Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/dc646e3668e2199b45193618e83c53766e3769e0.roa
File: dc646e3668e2199b45193618e83c53766e3769e0.roa (raw, json)
Hash identifier: LoApCwCToQs9zfuYqqPSxKR2/eQC0dwcKGEfLlU33p8=
Subject key identifier: CE:CC:36:A3:F1:E7:27:11:C3:BD:3F:B7:3A:AE:07:71:93:C1:AA:D9
Certificate issuer: /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial: 12D273
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/dc646e3668e2199b45193618e83c53766e3769e0.roa
Signing time: Thu 22 Jun 2023 19:12:31 +0000
ROA not before: Wed 21 Jun 2023 19:12:29 +0000
ROA not after: Sun 22 Jun 2025 19:12:29 +0000
asID: 203
IP address blocks: 200.1.175.0/24 maxlen: 24
201.221.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233523 (0x12d273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
Validity
Not Before: Jun 21 19:12:29 2023 GMT
Not After : Jun 22 19:12:29 2025 GMT
Subject: CN=dc646e3668e2199b45193618e83c53766e3769e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:17:3a:b9:f2:ac:6d:0d:9a:2c:26:dc:0f:c2:
0f:27:17:24:cf:40:68:2d:0e:cb:01:24:73:a7:cb:
c3:c9:23:16:8b:80:e9:d6:76:86:81:b6:50:01:26:
d7:69:9a:da:37:10:16:d5:ee:e1:0f:8d:d2:8c:40:
24:a0:9c:92:a4:7a:46:33:b2:c4:a7:fd:29:93:28:
03:2a:d4:27:49:0f:ba:ce:3b:cd:47:e5:c4:be:15:
a6:97:1d:9c:57:72:c6:84:61:10:ec:1e:b7:8a:58:
6d:12:5a:e5:02:eb:27:50:20:08:53:11:e0:fe:89:
20:46:3d:dd:9a:41:b8:01:9c:d3:fe:09:ca:61:51:
38:86:0b:3d:1f:e8:85:bd:ae:60:18:fb:fb:5d:04:
9a:12:31:51:84:82:86:eb:74:99:55:1d:0f:a5:fc:
71:a4:c9:82:4d:de:4b:52:ec:81:33:42:f3:24:e1:
fc:1a:c7:77:c1:5a:52:62:3d:1f:9b:89:89:ec:ca:
cc:f3:8a:03:17:50:e3:1f:eb:60:96:15:d7:80:13:
a2:54:54:6b:ef:08:45:3a:ec:4b:1b:e6:30:5b:95:
63:18:23:05:9b:76:c6:c5:0d:29:74:26:68:e5:8e:
f5:69:c3:64:19:d5:5c:d4:02:ac:ab:98:36:ef:31:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CC:36:A3:F1:E7:27:11:C3:BD:3F:B7:3A:AE:07:71:93:C1:AA:D9
X509v3 Authority Key Identifier:
keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/dc646e3668e2199b45193618e83c53766e3769e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.1.175.0/24
201.221.124.0/23
Signature Algorithm: sha256WithRSAEncryption
77:a7:8d:f5:d8:06:75:64:96:ab:70:a3:fa:d9:a0:4b:4d:05:
1f:a7:8d:08:b7:25:b9:a1:79:cd:05:bf:45:eb:d0:44:91:18:
13:bc:3c:f7:e7:6d:56:30:38:0f:51:4d:29:eb:04:8b:58:86:
c9:70:f5:ff:93:2b:94:86:d1:ca:84:f8:5b:f6:e4:4a:dd:4d:
d4:e4:96:60:2e:c5:39:b6:ac:cb:0d:e5:55:60:08:9e:00:c9:
a0:c3:68:f0:91:0a:9c:32:ac:d7:3d:7b:87:20:4c:85:16:99:
7e:ae:c8:ae:97:b7:93:fd:e0:b8:2a:81:1b:06:3d:ab:b7:b3:
18:17:35:de:e9:30:7d:f9:67:43:c8:10:67:f7:93:9d:49:17:
73:0b:65:ec:c2:05:34:46:ab:53:0d:de:b8:eb:73:da:6d:57:
9d:19:8f:04:a5:a4:ac:7b:b2:e7:93:b3:3b:fb:d1:6c:d2:ed:
a8:68:8a:19:d8:6a:96:9c:e1:36:e2:83:e7:71:f1:35:27:44:
73:14:e8:fa:e4:dd:23:f7:fd:01:e2:1a:ea:ea:c3:74:7e:3a:
fc:a2:47:81:f9:de:12:4a:02:05:1d:2e:8f:74:35:b3:27:99:
de:50:49:54:63:14:aa:e9:3d:5b:d0:2c:86:59:88:9d:a3:e2:
38:38:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org