Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/86b824a31de3925e2abdaf66151ee60cefe55e67.roa
File: 86b824a31de3925e2abdaf66151ee60cefe55e67.roa (raw, json)
Hash identifier: Kqxn34Cvl7QL2MNNu+ufAPv/SJqbr18MQFdV8deFDX8=
Subject key identifier: C1:39:A1:45:2B:B7:52:F9:F8:37:09:2B:1D:12:63:9A:42:D8:50:04
Certificate issuer: /CN=5494bd71484d106b75c5bedf4263f48281a4e409
Certificate serial: 242CE2
Authority key identifier: 4C:B6:BE:C7:78:41:99:EC:CA:F0:31:13:8A:C9:9A:2E:66:AB:83:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5494bd71484d106b75c5bedf4263f48281a4e409.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/86b824a31de3925e2abdaf66151ee60cefe55e67.roa
Signing time: Thu 21 Sep 2023 16:59:50 +0000
ROA not before: Wed 20 Sep 2023 16:59:48 +0000
ROA not after: Sun 21 Sep 2025 16:59:48 +0000
asID: 20940
IP address blocks: 200.60.136.0/23 maxlen: 24
200.60.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2370786 (0x242ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5494bd71484d106b75c5bedf4263f48281a4e409
Validity
Not Before: Sep 20 16:59:48 2023 GMT
Not After : Sep 21 16:59:48 2025 GMT
Subject: CN=86b824a31de3925e2abdaf66151ee60cefe55e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:03:e5:91:98:0c:e3:d9:2b:cf:21:44:70:
04:3d:24:76:8b:b8:31:6c:67:b6:c6:f3:5b:38:99:
b2:40:06:51:c2:0d:4f:d1:0a:33:83:52:14:17:f1:
b8:15:09:10:59:d1:5c:a7:88:8d:d8:97:fc:e4:a4:
d6:81:dd:7d:8a:1d:f1:87:ab:1c:b4:f6:b5:0b:ff:
55:d4:e2:ef:73:3a:46:3a:15:c3:c7:8a:b8:ac:0e:
ac:ed:d4:e3:3d:4a:30:07:24:d6:ba:9f:9e:2e:93:
e0:68:41:b8:c8:73:fb:d5:21:ad:b0:47:55:07:33:
73:9f:51:39:ea:70:b2:d3:aa:13:f8:8d:1c:28:db:
7b:b6:20:8c:ce:6a:e1:5b:d2:b0:13:7b:ea:c9:71:
d7:58:f1:5d:cb:7a:13:43:6e:f4:9d:27:6c:9c:f6:
83:59:af:83:9a:c7:04:55:f0:44:04:8c:b8:f3:b3:
05:67:cf:9d:8f:6a:40:a5:1e:65:ef:5c:60:b3:ef:
4a:32:66:ae:41:ca:d2:0f:f7:e7:26:55:4d:c6:d9:
bb:ba:d4:0d:73:18:27:3c:07:b3:a6:90:b5:72:e3:
86:44:c6:73:ec:97:78:b1:59:41:02:cf:73:b2:6d:
73:bb:83:33:3c:9e:11:66:c5:69:2b:76:52:0b:08:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:39:A1:45:2B:B7:52:F9:F8:37:09:2B:1D:12:63:9A:42:D8:50:04
X509v3 Authority Key Identifier:
keyid:4C:B6:BE:C7:78:41:99:EC:CA:F0:31:13:8A:C9:9A:2E:66:AB:83:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5494bd71484d106b75c5bedf4263f48281a4e409.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/86b824a31de3925e2abdaf66151ee60cefe55e67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/5494bd71484d106b75c5bedf4263f48281a4e409.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.60.136.0/23
200.60.190.0/24
Signature Algorithm: sha256WithRSAEncryption
56:90:ae:4c:62:69:cd:0f:86:06:6c:fa:51:7c:10:c4:38:13:
a9:0b:33:ec:be:40:77:96:ae:e0:74:ab:c3:98:57:0a:fe:3e:
20:0f:85:b6:a0:33:a1:9c:d0:64:f9:1e:3e:6a:9f:29:3d:bc:
39:c2:ff:90:59:93:0e:cb:63:da:ac:ef:72:0b:b5:ae:81:b1:
49:6f:ab:fe:90:fc:5d:7a:19:51:ea:73:24:bb:d5:7c:9f:08:
0e:a4:6e:1a:16:cd:1c:c9:3f:2b:b7:34:6a:0e:4a:e2:97:38:
16:39:19:7d:89:d1:6d:2b:84:3d:e9:43:76:f4:04:83:76:c2:
24:dd:36:e9:40:8f:64:2c:e7:02:fe:9e:51:56:8d:7c:2c:9f:
ee:69:a6:e9:bd:0e:33:eb:cf:ea:97:c5:0c:2a:7b:1c:f6:82:
02:9c:79:4a:39:23:1c:94:80:cb:5b:ac:91:9e:86:86:a2:53:
75:5b:f4:b3:7b:a2:b9:92:51:78:7b:36:19:7d:d0:14:e6:f1:
79:fd:2b:13:dd:a6:f0:c6:e4:35:0e:4c:16:97:93:9d:cc:6e:
b0:85:6e:b4:b2:b8:28:a6:ab:f8:a4:99:2e:c5:a5:0a:a1:ad:
d0:33:60:75:4c:8c:7b:d5:53:1c:c6:4d:6c:8c:fc:bf:03:4e:
dd:05:86:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org