Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2336b19218b550b73c9359debc23456d8c12cf73.roa
File: 2336b19218b550b73c9359debc23456d8c12cf73.roa (raw, json)
Hash identifier: Y9ICPLcYiEcqxBXwDdFegzLOONa7U3oxuliFxKLJq7c=
Subject key identifier: 17:F2:53:E3:8F:F7:18:A4:AF:F6:5F:42:05:F0:1D:AD:40:3C:DD:B8
Certificate issuer: /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial: 29FF82
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2336b19218b550b73c9359debc23456d8c12cf73.roa
Signing time: Tue 30 Jan 2024 15:01:02 +0000
ROA not before: Tue 30 Jan 2024 15:00:49 +0000
ROA not after: Tue 30 Jan 2029 15:00:49 +0000
asID: 264716
IP address blocks: 200.123.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2752386 (0x29ff82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Validity
Not Before: Jan 30 15:00:49 2024 GMT
Not After : Jan 30 15:00:49 2029 GMT
Subject: CN=2336b19218b550b73c9359debc23456d8c12cf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:91:1b:3c:d6:b1:a6:ba:9c:c8:20:0a:cf:bb:
90:d5:c7:8c:4e:14:25:4a:ba:07:dc:b3:28:d5:f9:
d5:c8:3f:cd:29:34:19:f7:f3:b1:68:b4:a0:47:f7:
a6:de:28:b5:15:b6:3a:a0:ff:20:b4:a4:52:b5:98:
cc:dc:6c:46:f7:e2:f1:cb:a8:82:1f:62:bb:dc:14:
9d:f1:00:37:94:1b:43:92:1c:e1:b4:bc:11:45:3e:
cd:19:d8:61:a8:2a:00:52:54:a4:a3:23:ed:fa:62:
ee:03:11:06:28:02:38:50:e1:ca:e8:eb:be:1b:04:
8b:b5:27:82:dc:4f:bb:58:e9:5d:db:84:48:a4:0d:
eb:05:ac:5a:34:f4:78:30:21:80:dd:c2:15:0d:ee:
59:23:e3:60:61:4a:82:10:9e:b8:52:9c:b9:dc:17:
bb:29:0a:af:c1:7f:f4:23:d2:fd:10:76:92:c5:67:
31:2d:88:d3:0e:14:7b:24:e1:21:eb:02:dd:8e:23:
92:ba:4a:91:1b:64:38:b9:01:0e:81:58:0f:08:0a:
6b:7d:a4:b1:b8:25:31:18:4d:4c:6d:08:c4:0f:2d:
3b:c0:d8:06:fd:fd:5f:c9:3c:97:e3:95:c3:6d:21:
dd:37:b7:5d:ed:d2:3b:a5:8f:0a:f2:bf:77:c9:69:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F2:53:E3:8F:F7:18:A4:AF:F6:5F:42:05:F0:1D:AD:40:3C:DD:B8
X509v3 Authority Key Identifier:
keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/2336b19218b550b73c9359debc23456d8c12cf73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.62.0/23
Signature Algorithm: sha256WithRSAEncryption
50:50:a1:5c:ec:1e:2a:b4:49:86:81:c2:5a:94:39:35:eb:b8:
20:ce:3c:16:4c:e1:b2:03:e7:65:82:df:fc:ad:1e:85:8e:16:
4b:d6:76:04:95:66:2e:2f:5c:12:a0:84:5f:9e:86:da:a2:35:
fa:3e:e8:43:de:21:8b:d3:0e:d5:d3:77:a2:89:51:cd:81:63:
58:69:f4:2b:98:f1:f3:04:70:f0:97:e7:30:ac:42:15:93:ee:
61:04:cf:0a:e4:cf:38:75:31:e5:d6:25:6a:4e:e8:25:1d:d8:
16:df:60:5c:f7:68:ea:ad:ed:fb:e8:08:fa:9b:39:11:af:d0:
82:c8:1e:ec:00:d8:56:77:d7:29:6d:77:77:1c:73:ff:33:9e:
44:02:5f:32:59:8c:bf:d5:ae:d6:e0:18:1a:b9:cd:ba:c6:2f:
11:3c:cc:dd:1f:d9:e4:b8:bb:de:72:a5:46:d5:d8:ef:87:f0:
35:05:bd:dc:3b:35:09:0a:a1:51:16:cc:0d:c9:b3:70:0b:ec:
96:89:a5:15:2a:68:4b:66:bf:95:23:5c:5d:7d:a2:23:8b:e7:
02:cb:37:37:34:ad:94:a2:73:67:96:30:ec:3e:07:76:36:c3:
e7:ae:df:f5:2b:ad:f0:98:da:0f:9a:ba:d4:14:0f:64:ff:46:
c6:51:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 21:34:55 2024 by rpki-client on console-ams.rpki-client.org