Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a8fe174f97884761c1ffd921d7151465b88c89b1.roa
File: a8fe174f97884761c1ffd921d7151465b88c89b1.roa (raw, json)
Hash identifier: tvLESUHNfFRAL82piguFhuYMC91/y5R+2E8Ye6DDTMM=
Subject key identifier: D0:F7:2B:EF:29:37:23:B6:D0:42:B8:7B:D0:A4:A9:BE:7C:B3:DB:37
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 20BC8C
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a8fe174f97884761c1ffd921d7151465b88c89b1.roa
Signing time: Fri 24 Mar 2023 08:30:50 +0000
ROA not before: Thu 23 Mar 2023 08:30:50 +0000
ROA not after: Sat 22 Mar 2025 08:30:50 +0000
asID: 21599
IP address blocks: 200.46.0.0/17 maxlen: 24
200.46.128.0/19 maxlen: 24
200.46.160.0/20 maxlen: 24
200.46.176.0/20 maxlen: 24
200.46.192.0/20 maxlen: 24
200.46.208.0/20 maxlen: 24
200.46.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145420 (0x20bc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Mar 23 08:30:50 2023 GMT
Not After : Mar 22 08:30:50 2025 GMT
Subject: CN=a8fe174f97884761c1ffd921d7151465b88c89b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:05:4b:45:d7:e0:62:c2:35:42:d1:08:e5:
41:81:da:63:f4:31:3e:c4:c8:2f:77:ad:2a:3f:36:
02:27:4a:18:24:1b:93:23:88:8b:c7:3c:e7:eb:27:
8f:2f:63:12:25:0f:cd:e0:5a:64:a4:5b:ae:8a:a3:
10:c1:5a:92:a5:82:1a:53:09:62:cc:50:a2:8d:df:
cb:19:5e:07:fc:09:ba:0d:54:cf:d9:43:fc:29:74:
6e:97:56:44:a3:5c:15:e6:16:62:68:f9:1f:0f:ed:
92:f8:9d:8c:9d:0e:03:b9:6c:0b:c7:e9:57:49:22:
f6:b1:17:27:07:f7:a2:70:e4:14:c1:80:22:1f:ae:
c9:69:08:2a:dc:63:18:d6:f2:fe:ac:47:d6:83:1c:
2f:15:36:4e:ca:8a:70:ea:77:84:43:04:ec:05:3a:
03:a7:83:aa:eb:fc:b4:77:a4:f0:8f:0c:07:44:6a:
68:f6:aa:93:44:a0:2b:a7:64:fc:b9:6a:03:08:ab:
8d:4a:e9:dc:dc:2d:5c:3b:41:74:fd:7f:90:cd:bf:
e0:4a:e7:79:67:f0:09:f5:01:81:05:34:e8:47:b6:
ca:31:8a:d2:99:06:a1:a5:4b:60:52:d6:ab:71:92:
36:6a:94:f6:ec:b6:0a:cf:4f:ea:77:11:8f:3d:88:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F7:2B:EF:29:37:23:B6:D0:42:B8:7B:D0:A4:A9:BE:7C:B3:DB:37
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a8fe174f97884761c1ffd921d7151465b88c89b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:05:8c:c9:3e:01:9f:ca:1a:5d:b8:01:38:35:d4:2f:5e:ac:
71:6f:25:bb:60:76:51:25:38:a3:36:e4:cf:c8:4c:29:22:e3:
21:43:0c:9b:f0:03:39:37:14:3d:31:05:1d:ee:e0:4f:2e:db:
a7:33:93:23:bc:17:c2:25:37:ae:e5:7a:45:a1:f8:ba:5f:fc:
6f:24:21:cf:4c:3a:c2:46:c4:81:df:9c:a1:32:ca:52:08:8c:
1d:fc:71:2d:b4:0d:5f:5d:76:bb:f0:e7:35:bf:aa:11:13:83:
89:42:08:6b:49:a7:c7:c2:ae:08:84:5e:80:e3:db:6e:65:6c:
4a:00:04:d1:27:56:df:15:d0:d1:bf:e4:c8:32:d4:18:3f:ba:
66:c6:bf:ec:ba:8e:62:19:31:90:d0:70:48:42:e6:3c:1e:a0:
a3:7e:36:f1:64:ec:85:ec:8c:41:5a:16:69:dc:12:47:28:e1:
d9:23:5c:d4:08:f2:3f:0f:19:45:a4:d1:fc:5a:19:79:95:56:
0e:96:45:d0:5a:e7:fa:cc:ec:cf:06:48:3a:de:85:8c:da:dd:
73:70:ba:3d:c0:d8:f6:8d:cc:8e:24:f1:fc:2f:b0:7d:a3:07:
1c:ac:4d:8b:99:b0:01:8f:d1:ef:96:d8:7b:8d:dd:28:7a:58:
76:42:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org