Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/71daf0cca7d00d37e0df75178fb02474e6c7a328.roa
File: 71daf0cca7d00d37e0df75178fb02474e6c7a328.roa (raw, json)
Hash identifier: EQI84hcoSl3tdrxEEACHTOIhOVETyO2XyyHIehPTGug=
Subject key identifier: 5A:3E:31:96:9E:66:B6:70:68:E6:54:C4:63:6F:32:D3:E4:09:30:F5
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 2255D5
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/71daf0cca7d00d37e0df75178fb02474e6c7a328.roa
Signing time: Tue 25 Apr 2023 15:05:50 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 22010
IP address blocks: 200.46.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250197 (0x2255d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=71daf0cca7d00d37e0df75178fb02474e6c7a328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:2e:62:84:32:af:50:12:7d:c7:7f:1f:99:
bb:e1:e0:15:f6:e4:26:31:4c:f0:1f:50:f8:c6:35:
e1:05:38:37:e7:b9:a1:dc:1a:48:10:a6:d0:cb:4c:
fd:c4:b9:73:32:cd:80:f9:7c:69:45:d9:c9:55:65:
1f:8e:87:1e:a8:f7:f8:ba:ba:c5:0a:dd:9e:f8:bf:
bd:74:4a:0e:29:3f:0e:52:e7:af:6b:90:3b:d7:68:
74:e1:80:ea:c8:d6:1b:be:3a:ae:f9:15:b0:a8:ed:
c3:55:b9:39:30:5b:e8:b3:38:91:4e:87:16:42:02:
f6:90:47:9a:ca:d7:ca:e7:9f:bf:ba:16:e8:84:d6:
22:7e:30:68:29:5c:fd:66:7a:6b:11:84:79:08:e2:
67:dc:d5:cc:f3:30:70:8b:0a:94:e3:ac:1d:be:80:
ff:37:48:62:6c:bc:1f:d8:d5:81:60:ae:23:60:b3:
46:73:32:cd:4e:ac:c7:0a:bf:96:cb:72:7e:ca:bd:
31:9d:6e:3d:3a:a0:6d:fe:78:b1:d7:e1:9c:e1:98:
a7:91:26:fd:de:75:6d:4c:9b:cf:1e:8d:b7:2b:9f:
5e:4b:ac:e2:2b:c1:40:ba:b3:8c:22:73:78:4a:48:
de:01:d6:e2:90:f1:ae:f5:00:6a:db:d3:17:2e:33:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3E:31:96:9E:66:B6:70:68:E6:54:C4:63:6F:32:D3:E4:09:30:F5
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/71daf0cca7d00d37e0df75178fb02474e6c7a328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:17:45:a0:fa:ed:ed:2a:23:e0:6f:d8:77:6f:7d:18:98:60:
bc:39:ee:3c:80:22:15:a1:7e:f4:cc:c0:1f:55:b6:24:51:f4:
bd:47:37:6c:a0:ea:2a:4e:38:e7:e8:00:06:4f:eb:b8:6c:3d:
eb:00:64:e2:9a:9a:a8:ca:a0:e5:39:39:84:5e:54:35:18:2f:
d7:53:ec:e4:6c:2e:91:b4:c0:86:52:ec:e7:e9:56:f3:dc:a6:
4b:94:d2:3f:3e:24:18:52:09:e8:b5:bd:74:c9:19:4b:9b:ec:
d6:eb:d8:3f:e1:d2:ab:f7:d5:4f:6a:6b:db:71:ad:11:14:21:
95:2a:65:c3:dd:61:d5:f2:d7:68:90:13:86:24:e9:ea:a4:bd:
d7:9b:89:16:e6:ff:99:97:c0:7e:f0:8a:c2:3a:07:4f:d0:27:
5f:5c:86:a1:1a:b2:38:a2:93:fc:0c:12:17:ba:fc:4e:19:9f:
29:31:a3:4a:e0:2b:43:1c:48:d5:52:da:81:39:ef:0a:a9:1a:
7b:0f:f0:14:61:72:aa:42:be:b7:58:89:95:86:b7:80:d4:25:
78:52:57:63:dc:da:c4:7d:f5:30:ec:b4:52:f0:ca:d5:23:28:
b8:97:11:de:7a:2e:20:da:8a:24:fd:31:96:a3:92:1e:cc:f3:
45:78:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org