Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/5249efec41d36e462accab4d6396c4d23a262242.roa
File: 5249efec41d36e462accab4d6396c4d23a262242.roa (raw, json)
Hash identifier: aJrluLTmmBDNsu/+uSsujo3BMmzaqRNlETHfT4B+Yr4=
Subject key identifier: 0E:87:37:00:32:73:47:CB:C8:78:C9:B4:62:2A:C6:1A:E5:F8:89:F6
Certificate issuer: /CN=618d81debd8e70398acd1f9298d63fe47bdc09ff
Certificate serial: 0EBCF5
Authority key identifier: B6:98:DB:EB:36:C6:DC:92:DA:A3:B7:29:1A:9C:7D:65:8C:62:77:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/618d81debd8e70398acd1f9298d63fe47bdc09ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/5249efec41d36e462accab4d6396c4d23a262242.roa
Signing time: Fri 07 Oct 2022 20:43:41 +0000
ROA not before: Wed 05 Oct 2022 23:17:08 +0000
ROA not after: Sun 06 Oct 2024 00:17:08 +0000
asID: 20015
IP address blocks: 200.2.204.0/24 maxlen: 24
200.2.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 965877 (0xebcf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618d81debd8e70398acd1f9298d63fe47bdc09ff
Validity
Not Before: Oct 5 23:17:08 2022 GMT
Not After : Oct 6 00:17:08 2024 GMT
Subject: CN=5249efec41d36e462accab4d6396c4d23a262242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:f6:8e:d5:fb:ec:94:4f:bf:6e:5a:e4:0a:
a6:ba:33:ad:ad:5e:dc:c5:c7:4f:cf:27:15:3d:98:
00:c0:b2:b9:d8:11:6f:ca:94:32:5d:7e:ac:20:64:
25:3f:2b:19:e2:a9:e5:d9:3e:7c:d4:97:24:4b:d5:
1e:46:dd:4c:13:f9:34:9f:34:44:f4:8b:52:dc:5e:
d5:03:4c:a5:cb:71:53:1a:59:64:aa:e9:be:da:ad:
38:ea:db:18:d3:36:38:f0:9e:a2:0c:5b:88:c5:c1:
13:b0:79:d9:75:d8:47:61:89:43:74:3a:dc:9e:3b:
b3:56:ff:98:eb:7e:95:54:01:55:1b:e4:21:32:78:
0b:a4:3c:b0:8f:62:e3:62:cf:52:8f:ce:79:2f:b5:
8e:be:24:36:38:52:fb:cf:a7:5c:e7:37:f1:3f:d9:
1b:44:1c:8a:d7:41:59:a9:f4:c7:b3:c4:e7:4f:7a:
30:c6:47:a1:fe:1c:c4:85:a1:8d:23:28:06:8d:30:
5e:e6:f5:56:81:4b:25:42:a4:5a:0c:17:11:e6:bf:
8f:85:c2:4f:95:0c:30:93:5a:9a:54:26:1a:11:df:
c7:14:87:f6:3d:ca:0d:50:f3:9e:65:71:5c:b3:20:
2c:a8:1e:0d:20:7b:51:3c:0b:a6:ed:cb:69:07:83:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:87:37:00:32:73:47:CB:C8:78:C9:B4:62:2A:C6:1A:E5:F8:89:F6
X509v3 Authority Key Identifier:
keyid:B6:98:DB:EB:36:C6:DC:92:DA:A3:B7:29:1A:9C:7D:65:8C:62:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/618d81debd8e70398acd1f9298d63fe47bdc09ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/5249efec41d36e462accab4d6396c4d23a262242.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1dae3a98-a428-47cf-942e-c76eecde42aa/618d81debd8e70398acd1f9298d63fe47bdc09ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.2.204.0/23
Signature Algorithm: sha256WithRSAEncryption
11:ee:a6:e1:57:eb:a9:37:41:9a:42:e3:11:7e:43:4d:4e:07:
c0:69:18:b1:68:3b:34:45:fa:24:96:eb:b5:c5:bf:77:22:be:
40:48:54:c1:6c:ca:de:3d:20:97:8e:2b:3f:df:86:9c:8c:8a:
eb:d2:84:7b:fe:6b:a5:b1:60:22:51:7c:2a:f8:1c:c8:0a:88:
38:34:e8:45:d0:67:83:26:b9:5a:48:22:36:5f:1c:d2:06:5a:
ec:6c:1e:33:24:da:a2:fe:ec:52:56:84:63:a1:d8:3c:af:90:
e6:26:f6:b7:73:49:ed:e4:f5:6e:c3:67:14:a3:72:de:3a:ef:
67:8e:6b:d5:7f:66:9f:26:30:8d:48:68:fa:6c:64:3d:9e:b4:
20:a9:24:ce:1a:47:61:07:ec:2d:f8:43:8f:04:41:dc:53:23:
9d:1f:61:00:d6:cd:4d:de:3a:15:49:7d:a5:89:d6:7a:96:85:
10:a5:db:e1:de:da:9e:a8:42:5d:bb:46:89:00:d2:70:c0:4c:
b6:57:31:53:15:b4:e4:5b:54:98:dd:8a:03:1b:93:fb:d7:de:
b2:fb:1e:d9:5c:fd:eb:b3:11:9f:2c:47:06:11:fc:a2:7d:45:
51:9e:87:c7:33:a3:4a:f5:d2:51:fb:e0:72:54:d4:0f:7f:7a:
29:8d:f9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org