
keyid:E4:18:86:83:2A:FD:31:58:09:65:48:D6:88:76:49:93:35:5A:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/289859cc11d10ba9411ed4b13485469204a4b868.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/3fb5edbd99a3cc68e8b5da2fcc951b13302f783d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1afcbf41-256a-46a8-9ce4-0e09d52b535d/289859cc11d10ba9411ed4b13485469204a4b868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.73.108.0/22
Signature Algorithm: sha256WithRSAEncryption
02:e6:aa:d4:a2:b9:f6:c8:ce:26:19:f6:61:2c:56:5f:bc:1b:
de:d1:75:c0:04:5d:d2:82:fb:b9:4c:2a:ea:94:08:3e:62:3f:
e2:d7:2f:e9:62:c4:69:11:78:94:07:31:29:c6:b9:74:96:d9:
7b:f0:4f:b3:e6:32:f1:bd:87:9a:f8:93:fc:5a:09:8d:e0:96:
3f:47:32:af:bc:32:dc:29:9c:d5:a4:88:1c:5b:4a:eb:c1:5e:
46:32:b8:a0:8e:a8:66:8d:ff:fc:5a:3d:70:b6:82:e4:66:08:
42:da:c5:19:5a:f0:c3:77:8d:22:57:3e:8b:50:51:6a:1f:86:
dd:f4:1b:d9:14:44:69:87:d3:f3:35:7b:7a:03:16:05:d4:fc:
83:d7:28:04:c2:b7:53:cf:7e:18:74:40:9b:ef:ca:5f:2c:37:
88:52:04:79:bc:ed:d4:05:ac:23:5a:04:36:7b:48:73:b9:37:
fa:0f:96:73:44:45:2e:43:b9:5d:57:57:a2:fc:13:de:fe:14:
ce:04:aa:1e:92:93:05:0c:93:94:90:18:f7:16:75:4b:8c:dc:
bb:87:46:65:54:cf:ef:6a:6e:30:67:dd:13:f1:06:6e:e4:32:
e5:f4:b1:d3:cb:ce:fd:2f:ca:18:97:ec:2a:ed:ab:06:f2:1d:
b1:83:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org