Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/36a563c6e21c66a391dbd6be818f91f42a34510a.roa
File: 36a563c6e21c66a391dbd6be818f91f42a34510a.roa (raw, json)
Hash identifier: qVEckGSDp9w9ywpAeOXNZFSRa6cPWJW08mFUcpx5EjM=
Subject key identifier: D1:3A:12:F8:4C:AF:DD:7F:D4:69:C5:B0:86:C8:F7:03:B2:DD:A2:36
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 220CC3
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/36a563c6e21c66a391dbd6be818f91f42a34510a.roa
Signing time: Tue 25 Apr 2023 15:04:49 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 52446
IP address blocks: 200.90.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231491 (0x220cc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=36a563c6e21c66a391dbd6be818f91f42a34510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:8a:05:fb:f1:cd:9c:b1:dc:98:f7:06:af:
3d:d6:2a:2c:18:82:f1:84:64:6f:9b:d6:30:96:8d:
ca:18:19:4a:6a:9f:a2:c8:26:24:49:c7:d1:5a:d0:
4f:13:09:f0:39:e2:7d:48:96:76:a9:ea:86:6e:da:
fa:8b:cc:c5:12:31:b1:dd:60:48:86:1d:20:4b:08:
a0:6b:f9:40:b3:59:af:39:d0:16:6c:01:93:1f:af:
31:64:e0:01:6e:43:62:31:18:2e:d7:d4:16:fb:a1:
e9:6e:4a:66:47:69:dd:c0:77:26:22:f3:0c:e8:8c:
3d:e5:24:cf:5c:6c:89:28:18:57:a0:77:3e:8e:92:
b2:93:fb:ac:d9:e3:70:1d:08:d2:fa:7f:ba:52:93:
4a:12:40:75:64:8a:ec:2b:7a:35:ff:f3:d4:59:20:
37:79:86:1f:44:80:d6:4a:6f:6b:f4:18:a7:d5:8e:
b0:e1:d1:60:4a:ff:c2:9d:db:fb:85:ec:c1:05:11:
53:7c:af:5e:d8:0d:0a:45:22:aa:59:ce:a0:1d:0c:
b0:95:3e:16:ec:b5:40:a9:33:a9:de:01:a5:5a:cc:
7b:5a:2d:66:d7:d4:b5:a3:78:ac:ad:32:e3:cb:47:
98:8c:53:1b:77:e8:e5:1e:39:f0:7e:3f:d2:88:6f:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3A:12:F8:4C:AF:DD:7F:D4:69:C5:B0:86:C8:F7:03:B2:DD:A2:36
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/36a563c6e21c66a391dbd6be818f91f42a34510a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.143.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9c:f1:1a:ec:e5:61:bf:9a:25:b7:4a:5f:57:6b:d7:ce:26:
6e:f0:10:2a:9f:0b:ef:62:0a:19:a3:ac:86:b2:ce:61:e6:70:
3c:72:b1:71:7f:ac:c5:56:f4:ab:1f:2d:aa:4c:6c:b2:fc:e0:
77:4f:88:e8:20:78:d1:8e:5a:06:e8:5d:68:71:7f:ef:2b:43:
f5:18:7c:e4:82:41:38:49:61:cd:9c:7b:cc:18:b6:f3:2e:62:
07:83:0f:02:eb:0c:d2:db:a6:0c:a5:2e:26:46:52:5f:0d:cd:
57:5e:75:10:67:61:15:ae:66:11:94:c1:65:e5:d6:f4:96:99:
16:72:a9:96:0d:31:c6:82:97:14:7e:97:d8:5a:4a:c8:09:06:
07:b0:b0:57:90:3f:e5:e7:84:03:4b:80:1c:4d:70:e9:c2:d3:
21:92:d5:f0:a5:f5:c6:d9:17:c9:ff:5f:5d:1c:96:8b:cc:8c:
c8:a3:ef:2f:71:78:ed:93:b0:e1:f3:49:cb:66:93:66:03:1e:
cf:9b:f8:35:23:82:b1:10:ab:b6:ab:29:76:09:78:9e:ff:dd:
f0:33:ee:28:8b:6c:85:63:86:b2:9d:12:e7:4f:1d:09:a4:a3:
6d:a8:e9:47:30:d6:d5:ec:6d:88:00:d0:cb:14:c7:49:82:c5:
36:55:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org