Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/32a462192de3937a5925498488bda433d6afefb0.roa
File: 32a462192de3937a5925498488bda433d6afefb0.roa (raw, json)
Hash identifier: dQ5Xe1BZtJ/cI+dAscg9OsgFy8VjrghnaiqcAJezexo=
Subject key identifier: A1:5E:4D:F7:01:63:4E:25:F2:0E:B9:DD:96:1E:07:F6:DC:4E:76:60
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 220667
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/32a462192de3937a5925498488bda433d6afefb0.roa
Signing time: Tue 25 Apr 2023 15:04:47 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 28062
IP address blocks: 200.46.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229863 (0x220667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=32a462192de3937a5925498488bda433d6afefb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:71:0f:1b:fc:a8:e5:0b:b2:17:94:ed:48:46:
b6:1b:99:89:f4:21:09:66:62:43:c0:88:e9:f7:de:
a1:19:cc:3c:77:1a:6c:c6:55:48:70:01:23:4f:69:
dc:53:f3:24:24:fa:8a:5b:68:94:67:cc:e4:10:f4:
7b:86:36:74:b0:fb:ca:71:4d:71:f5:c8:1f:3b:8b:
fe:75:71:6e:da:52:cc:4e:75:7d:09:30:f9:9e:e3:
3d:8f:01:53:ca:a5:c6:f5:d1:87:4e:e4:a8:e8:6c:
b1:57:84:16:50:0c:de:bf:21:0a:51:72:05:39:62:
b9:97:29:d4:0d:e1:e8:fc:45:0c:90:bc:67:0b:a8:
d6:84:76:99:63:c2:53:42:49:c4:dc:0c:3a:3b:cf:
b1:86:bf:46:da:17:92:89:87:25:96:ac:7b:24:ac:
79:43:ed:55:29:a2:ac:de:f9:44:c1:13:36:e0:47:
45:5a:36:41:07:6e:c8:9c:86:b7:f0:71:f5:ec:f8:
72:44:b0:5b:39:e7:8a:d2:85:41:f9:b7:08:98:ee:
90:4e:23:ec:3c:e1:3d:b4:8a:4b:a9:55:c0:c4:b4:
3f:42:15:8d:5f:0b:09:84:57:e9:b6:e5:de:c1:96:
54:70:8b:88:1d:e2:62:92:74:c2:9e:71:32:76:46:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5E:4D:F7:01:63:4E:25:F2:0E:B9:DD:96:1E:07:F6:DC:4E:76:60
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/32a462192de3937a5925498488bda433d6afefb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.201.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e3:47:65:ad:91:1d:9f:d6:56:49:53:60:68:a7:26:d0:eb:
f1:7b:92:e2:06:60:ad:16:af:3c:bf:23:f2:cd:5a:8b:c8:d4:
7a:74:ba:c1:f7:16:e8:a0:6a:2b:9e:57:05:6c:88:af:60:63:
5f:8a:72:79:8d:1b:72:3d:27:08:e0:6d:d0:de:47:fd:d3:5d:
d5:b5:2d:3e:f1:fb:e3:e0:61:1f:1d:b6:89:49:41:4c:35:71:
97:3c:92:b3:80:a4:9b:73:02:6d:1b:c0:80:7c:29:cb:75:da:
3d:4d:1f:77:5a:36:ce:6b:e2:4c:ff:12:5d:92:1e:62:ac:7d:
3a:30:4d:ed:66:50:ad:97:8c:d2:5e:f9:70:0e:f0:2c:d3:ee:
c5:e9:6e:23:30:a1:6c:6d:51:16:a8:86:77:d8:19:08:26:01:
dc:a8:f8:78:44:f3:37:50:3e:2d:c2:ad:d6:cd:e3:68:05:d2:
15:ec:d8:ec:c2:33:b1:9a:1d:3e:d5:1f:55:bd:1a:d6:e0:60:
74:be:e9:4b:73:39:92:8c:ca:31:02:18:00:b1:0f:33:41:99:
e7:51:ff:32:95:fc:08:41:82:b3:2d:75:8e:91:2c:65:66:f2:
74:1a:a7:b5:22:55:44:00:14:61:79:ca:ec:e8:fb:ff:03:16:
0d:ee:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org