Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/3b93abdec5229a9d6e43829969f369e8fc05bace.roa
File: 3b93abdec5229a9d6e43829969f369e8fc05bace.roa (raw, json)
Hash identifier: RjMbJPJDo6lqNewIpfETfgow0eUuqan/JQZcT8bufAE=
Subject key identifier: 0D:A8:13:5F:A2:97:77:E6:2C:2A:01:A3:0B:A3:D8:61:88:E6:79:86
Certificate issuer: /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial: 274851
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/3b93abdec5229a9d6e43829969f369e8fc05bace.roa
Signing time: Fri 23 Feb 2024 21:00:47 +0000
ROA not before: Fri 23 Feb 2024 21:00:46 +0000
ROA not after: Mon 23 Feb 2026 21:00:46 +0000
asID: 262168
IP address blocks: 200.115.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2574417 (0x274851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Validity
Not Before: Feb 23 21:00:46 2024 GMT
Not After : Feb 23 21:00:46 2026 GMT
Subject: CN=3b93abdec5229a9d6e43829969f369e8fc05bace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:66:80:fa:7f:1d:23:de:49:1f:1f:d3:32:
08:c1:a8:2e:10:da:81:a8:dc:c9:bb:1d:ee:e6:30:
34:3f:bd:0c:50:ad:a2:ba:cd:9c:fd:1e:7e:0a:54:
8a:55:e1:54:f5:b5:b1:2d:11:38:36:e5:86:35:eb:
70:70:1d:8c:69:9a:53:2e:a0:ab:8a:5a:25:26:4d:
a5:c9:c5:b7:ce:7a:c0:50:ce:99:3c:bd:cc:cd:f1:
ce:f5:58:82:de:44:3d:54:52:51:40:e9:70:4e:15:
8b:df:8b:4b:76:38:f5:1e:a6:b5:e2:f9:ce:2e:4e:
c8:52:e7:2f:d9:82:02:bc:0b:dc:d7:7b:97:a2:df:
4e:08:06:68:7b:81:e7:dd:c3:85:d9:a7:a0:a6:67:
79:07:0d:2b:d5:da:ee:d5:35:74:ee:96:2f:f2:22:
df:e5:4f:8e:41:54:f4:53:4d:58:ad:86:87:7b:f5:
bb:15:de:44:1d:68:17:aa:51:d9:fe:5d:00:e2:03:
b3:e9:18:93:6a:9b:eb:c9:48:ef:cb:9d:4a:5f:2f:
c6:fd:aa:a0:53:7c:49:eb:86:41:c5:de:9a:df:24:
23:75:ee:49:7a:ca:10:31:5e:94:58:4f:2b:cd:71:
93:8f:4e:69:b3:2f:76:4e:ab:61:bc:23:56:59:79:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A8:13:5F:A2:97:77:E6:2C:2A:01:A3:0B:A3:D8:61:88:E6:79:86
X509v3 Authority Key Identifier:
keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/3b93abdec5229a9d6e43829969f369e8fc05bace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:56:4e:a1:d4:06:54:98:ea:d5:60:c2:8a:36:e7:4e:89:94:
19:fa:d7:2b:63:80:33:0b:d3:4e:1c:00:50:ee:52:de:1c:97:
ad:ce:e1:05:d3:f6:e6:fe:18:7d:9c:e6:8a:f5:5a:d5:eb:9b:
fa:eb:5f:c5:65:c7:a3:b0:7b:d5:d8:b1:be:0e:35:a9:cc:5e:
03:62:af:43:4b:ca:19:56:0f:69:d8:63:f7:5f:97:9b:94:8f:
94:9e:35:36:f7:85:6a:c0:c8:6e:c4:40:3e:ed:32:18:89:f0:
36:d8:02:88:5a:bf:eb:72:c1:44:4a:f9:0e:e6:58:4f:e3:07:
7c:0f:52:91:ad:83:bf:d2:c0:a1:c4:32:f2:5a:fc:42:1d:4b:
a3:df:08:6b:cf:ed:6a:b7:26:bc:4b:d3:06:0c:a6:1e:be:e0:
85:02:16:0e:77:31:f3:21:1a:94:0d:b9:8c:df:63:9f:62:69:
b7:b7:88:d1:8f:39:d1:ef:14:d6:9e:19:c4:3b:49:54:38:74:
71:49:8d:d6:9d:2a:de:e7:19:d2:e3:cb:bb:71:40:2b:6a:81:
2e:2f:65:cc:d2:06:f9:13:65:08:8f:a0:eb:09:b5:2e:89:ca:
f1:47:36:cc:c2:95:bd:5b:b0:fc:04:69:3a:e8:39:9c:9d:42:
77:59:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org