Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/ecc0c71cb0163dfeaa4b7205ff2ccee636a92222.roa
File: ecc0c71cb0163dfeaa4b7205ff2ccee636a92222.roa (raw, json)
Hash identifier: h0cLqeP0QuxaHvsqUI99faaX79FLOot8/Mj+LlZCl/g=
Subject key identifier: EE:84:D3:5F:0A:6C:C7:A5:6F:A1:2C:D6:5C:6D:E2:2F:EF:93:4D:AD
Certificate issuer: /CN=cdf3c4883ddca1519ed46106e0af85f1db80392f
Certificate serial: 11A1CB
Authority key identifier: 46:C2:C8:A1:9E:E3:9F:CB:34:26:C6:F1:3E:6F:59:9A:F8:52:B7:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf3c4883ddca1519ed46106e0af85f1db80392f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/ecc0c71cb0163dfeaa4b7205ff2ccee636a92222.roa
Signing time: Sun 20 Aug 2023 08:30:00 +0000
ROA not before: Sat 19 Aug 2023 08:30:00 +0000
ROA not after: Mon 18 Aug 2025 08:30:00 +0000
asID: 28120
IP address blocks: 200.114.88.0/21 maxlen: 24
2803:420::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155531 (0x11a1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf3c4883ddca1519ed46106e0af85f1db80392f
Validity
Not Before: Aug 19 08:30:00 2023 GMT
Not After : Aug 18 08:30:00 2025 GMT
Subject: CN=ecc0c71cb0163dfeaa4b7205ff2ccee636a92222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:bf:78:13:ee:b2:83:3b:9a:be:88:7b:8f:
7c:8e:40:20:6e:a6:ae:3a:2d:bb:d4:3d:85:9a:9b:
dd:ed:42:43:4d:6b:5d:66:48:32:1a:bf:a8:a0:20:
18:14:14:ac:d5:21:a6:eb:72:35:bd:f7:f6:f6:7e:
b8:73:f0:58:9d:da:94:e2:f1:e0:2e:41:62:1f:cb:
3d:33:72:e5:a9:c4:d9:59:75:a1:a1:e3:76:47:de:
65:96:50:35:b1:0d:60:54:cc:9e:1f:5a:45:51:2f:
e3:9d:d6:0c:ad:da:f9:ae:bb:6d:3e:62:54:19:9c:
96:b3:57:57:50:1f:7d:e6:66:08:28:59:e8:cc:73:
88:af:95:bb:5c:19:7f:e4:f0:f9:7f:f0:4a:52:cc:
4b:73:70:ac:94:65:60:8c:88:50:12:2d:3c:3f:18:
28:ac:ad:2d:c5:80:57:a0:b4:69:c7:c7:01:41:d8:
0e:76:26:39:a3:6b:26:65:b1:d3:61:63:27:47:2d:
dc:ed:0a:b6:35:1a:7e:e0:6a:c1:f1:68:4f:8e:9a:
33:1e:cb:35:1c:3a:32:68:d3:50:be:f6:8a:b4:0e:
16:da:3e:c8:d0:13:a8:35:76:d2:81:94:a7:8e:9b:
e6:0f:5f:c7:71:c9:3c:1a:4b:21:95:7e:b8:65:1e:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:84:D3:5F:0A:6C:C7:A5:6F:A1:2C:D6:5C:6D:E2:2F:EF:93:4D:AD
X509v3 Authority Key Identifier:
keyid:46:C2:C8:A1:9E:E3:9F:CB:34:26:C6:F1:3E:6F:59:9A:F8:52:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf3c4883ddca1519ed46106e0af85f1db80392f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/ecc0c71cb0163dfeaa4b7205ff2ccee636a92222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2200a3d3-0721-4a07-b8ef-5041a99c36ec/cdf3c4883ddca1519ed46106e0af85f1db80392f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.114.88.0/21
IPv6:
2803:420::/32
Signature Algorithm: sha256WithRSAEncryption
b1:d9:68:aa:84:8f:01:e5:ef:fb:68:90:3b:b2:38:b8:e5:73:
0d:7c:24:9b:1e:c1:52:48:26:70:3a:3a:3e:b1:87:dc:5d:a7:
a0:25:ca:99:86:96:cd:d6:fd:59:32:c5:1d:64:58:18:f5:fd:
52:8e:78:5d:22:21:61:ee:b8:e3:dd:cb:fb:a1:d1:a7:4c:64:
7b:e1:f3:b7:a2:48:34:91:44:54:bb:bc:bc:38:7c:05:c0:d8:
c5:95:fa:9c:c3:1a:bd:52:63:52:e2:f1:aa:a3:0b:28:6b:7e:
fc:89:c5:fd:be:44:b0:d4:8c:cf:ec:8f:c1:26:7b:d4:49:c7:
37:83:dd:ce:7f:db:49:c2:9a:c7:67:f9:55:c1:09:8a:1f:52:
42:93:70:0c:d1:fa:a9:2d:11:35:29:ae:b7:bd:4c:9e:e0:fd:
99:a8:2c:13:a4:b9:09:8d:5e:15:8a:af:01:d6:a0:f4:3c:f6:
59:c3:a6:68:43:55:8f:c9:e4:0b:0c:68:ae:92:15:0f:f1:eb:
6e:2b:31:aa:88:99:c3:4f:3c:16:b3:aa:e0:c5:d2:e3:3a:23:
e2:1b:f6:da:38:ef:8c:db:23:1f:d3:72:db:18:0c:c9:5e:17:
9d:bf:70:26:3a:62:a3:5a:c7:c3:15:d6:fe:79:76:50:62:28:
a8:61:86:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org