Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/09ab2b6ac24634ec6c5bebda7a980f9988d4e1c0.roa
File: 09ab2b6ac24634ec6c5bebda7a980f9988d4e1c0.roa (raw, json)
Hash identifier: alWTSgZPen2UZtDyxH2k3qjo3RTkQBvFVdhrKJFSRUc=
Subject key identifier: 9B:2C:11:7D:E9:6D:34:C4:61:7A:EC:6C:AF:07:B1:12:F5:52:9B:A9
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 17D14A
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/09ab2b6ac24634ec6c5bebda7a980f9988d4e1c0.roa
Signing time: Thu 07 Apr 2022 21:41:35 +0000
ROA not before: Thu 07 Apr 2022 03:00:00 +0000
ROA not after: Mon 07 Apr 2031 03:00:00 +0000
asID: 272114
IP address blocks: 200.123.32.0/23 maxlen: 23
200.123.32.0/24 maxlen: 24
200.123.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1560906 (0x17d14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Apr 7 03:00:00 2022 GMT
Not After : Apr 7 03:00:00 2031 GMT
Subject: CN=09ab2b6ac24634ec6c5bebda7a980f9988d4e1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:95:22:ab:24:39:07:6a:ce:6a:ff:11:c5:
47:94:e3:af:18:2f:de:86:b0:2c:6e:c5:f0:ee:e9:
9e:f9:5c:76:5e:8d:b3:bb:19:66:95:c2:9e:ea:7d:
78:9d:1c:ce:66:39:3a:5a:f2:17:72:e6:d2:de:84:
5f:60:4b:43:9a:fc:6d:72:12:f3:51:81:49:fd:1d:
10:a8:b0:e4:d7:3a:a0:de:c9:17:99:58:77:70:23:
cd:a9:81:09:68:92:d9:83:0f:9f:fd:da:ce:4c:b9:
03:57:88:3a:10:86:fe:bd:b8:15:06:11:8c:85:be:
17:2a:b6:6a:c4:0b:4f:03:b9:70:cc:ff:81:d3:ec:
ff:36:77:f2:81:63:94:59:3b:ec:4a:26:c3:2c:07:
48:1f:ca:cc:b8:6e:8c:1d:20:9e:b6:6f:c1:12:23:
c3:ec:68:d9:d1:3b:6f:25:d4:6f:10:b3:34:3f:e2:
3f:09:96:7d:07:30:d5:35:da:bc:de:1a:e2:aa:f8:
66:ff:17:da:fe:a9:e9:5a:2c:24:be:df:3e:6a:9d:
76:a3:e3:f7:5d:e6:a9:f6:ec:e9:f2:d3:b7:17:e8:
70:c6:cc:66:b8:de:d3:f0:2c:cb:17:21:73:78:5a:
8c:95:e5:25:5a:e8:ea:f4:8d:68:56:54:61:ec:b3:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2C:11:7D:E9:6D:34:C4:61:7A:EC:6C:AF:07:B1:12:F5:52:9B:A9
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/09ab2b6ac24634ec6c5bebda7a980f9988d4e1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:cb:1a:2f:f6:4a:e0:59:6c:8e:d4:78:0d:46:57:0f:d9:d3:
fa:8b:5e:f5:ce:84:d0:30:6d:e2:10:60:8f:e5:13:96:03:08:
93:51:73:07:32:ce:27:fe:3a:67:49:9e:5c:2e:c6:d2:c0:23:
e4:8a:e0:e3:91:06:14:97:49:02:21:02:34:2d:ed:5a:f1:0e:
2f:d8:41:14:06:54:2a:d1:b4:4a:55:60:8e:5d:82:e2:85:0a:
b5:45:ba:20:12:7c:78:3b:69:7e:51:11:60:50:17:e6:82:5f:
d8:54:42:5f:20:28:4d:e3:76:55:2f:a2:b8:c0:ea:20:8f:70:
87:3a:40:82:cb:5f:c2:03:49:b3:fd:8a:5e:b6:34:7a:f0:57:
49:06:17:25:41:cd:39:87:91:83:34:18:6a:af:74:ea:cc:f8:
e0:73:89:28:b6:5c:e3:d5:3b:f7:87:f9:9f:b3:e1:95:8d:72:
11:bd:d1:9d:0c:d5:d9:a4:c2:02:f7:81:22:e8:5c:a3:bc:7d:
06:5b:8f:a1:5e:62:ce:18:79:98:74:b8:f8:22:d3:62:38:2f:
8b:7b:ac:34:71:da:d6:58:1b:48:ee:ef:42:da:e6:b8:f8:cc:
c1:54:46:c6:02:0a:80:85:75:68:f3:43:d0:8d:7c:52:ba:1b:
c6:7a:72:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org