Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/5a5480597599416f7344c0586b442e9f8e0b725e.roa
File: 5a5480597599416f7344c0586b442e9f8e0b725e.roa (raw, json)
Hash identifier: 5kff+koWTuBluEnsKlfha1bQOfxyrSrLK4s1mNu5PLc=
Subject key identifier: 08:00:09:74:0F:D1:76:32:88:49:C7:78:20:B4:CE:64:4E:38:4F:87
Certificate issuer: /CN=73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc
Certificate serial: 121209
Authority key identifier: FB:F7:CF:61:86:63:D8:A1:ED:59:F8:52:BC:AC:8A:23:37:2F:97:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/5a5480597599416f7344c0586b442e9f8e0b725e.roa
Signing time: Mon 22 May 2023 08:30:00 +0000
ROA not before: Sun 21 May 2023 08:30:00 +0000
ROA not after: Tue 20 May 2025 08:30:00 +0000
asID: 271880
IP address blocks: 200.36.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184265 (0x121209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc
Validity
Not Before: May 21 08:30:00 2023 GMT
Not After : May 20 08:30:00 2025 GMT
Subject: CN=5a5480597599416f7344c0586b442e9f8e0b725e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:23:77:8c:ba:6c:01:64:1d:f3:71:6d:ee:
5c:3d:86:1e:e8:6e:9c:6c:5d:e4:85:7c:ea:98:27:
b1:62:4e:02:d1:af:01:21:f0:bd:67:68:38:ef:df:
b5:2b:e2:ae:d1:06:32:c3:6c:6e:77:08:09:1e:6e:
77:c8:72:07:95:d2:b5:26:56:ef:a5:d2:49:5d:ae:
9d:46:5a:d7:95:f8:25:0c:ee:fb:94:14:24:21:e9:
2a:0c:f0:a6:50:0d:b0:f6:73:e7:fa:3e:bc:31:fb:
e8:41:e7:c1:d9:8a:0d:c8:dc:b6:be:11:60:39:20:
f4:19:66:52:9b:a7:5c:6c:35:27:4d:d7:c4:91:31:
74:b3:e2:3c:b0:11:4f:78:18:bd:68:5c:d9:c2:2a:
6a:bf:03:e9:0a:b2:d1:b1:d2:a1:69:d2:52:7a:17:
1c:49:79:09:b9:26:da:a4:ed:fa:3a:bb:a6:74:c5:
6d:2d:8e:f5:2e:0c:76:df:34:e3:1f:bf:86:0f:75:
23:ce:82:77:1b:ae:94:db:d3:b5:e3:35:de:47:57:
a8:89:44:c7:d2:89:e7:0f:72:b0:ad:52:3f:1d:53:
54:80:b0:73:1a:02:6c:f5:f0:31:db:18:2e:7a:00:
20:ee:8b:15:02:ea:fe:39:32:5f:94:79:0e:a8:f2:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:00:09:74:0F:D1:76:32:88:49:C7:78:20:B4:CE:64:4E:38:4F:87
X509v3 Authority Key Identifier:
keyid:FB:F7:CF:61:86:63:D8:A1:ED:59:F8:52:BC:AC:8A:23:37:2F:97:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/5a5480597599416f7344c0586b442e9f8e0b725e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:be:ea:cf:bc:07:25:e1:de:66:7a:05:09:d0:f9:80:0c:de:
a6:59:9e:44:95:b2:37:de:2b:75:26:b5:6c:15:f7:db:3c:5a:
08:4c:9a:8e:59:dd:98:c7:86:96:b5:5f:7d:6e:ac:59:ce:7b:
ec:0f:97:bb:99:f1:0b:99:75:25:a6:0a:e5:98:f9:47:2e:2b:
46:c1:a5:7c:7f:c7:01:fa:b5:df:c5:9d:41:bf:aa:bf:3b:eb:
95:92:37:43:4c:ce:7e:8e:3e:0e:5b:5f:76:00:8b:86:45:90:
83:ed:df:f5:44:8a:ef:24:c3:8b:d2:3f:8e:ac:b0:a7:d9:5f:
6b:63:ef:74:66:1b:01:f9:8f:b2:35:41:45:14:ed:62:b8:33:
ec:8c:f5:66:c9:f3:f3:16:d7:d7:63:6a:ee:f0:73:bb:02:d2:
43:eb:49:1d:01:f5:94:a8:7e:da:8c:be:1e:90:f8:eb:36:91:
2d:16:0a:b9:22:e1:b7:b2:b5:31:26:18:bc:82:46:c8:01:65:
84:3d:cb:c6:37:3d:23:03:a4:d2:3a:0b:d6:e9:95:54:3b:f3:
64:f5:cd:e6:37:c4:7c:1e:68:9e:1f:7a:40:c7:c1:8f:b3:5f:
82:0d:6f:d0:fc:ef:e6:6b:34:5f:58:19:2f:c7:87:70:36:6e:
a8:d4:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org