Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/d4b0785100579c71f5ff064b41fb27f01d1d3add.roa
File: d4b0785100579c71f5ff064b41fb27f01d1d3add.roa (raw, json)
Hash identifier: QNBaYXmFTkQgetiZrqwbLvM+0aCv28nBIuBp+TJPRJE=
Subject key identifier: 71:AA:A1:37:F4:D6:10:18:A5:8D:0C:39:85:72:9A:EF:0C:83:88:8C
Certificate issuer: /CN=6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c
Certificate serial: 154D1F
Authority key identifier: 0E:C8:8E:FC:D0:A1:EA:3A:BE:3C:74:8C:C7:B4:DF:51:DA:07:17:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/d4b0785100579c71f5ff064b41fb27f01d1d3add.roa
Signing time: Mon 12 Jun 2023 16:04:22 +0000
ROA not before: Sun 11 Jun 2023 16:04:22 +0000
ROA not after: Thu 12 Jun 2025 16:04:22 +0000
asID: 60725
IP address blocks: 200.114.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395999 (0x154d1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c
Validity
Not Before: Jun 11 16:04:22 2023 GMT
Not After : Jun 12 16:04:22 2025 GMT
Subject: CN=d4b0785100579c71f5ff064b41fb27f01d1d3add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:29:2f:2c:5b:13:7d:d2:c2:51:90:17:16:
01:c5:0c:33:01:37:37:8c:26:bc:a7:2b:77:a2:ed:
aa:53:f6:c9:ab:22:44:35:6b:14:3e:38:aa:d6:15:
4f:0f:bb:00:00:3c:a0:89:2f:ad:8e:09:5b:25:20:
f6:9e:a7:7c:8f:69:47:e0:1c:c6:36:0e:d3:2d:ae:
de:36:79:d6:8a:db:9a:83:ad:bd:65:7a:48:4d:a3:
b0:3b:52:93:46:85:ab:fe:c5:e0:6d:74:4e:8d:b2:
35:cc:0b:89:78:de:cd:b2:97:e1:ec:9b:81:3f:e4:
e7:9d:5e:1f:c5:e9:b7:b8:7d:4f:86:9d:92:a9:26:
6c:bc:02:9f:cb:da:07:5b:af:37:55:52:47:49:c4:
72:62:a8:75:2d:f3:4d:ca:e7:3e:97:c4:23:73:d9:
cf:c6:f3:dc:bf:50:6e:1a:e2:d7:fb:cb:2c:77:6b:
f0:bd:39:86:45:54:ce:3d:8e:82:3c:9a:ca:85:94:
1a:9e:fe:44:c0:35:97:11:b4:3a:c0:f6:9b:ec:fe:
d7:a4:de:17:d9:59:49:33:26:bd:87:37:af:88:82:
1c:53:7a:b4:b3:41:cb:01:d6:45:56:ca:e5:d5:d5:
2d:38:86:e0:2a:e8:da:18:d7:e8:8b:e2:69:a8:a4:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AA:A1:37:F4:D6:10:18:A5:8D:0C:39:85:72:9A:EF:0C:83:88:8C
X509v3 Authority Key Identifier:
keyid:0E:C8:8E:FC:D0:A1:EA:3A:BE:3C:74:8C:C7:B4:DF:51:DA:07:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/d4b0785100579c71f5ff064b41fb27f01d1d3add.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.114.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3d:19:d0:76:5a:d1:57:90:a7:21:97:99:3e:fa:5c:c3:a4:
d4:ee:5b:42:99:e1:ee:53:b2:98:bd:3d:28:a6:dd:a2:88:d4:
54:ca:45:03:29:ea:21:f7:35:6d:01:1b:11:ea:34:f8:0a:00:
af:1a:16:af:54:58:fe:a3:d7:17:96:f8:16:09:c8:ff:28:fb:
0b:b9:29:73:aa:8a:a0:22:d3:ca:02:1d:47:a4:d2:03:65:57:
9b:6b:f2:ea:c0:88:8c:66:0f:4a:87:a3:26:f4:2d:5a:f7:ef:
92:02:8e:85:a4:df:96:c6:d9:ce:3e:ea:4f:57:71:cf:02:2e:
bc:c0:f5:97:de:04:7f:d2:95:80:c0:57:fc:24:99:43:cf:b4:
d4:9a:b0:34:f9:20:54:ba:64:64:3e:83:b1:6b:33:38:7c:05:
36:6f:06:a2:e9:61:8f:c0:11:4b:32:50:79:78:94:92:34:8f:
94:68:1a:14:5b:7e:36:e6:d4:f4:04:7b:86:6d:86:a8:a9:3e:
89:27:ff:36:a9:51:d5:8f:29:29:f7:5e:ce:b3:bd:6c:35:54:
47:47:19:b3:bb:98:bd:a8:97:d5:3a:17:6d:c2:43:1f:a4:ae:
bb:aa:bb:c7:62:66:a6:b2:4f:8f:10:e1:bf:c3:95:7e:c8:a1:
d9:23:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org