Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/0f9d23a5452ecd453df59c7f66bf54fe4a71867f.roa
File: 0f9d23a5452ecd453df59c7f66bf54fe4a71867f.roa (raw, json)
Hash identifier: 3ar+KBibPx8edlQbMzhZa/VXdBVUoO7zmh+OJ9fCBhI=
Subject key identifier: 10:55:78:30:B7:86:6C:E0:7F:88:2F:FF:85:C3:FF:D6:37:FB:E9:68
Certificate issuer: /CN=155b538c76786066deee9490cef7008c3829598e
Certificate serial: 030D95
Authority key identifier: 16:CA:3F:12:15:05:8A:99:58:0B:3F:E2:E8:1D:86:05:A4:33:B2:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/155b538c76786066deee9490cef7008c3829598e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/0f9d23a5452ecd453df59c7f66bf54fe4a71867f.roa
Signing time: Thu 04 Jan 2024 01:39:44 +0000
ROA not before: Thu 04 Jan 2024 01:39:44 +0000
ROA not after: Sun 04 Jan 2026 01:39:44 +0000
asID: 273074
IP address blocks: 200.33.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200085 (0x30d95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=155b538c76786066deee9490cef7008c3829598e
Validity
Not Before: Jan 4 01:39:44 2024 GMT
Not After : Jan 4 01:39:44 2026 GMT
Subject: CN=0f9d23a5452ecd453df59c7f66bf54fe4a71867f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:2e:26:ae:a6:76:6f:ea:53:18:6c:82:60:
b4:27:cc:38:ca:8b:1b:c9:2f:54:cd:ce:c0:2d:8b:
55:be:67:6f:d7:f9:fe:1b:53:ce:d1:13:05:72:f6:
10:d2:0a:b5:63:d4:ed:98:83:64:dd:1e:54:fc:2f:
2c:60:39:03:23:eb:36:37:e6:85:19:e0:ab:e7:a4:
5a:f1:6e:00:a5:4c:e0:3c:c0:6d:dc:b9:83:cb:41:
cd:03:9e:62:2c:70:42:71:89:ca:65:5f:62:86:9a:
ba:5b:bd:c1:d7:49:37:dd:01:2b:9d:88:09:31:fb:
91:48:ab:fe:22:f8:10:b1:6f:72:21:ca:0c:dc:70:
7e:14:03:c7:1e:59:bf:3f:89:ef:43:57:5a:cc:fb:
16:aa:4d:8b:c6:49:c0:cc:e4:3f:eb:ed:1e:3c:4f:
5d:c1:ef:63:43:18:5a:77:65:e3:f6:ae:e2:58:5d:
e2:00:39:bb:d9:43:01:98:67:12:7c:7c:f6:7d:a1:
8a:3b:a5:bb:24:fe:1a:32:6b:b2:88:0a:26:e8:f9:
8b:55:8e:ae:e2:1f:73:3a:d7:95:94:c5:5f:15:b0:
c3:45:6a:7e:48:8d:9f:70:14:87:5a:e5:f1:78:7f:
f3:dc:82:77:b1:77:94:a7:2a:3d:9d:01:33:be:37:
de:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:55:78:30:B7:86:6C:E0:7F:88:2F:FF:85:C3:FF:D6:37:FB:E9:68
X509v3 Authority Key Identifier:
keyid:16:CA:3F:12:15:05:8A:99:58:0B:3F:E2:E8:1D:86:05:A4:33:B2:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/155b538c76786066deee9490cef7008c3829598e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/0f9d23a5452ecd453df59c7f66bf54fe4a71867f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/155b538c76786066deee9490cef7008c3829598e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.28.0/24
Signature Algorithm: sha256WithRSAEncryption
01:49:ab:c2:5b:15:61:48:2c:19:3a:3b:71:87:b5:36:d2:21:
1d:2e:2c:f7:0b:12:d2:8d:15:3a:6a:ff:e7:00:55:b3:85:b3:
e9:7e:5a:a0:45:86:7c:bb:f0:36:b5:e3:c8:ae:7e:40:99:c3:
76:61:be:3d:c2:56:00:86:0e:bf:0f:3d:2d:a8:30:f1:22:d5:
77:c5:9a:68:83:41:8b:0a:0a:2a:ef:6b:d5:b3:46:44:27:43:
7a:e8:9a:d0:83:b2:de:ca:81:d9:dc:e6:09:e4:de:38:81:ae:
00:13:2d:b1:53:16:f6:10:9a:3e:f1:2d:3f:05:e1:06:cc:1d:
d0:72:51:1c:30:20:11:37:44:05:51:95:02:22:84:87:3f:5a:
43:f6:dd:26:dc:c4:cd:21:7a:bf:01:c1:6f:e1:3a:08:ee:c1:
9a:87:eb:70:29:36:0e:78:76:66:59:81:b4:94:5c:a7:95:1d:
ca:1d:16:16:9c:b5:d4:9e:e1:60:f8:8c:dc:37:fe:8b:41:0b:
02:be:ec:e1:b6:fd:9e:9b:2f:03:dc:d1:d2:ae:17:43:9f:2f:
2e:51:db:78:0d:9c:45:36:75:51:c2:b5:d4:0f:a2:d7:fb:61:
e6:1f:11:7e:31:83:ab:81:38:4a:55:4b:02:9e:b7:47:43:f7:
83:b9:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org