Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/3e833788d76509a3c2d95ddf12924a8edbc41405.roa
File: 3e833788d76509a3c2d95ddf12924a8edbc41405.roa (raw, json)
Hash identifier: rkdzOctSksYOyhpwojsMrp5FBj0cI/sT0Dr91Bo50UQ=
Subject key identifier: 68:36:FC:83:99:FB:A4:25:20:A6:D0:DF:35:E5:58:4D:51:55:91:A2
Certificate issuer: /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial: 1AB093
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/3e833788d76509a3c2d95ddf12924a8edbc41405.roa
Signing time: Tue 02 Apr 2024 05:05:21 +0000
ROA not before: Tue 02 Apr 2024 05:05:21 +0000
ROA not after: Thu 02 Apr 2026 05:05:21 +0000
asID: 14593
IP address blocks: 200.189.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1749139 (0x1ab093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
Validity
Not Before: Apr 2 05:05:21 2024 GMT
Not After : Apr 2 05:05:21 2026 GMT
Subject: CN=3e833788d76509a3c2d95ddf12924a8edbc41405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:00:34:2b:ca:f8:9c:92:46:3e:85:13:98:
11:23:04:70:c9:84:2b:7a:d8:d8:c8:51:1b:8b:3a:
b1:94:0c:81:5a:ea:2b:37:b5:38:93:e6:93:c3:9f:
db:05:a1:1a:83:1b:7b:78:3b:8b:35:19:e1:64:6b:
d5:c5:26:0c:de:3e:05:45:c2:b1:7a:bc:ca:5a:ed:
13:76:38:e7:d6:c2:6d:6e:4d:df:5d:44:41:c5:e8:
d6:78:fe:a2:5c:2a:ac:98:8b:5a:26:17:86:8c:71:
7a:ef:6d:4c:80:98:96:cc:02:77:91:fe:cb:47:98:
a1:d3:df:ca:cc:8c:d8:8f:a6:1f:46:9d:29:f4:43:
ca:6a:30:c7:77:ed:53:23:7d:a4:c0:8a:d3:35:11:
65:51:f5:25:19:c4:2b:e7:b0:a3:a5:8f:8e:75:d9:
0e:13:be:ad:28:3d:29:09:8d:dc:dc:53:88:ea:ad:
65:71:05:2b:46:9b:e3:86:25:52:24:33:1a:76:33:
4a:87:75:d8:d6:76:5b:40:6c:41:c5:ed:12:f0:83:
dc:53:27:b0:64:3a:4c:4e:bc:61:39:33:cc:2c:a0:
f1:05:d9:a8:6c:1c:a8:4c:2d:1b:f5:ac:95:85:c4:
23:f9:5b:3a:03:81:73:7f:75:6f:2d:e5:8f:8f:fc:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:36:FC:83:99:FB:A4:25:20:A6:D0:DF:35:E5:58:4D:51:55:91:A2
X509v3 Authority Key Identifier:
keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/3e833788d76509a3c2d95ddf12924a8edbc41405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.189.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:e1:d0:18:2c:7b:d5:a9:a7:52:d2:c9:e3:18:cd:61:3f:24:
90:87:11:44:6f:ee:88:63:c4:ee:e2:88:7a:3c:6a:6d:92:d7:
7c:4c:56:5f:bc:0e:23:6d:4b:f4:38:d4:26:28:43:3e:7d:70:
af:53:9e:78:72:30:55:84:e3:b0:75:9c:12:08:66:2f:50:d1:
cc:af:89:be:7c:47:88:0a:54:92:f6:f8:1b:24:68:d6:2f:1b:
9d:5b:e7:12:71:c1:7c:a0:cb:aa:d5:3e:d0:25:0b:cb:59:e9:
82:0f:2c:74:83:3e:50:31:75:66:ec:9f:a0:e8:a5:af:9d:3f:
f8:b2:ad:f6:f9:0c:e4:38:d7:3f:e7:71:bf:50:20:4e:17:2d:
8c:cf:73:48:42:e9:1e:5a:26:09:65:5b:99:de:18:89:28:96:
b7:20:38:84:2b:94:6a:9d:74:52:c5:2a:44:d8:12:4c:18:26:
46:7c:e2:fd:9b:68:8c:fa:16:28:53:32:f0:62:98:e8:86:19:
f6:24:98:30:d5:35:e2:a3:17:78:dc:e6:e4:91:09:d0:00:77:
26:67:1a:2b:ff:05:ed:1e:95:21:1c:af:4c:34:e0:48:40:5e:
c8:f2:54:a4:36:42:76:5d:a1:51:6a:a0:3d:c5:66:5f:de:b5:
d9:ee:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org