Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/ac0329e78094fc7fc8a5d5d9e9872308c9e34219.roa
File: ac0329e78094fc7fc8a5d5d9e9872308c9e34219.roa (raw, json)
Hash identifier: 5XHCuymll0uws00btqIfKBefBgEMJv3JR58S28Wht+8=
Subject key identifier: C1:A1:C3:98:15:9E:C4:D7:5C:D6:37:B2:9B:10:F1:D8:A0:BE:C6:57
Certificate issuer: /CN=7532aa9172d6c90589b8b3a606a5cf88114d35d8
Certificate serial: 19E6D1
Authority key identifier: 15:7B:21:D6:77:35:5E:01:B6:92:84:2D:CD:BE:5D:FC:BC:89:58:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7532aa9172d6c90589b8b3a606a5cf88114d35d8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/ac0329e78094fc7fc8a5d5d9e9872308c9e34219.roa
Signing time: Tue 06 Jun 2023 00:06:39 +0000
ROA not before: Mon 05 Jun 2023 00:06:39 +0000
ROA not after: Fri 06 Jun 2025 00:06:39 +0000
asID: 270002
IP address blocks: 200.59.212.0/22 maxlen: 24
2803:31e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1697489 (0x19e6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7532aa9172d6c90589b8b3a606a5cf88114d35d8
Validity
Not Before: Jun 5 00:06:39 2023 GMT
Not After : Jun 6 00:06:39 2025 GMT
Subject: CN=ac0329e78094fc7fc8a5d5d9e9872308c9e34219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4e:f8:14:7f:21:07:4a:51:98:f1:11:81:8f:
45:6d:ac:78:cd:24:c8:e2:0d:b3:e3:30:b3:4c:97:
9e:dc:31:08:ba:57:e1:3f:ac:b7:26:a3:ec:2f:a5:
a6:f0:f1:58:6c:8a:c4:23:3a:ba:ea:56:1d:47:61:
69:5c:c3:b6:84:29:70:f0:33:5c:14:83:82:2a:75:
12:74:06:a9:7f:ff:6e:1d:54:bb:77:f4:22:d2:05:
18:b3:c3:07:04:f6:69:81:9f:73:9f:eb:10:00:e6:
d0:f2:6b:18:94:76:69:b8:26:b5:b4:28:8b:9e:3e:
2f:2c:fb:2f:67:6d:b4:94:43:98:ed:08:c6:8f:9e:
d9:3c:89:d2:ed:da:71:15:fb:41:b5:25:fe:8e:38:
cf:30:a7:0b:c5:86:89:7e:eb:f6:da:61:c6:92:45:
31:6d:53:27:61:5a:a9:9c:0f:2f:e6:2e:15:f5:57:
62:97:b6:0d:84:fa:c2:25:c0:06:47:d5:f4:1a:f1:
df:bd:75:dd:94:de:e9:24:60:1c:da:07:f2:11:a2:
62:d7:0b:84:c2:05:9e:ff:e3:15:6d:13:cb:2d:b4:
2d:4c:5f:d6:10:cb:0d:e9:fa:56:c8:aa:df:d8:ac:
cc:83:79:20:68:4c:92:b1:cf:08:5e:c5:9f:98:8c:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A1:C3:98:15:9E:C4:D7:5C:D6:37:B2:9B:10:F1:D8:A0:BE:C6:57
X509v3 Authority Key Identifier:
keyid:15:7B:21:D6:77:35:5E:01:B6:92:84:2D:CD:BE:5D:FC:BC:89:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7532aa9172d6c90589b8b3a606a5cf88114d35d8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/ac0329e78094fc7fc8a5d5d9e9872308c9e34219.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/7532aa9172d6c90589b8b3a606a5cf88114d35d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.59.212.0/22
IPv6:
2803:31e0::/32
Signature Algorithm: sha256WithRSAEncryption
93:03:fe:df:58:a8:20:01:66:fa:37:61:22:51:d2:32:13:8a:
97:7f:5d:53:90:4e:8c:4c:4f:f0:2f:ce:5d:89:ad:f6:dc:4f:
64:3a:be:14:d1:67:d2:25:d8:46:be:1a:18:ca:47:45:b3:d1:
7f:4a:e7:93:67:a2:00:5b:ad:16:7a:9f:3a:ff:9c:8a:97:05:
33:fe:25:1f:99:5e:d1:22:ca:34:69:d8:fa:e1:f8:0c:5b:b7:
12:bb:47:20:7a:c2:f0:11:d3:72:78:b1:b2:e5:d8:67:70:66:
9f:06:52:fe:fe:07:c8:2a:15:c5:40:87:e6:f5:6a:33:39:94:
b8:a3:ff:5f:22:5d:64:61:82:80:cd:4f:fd:86:96:17:96:24:
e7:f0:30:d7:5b:ba:8a:bb:ba:70:1b:b3:a4:73:df:05:8e:48:
39:5b:e6:ea:56:84:16:1c:4a:7a:4a:1c:dd:9a:0c:c1:0c:fb:
06:38:82:91:97:d6:5f:9b:3c:43:ef:99:f7:2d:6f:25:30:45:
65:f9:ed:9b:7e:d8:9b:de:d2:ef:4e:18:ab:63:4c:c7:81:27:
5e:65:cb:bc:37:5c:f8:33:3f:b7:c8:77:a0:ac:88:3a:f1:e9:
f6:82:ac:a3:07:f3:6a:0d:05:00:42:1c:c9:50:ee:b3:1d:cf:
88:d8:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org