Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/25fd12251eaa97ccb00f111217d7fd1a0922669d.roa
File: 25fd12251eaa97ccb00f111217d7fd1a0922669d.roa (raw, json)
Hash identifier: HEIulyL8mIDA2iU8XcCVZevpg80Bc7d1RhHyub2TF3Q=
Subject key identifier: BC:C8:00:81:09:DC:04:63:F4:ED:F7:F3:0F:74:FB:5A:37:69:65:E8
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 0E49B2
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/25fd12251eaa97ccb00f111217d7fd1a0922669d.roa
Signing time: Wed 24 Mar 2021 14:45:12 +0000
ROA not before: Wed 24 Mar 2021 14:45:09 +0000
ROA not after: Tue 24 Mar 2026 14:45:09 +0000
asID: 52446
IP address blocks: 200.90.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936370 (0xe49b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Mar 24 14:45:09 2021 GMT
Not After : Mar 24 14:45:09 2026 GMT
Subject: CN=25fd12251eaa97ccb00f111217d7fd1a0922669d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:71:6d:a4:46:1e:0d:0b:83:3a:4b:eb:6b:d7:
bf:93:34:21:3e:0b:fa:0e:34:19:88:7a:6a:8c:be:
7c:1c:06:b4:56:4a:b7:20:10:dc:56:35:c1:f6:51:
ef:89:3a:f1:da:8f:96:b6:9d:57:fc:81:6f:26:66:
64:06:da:90:ce:75:cc:ca:a6:c3:2e:dd:58:42:9e:
df:e6:98:e0:b4:cc:25:76:e9:a5:98:6a:07:a6:f0:
42:44:38:b0:85:3d:80:65:a9:a0:73:e4:75:36:db:
05:4b:4a:7b:82:05:2f:d2:51:cd:d7:2f:96:dd:aa:
0e:1f:4a:ca:72:5d:c9:88:c5:49:2a:73:cf:42:3d:
75:11:50:ba:97:bf:7e:6e:57:c2:5e:cf:d8:7b:9e:
00:ff:8b:b5:e9:66:4e:2d:c6:23:89:e3:fd:46:35:
3f:c3:cf:2a:88:57:30:0e:12:93:95:b1:e3:19:11:
cd:92:6b:2a:bf:4e:ce:74:82:c6:77:ad:4d:f3:24:
eb:00:55:7f:f9:60:e3:18:da:70:c8:4f:c5:ad:33:
32:e6:a4:61:66:aa:74:5a:8a:20:8c:9d:17:4a:3e:
38:18:32:5f:ca:f2:20:69:25:e8:91:04:76:ee:90:
21:4e:77:53:50:f9:86:ab:8e:45:11:fd:69:c9:13:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:00:81:09:DC:04:63:F4:ED:F7:F3:0F:74:FB:5A:37:69:65:E8
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/25fd12251eaa97ccb00f111217d7fd1a0922669d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.143.0/24
Signature Algorithm: sha256WithRSAEncryption
67:1e:9c:cb:f1:ae:e2:01:d8:11:80:c2:29:7c:26:52:f3:63:
03:7e:15:d6:ee:ea:19:cf:5f:99:8b:f1:76:36:8a:e0:99:c8:
03:95:bf:7c:ba:ab:ca:ba:13:ba:61:23:56:9d:a0:ae:c1:25:
5d:4f:22:f3:d9:b8:8b:d8:17:c1:60:9d:fc:c3:06:ce:a4:24:
ce:cc:dd:86:c6:d0:c4:4a:64:2f:79:41:fb:93:27:ff:f4:0e:
a5:23:cf:0d:0c:cb:13:d9:49:9d:13:46:18:2e:a3:a1:e4:39:
99:96:37:98:0b:11:b9:3c:59:6d:eb:a2:6a:f4:9c:56:6b:ab:
c4:08:3a:65:f1:06:f2:4c:02:d9:a8:63:6f:32:97:9e:5e:8d:
cd:ee:85:e5:58:85:9b:ac:70:0a:e9:a6:4d:2d:48:31:02:4e:
56:d6:98:4b:1e:fc:85:46:a6:39:75:7d:1f:8d:02:50:c4:b7:
fc:da:bf:6b:6b:68:d1:7a:06:e2:cf:13:a7:33:f5:5d:2e:e7:
ba:b5:2f:6d:f0:6e:d1:51:4f:60:2f:05:54:55:ad:ca:a4:c0:
ba:b9:8a:4e:f6:d7:f4:0c:c3:96:8f:72:f3:21:c9:b2:b4:a2:
e4:8d:fe:7b:02:8b:94:0e:b3:01:35:97:2d:f7:00:cd:38:ca:
8c:9a:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org