Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/ae9ed83d0caad2ce0467961511b332b9cc4fa032.roa
File: ae9ed83d0caad2ce0467961511b332b9cc4fa032.roa (raw, json)
Hash identifier: p1+4y9J70tP8so8DruE81BhopL8EfB+42B8gB5a+7nI=
Subject key identifier: 66:AC:6E:94:92:D3:1B:DB:20:E4:03:53:01:D1:74:40:47:EB:2C:3C
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 21FB70
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/ae9ed83d0caad2ce0467961511b332b9cc4fa032.roa
Signing time: Tue 25 Apr 2023 15:04:41 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 28112
IP address blocks: 200.46.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227056 (0x21fb70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=ae9ed83d0caad2ce0467961511b332b9cc4fa032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:ad:fd:1b:eb:08:98:a3:57:fe:d4:ad:6c:
e2:57:69:6a:b5:e7:e5:05:ef:b0:ef:3c:19:01:7a:
f0:74:7b:6d:24:79:9c:9a:a3:b4:01:e7:44:e0:7b:
9d:07:66:49:5b:14:8b:94:1e:d6:15:4c:d9:89:55:
7b:ae:ab:81:6e:1a:a0:c6:3e:0d:cc:07:ae:2f:e8:
69:84:e5:06:cb:ba:de:6d:ae:31:1e:45:23:35:c2:
19:c9:8c:08:3a:d0:91:f5:10:7b:35:b6:90:e6:00:
74:98:ee:11:ed:34:5b:f3:54:1a:48:7a:fa:5c:da:
4e:bd:43:0a:f2:e5:c8:2e:d5:7a:5f:e5:6f:8d:65:
16:1d:92:34:3f:29:ee:82:d5:8d:77:49:12:09:d3:
ac:a8:ab:aa:76:e9:3d:13:4f:c0:24:02:83:d0:02:
e4:7b:b6:39:5e:2f:83:74:1c:47:d5:aa:92:26:bf:
19:9b:b8:41:8b:84:60:d1:28:e5:42:b1:08:dd:e5:
fa:1d:42:2e:7e:d4:98:28:97:11:70:70:28:2d:1f:
22:6b:f8:9b:aa:69:74:a2:3c:48:19:eb:7b:11:63:
b2:71:f3:5f:b9:b7:60:ae:16:dd:70:2f:ca:9e:26:
b9:df:e0:99:8d:95:e7:12:de:28:22:b0:63:91:aa:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:6E:94:92:D3:1B:DB:20:E4:03:53:01:D1:74:40:47:EB:2C:3C
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/ae9ed83d0caad2ce0467961511b332b9cc4fa032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.12.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3f:8f:e9:58:55:34:49:cc:a6:1c:82:f6:7b:4f:0e:9a:98:
cf:20:df:e9:14:0b:6f:0a:3f:5b:3e:cd:97:bd:5b:49:53:f2:
6f:e8:ca:3d:81:30:f3:21:58:67:65:f6:7e:9a:dd:61:9e:9e:
54:d6:a4:09:bc:d3:9b:e4:b3:64:14:95:f1:2e:4f:ff:c3:c0:
db:d5:9a:a2:e0:06:e5:9c:b0:61:27:a4:c9:7a:6f:4a:4a:ce:
4e:ba:23:34:49:a8:47:3c:79:a6:91:d4:f7:5e:70:7e:cb:e4:
36:00:c9:6a:93:c8:09:96:db:bf:95:63:40:d5:bd:80:0e:dc:
83:57:5f:10:7b:a5:4d:94:a7:65:86:19:4f:c0:3d:60:00:69:
df:2e:0c:80:97:f5:9b:b5:f5:df:78:ec:78:98:6d:cf:73:e2:
16:ca:eb:a9:69:fb:69:bc:bb:20:62:76:cb:53:34:93:71:af:
e4:df:29:9c:3b:c1:a6:2d:b2:f4:16:d3:5f:53:fd:bf:b0:7f:
60:e1:e6:be:86:39:bb:b3:0a:b8:1e:0b:73:8a:75:5a:92:fc:
86:5f:e7:c1:26:9b:15:f9:9d:6a:76:2a:71:56:4b:21:b5:8d:
d1:97:3b:f9:0c:51:d7:49:d1:62:7b:e9:1d:86:d6:6f:57:97:
dd:1a:33:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org