Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1d618ffae2bf4c284d7823fc0af55c01772fe9ef.roa
File: 1d618ffae2bf4c284d7823fc0af55c01772fe9ef.roa (raw, json)
Hash identifier: 10MvCnJmv6kM04lHTtQZWiN4J6D1RCVvpGZ567mBo2k=
Subject key identifier: 5C:2A:D9:76:CB:F2:F2:3E:59:BA:32:F3:51:E3:D6:44:A4:54:12:D2
Certificate issuer: /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial: 24ED34
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1d618ffae2bf4c284d7823fc0af55c01772fe9ef.roa
Signing time: Thu 10 Aug 2023 18:00:42 +0000
ROA not before: Wed 09 Aug 2023 18:00:35 +0000
ROA not after: Thu 10 Aug 2028 18:00:35 +0000
asID: 265689
IP address blocks: 200.123.59.0/24 maxlen: 24
200.123.60.0/23 maxlen: 24
200.50.162.0/23 maxlen: 24
200.50.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2420020 (0x24ed34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
Validity
Not Before: Aug 9 18:00:35 2023 GMT
Not After : Aug 10 18:00:35 2028 GMT
Subject: CN=1d618ffae2bf4c284d7823fc0af55c01772fe9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:bd:77:1f:5a:63:e3:3a:03:d8:36:b3:59:
a5:8c:b2:a5:a6:82:c9:41:82:15:33:ea:33:2f:25:
bf:ce:4f:ca:32:2a:10:45:7e:56:3b:27:3b:1f:c5:
cc:8e:a9:5b:a1:b4:b2:80:08:4a:17:57:b1:68:9d:
46:3b:10:f7:60:23:74:e9:d6:33:57:fa:b8:fa:a2:
a8:cb:b2:81:1c:d0:34:ec:d1:a7:15:e0:e9:50:51:
e5:aa:1e:5c:6d:2b:93:01:6f:f1:bd:7d:2c:01:8e:
bb:9e:47:16:19:a1:ba:91:d8:67:b8:0d:98:dc:c0:
d0:5e:26:11:e6:1e:5a:19:e5:8c:f5:3c:97:5d:18:
ea:55:07:23:2c:30:71:9f:11:77:a1:99:eb:6a:b7:
d4:ee:71:99:50:f0:19:b0:29:fa:2d:54:b9:b3:89:
78:02:9e:46:81:9e:e7:22:25:9e:e8:e1:88:98:0a:
e0:99:db:b9:6b:3d:12:4c:5a:bd:f8:cd:a5:eb:30:
84:c0:f9:e5:01:89:94:e7:51:b1:d7:9c:ed:f6:53:
01:4d:53:f0:50:b9:30:cf:ed:3a:c2:26:e1:7f:7a:
fc:13:28:87:ff:60:2d:36:5c:00:63:8c:08:93:dc:
47:48:59:30:5a:f9:53:b5:14:87:74:39:47:75:fc:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2A:D9:76:CB:F2:F2:3E:59:BA:32:F3:51:E3:D6:44:A4:54:12:D2
X509v3 Authority Key Identifier:
keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1d618ffae2bf4c284d7823fc0af55c01772fe9ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.162.0/23
200.50.165.0/24
200.123.59.0-200.123.61.255
Signature Algorithm: sha256WithRSAEncryption
2c:7f:c5:11:18:d0:c1:68:94:8c:ee:86:f8:80:7b:e5:99:8b:
3b:2e:0d:3e:11:71:1b:de:f3:48:3b:40:66:5e:16:ff:68:42:
73:f1:9e:b7:c8:29:2b:27:52:d0:7a:da:d9:a6:b2:fc:07:d2:
18:95:3e:68:23:28:3b:1f:00:a3:e0:2f:84:a2:4a:13:68:44:
b0:43:b3:f9:a6:3f:0d:64:a8:5c:71:09:68:5a:f8:b4:24:9b:
3b:a7:d1:1c:64:40:98:86:83:14:4f:57:e1:07:af:ef:39:8c:
29:8c:39:3b:10:7e:e0:43:f0:d1:18:fd:1a:f8:02:35:49:71:
81:0a:14:2d:8c:77:57:65:5f:bb:7c:e0:8a:86:0d:95:0a:15:
2d:ad:48:3a:ef:bd:bb:b6:20:cf:8f:05:d1:ee:7d:0a:8c:64:
7c:d0:de:1b:b6:cc:b7:ae:74:ec:07:50:d0:44:17:9a:10:98:
d5:a2:cb:70:d7:34:1e:f3:fd:51:5a:f3:ac:86:d9:0b:1f:d0:
40:de:09:ea:b5:72:a1:ab:4a:30:d0:f8:71:a2:c0:88:17:b0:
17:ad:fe:be:6f:5d:86:d3:ad:ea:c8:60:38:65:d8:9e:98:67:
02:97:50:9c:a3:5d:94:e8:fc:d6:1b:b2:8c:3d:07:66:3a:83:
78:d2:70:92
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDJO00MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
YmJjNTZhMjVkNjY0YWMxOGEzMjgzMDk1NTBjMGY2MzI5ZWEzNjIwHhcNMjMwODA5
MTgwMDM1WhcNMjgwODEwMTgwMDM1WjAzMTEwLwYDVQQDEygxZDYxOGZmYWUyYmY0
YzI4NGQ3ODIzZmMwYWY1NWMwMTc3MmZlOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvjy9dx9aY+M6A9g2s1mljLKlpoLJQYIVM+ozLyW/zk/KMioQ
RX5WOyc7H8XMjqlbobSygAhKF1exaJ1GOxD3YCN06dYzV/q4+qKoy7KBHNA07NGn
FeDpUFHlqh5cbSuTAW/xvX0sAY67nkcWGaG6kdhnuA2Y3MDQXiYR5h5aGeWM9TyX
XRjqVQcjLDBxnxF3oZnrarfU7nGZUPAZsCn6LVS5s4l4Ap5GgZ7nIiWe6OGImArg
mdu5az0STFq9+M2l6zCEwPnlAYmU51Gx15zt9lMBTVPwULkwz+06wibhf3r8EyiH
/2AtNlwAY4wIk9xHSFkwWvlTtRSHdDlHdfwTtwIDAQABo4ICbzCCAmswHQYDVR0O
BBYEFFwq2XbL8vI+Wboy81Hj1kSkVBLSMB8GA1UdIwQYMBaAFOxWMP+ndQU1YGwb
0Xk0OuMXY94tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjhiYmM1
NmEyNWQ2NjRhYzE4YTMyODMwOTU1MGMwZjYzMjllYTM2Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzFkNjE4ZmZhZTJiZjRjMjg0ZDc4MjNmYzBhZjU1YzAxNzcyZmU5ZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMjhiYmM1NmEyNWQ2NjRhYzE4YTMyODMwOTU1MGMwZjYzMjllYTM2
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQk
MCIwIAQCAAEwGgMEAcgyogMEAMgypTAMAwQAyHs7AwQByHs8MA0GCSqGSIb3DQEB
CwUAA4IBAQAsf8URGNDBaJSM7ob4gHvlmYs7Lg0+EXEb3vNIO0BmXhb/aEJz8Z63
yCkrJ1LQetrZprL8B9IYlT5oIyg7HwCj4C+EokoTaESwQ7P5pj8NZKhccQloWvi0
JJs7p9EcZECYhoMUT1fhB6/vOYwpjDk7EH7gQ/DRGP0a+AI1SXGBChQtjHdXZV+7
fOCKhg2VChUtrUg67727tiDPjwXR7n0KjGR80N4btsy3rnTsB1DQRBeaEJjVostw
1zQe8/1RWvOshtkLH9BA3gnqtXKhq0ow0PhxosCIF7AXrf6+b12G063qyGA4Zdie
mGcCl1Cco12U6PzWG7KMPQdmOoN40nCS
-----END CERTIFICATE-----
Generated at Tue Nov 7 16:57:29 2023 by rpki-client on console-ams.rpki-client.org