Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/328db06c50329b03fa32c029a89c95a342153033.roa
File: 328db06c50329b03fa32c029a89c95a342153033.roa (raw, json)
Hash identifier: eENil0GMtjSXHX1hcRhRmq/c+duBOveojlO1hkwFDLQ=
Subject key identifier: DC:65:3F:C2:BF:6C:C8:06:F7:80:0D:17:3A:D6:13:5E:09:4E:DE:5A
Certificate issuer: /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial: 2514E0
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/328db06c50329b03fa32c029a89c95a342153033.roa
Signing time: Thu 10 Aug 2023 18:00:54 +0000
ROA not before: Wed 09 Aug 2023 18:00:35 +0000
ROA not after: Thu 10 Aug 2028 18:00:35 +0000
asID: 10697
IP address blocks: 200.123.48.0/24 maxlen: 24
200.50.160.0/23 maxlen: 24
200.50.164.0/24 maxlen: 24
200.50.168.0/24 maxlen: 24
200.50.173.0/24 maxlen: 24
2800:820::/32 maxlen: 48
2800:820:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2430176 (0x2514e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
Validity
Not Before: Aug 9 18:00:35 2023 GMT
Not After : Aug 10 18:00:35 2028 GMT
Subject: CN=328db06c50329b03fa32c029a89c95a342153033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:ce:a0:02:24:a9:60:7c:d8:cb:a9:c6:62:
ff:8b:d9:73:ee:03:64:68:61:94:03:7d:9c:71:87:
de:b0:b7:01:a8:93:25:dc:7c:87:0a:d9:e5:eb:08:
e6:46:e5:16:71:c7:db:8e:b1:71:7a:dc:b9:a6:d8:
3b:b4:2a:3c:f8:e0:fc:db:a2:8f:77:44:0a:2f:8a:
08:be:cb:b5:f0:68:9d:f7:47:62:eb:17:66:7b:81:
30:61:17:79:7f:0f:25:77:5b:ba:13:31:95:9a:8a:
30:af:11:5d:3b:c1:e3:22:dc:71:b7:b3:ac:cc:10:
b8:f6:57:ad:52:22:81:36:a3:f4:af:c2:42:43:ff:
66:78:81:85:a2:fc:84:0a:a6:72:56:36:89:ec:85:
71:f9:de:8f:6d:00:03:38:6b:f2:8a:b9:43:98:3e:
6c:b9:99:98:17:fd:54:f4:5f:50:a0:67:ae:77:2a:
fc:01:94:f0:b6:20:88:06:bf:29:d5:fe:d6:b4:ed:
24:06:e8:63:fe:87:05:b7:d7:a7:fc:56:c7:20:2f:
83:f8:ed:42:d8:37:ea:1d:67:5a:51:b7:28:80:47:
be:cd:dd:1f:27:e4:71:03:89:7b:81:a2:e3:d6:47:
7f:d0:89:a3:eb:c4:b0:b7:40:6c:91:4b:64:9a:f5:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:65:3F:C2:BF:6C:C8:06:F7:80:0D:17:3A:D6:13:5E:09:4E:DE:5A
X509v3 Authority Key Identifier:
keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/328db06c50329b03fa32c029a89c95a342153033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.160.0/23
200.50.164.0/24
200.50.168.0/24
200.50.173.0/24
200.123.48.0/24
IPv6:
2800:820::/32
Signature Algorithm: sha256WithRSAEncryption
2b:27:61:89:76:29:27:07:81:8a:0a:77:1a:33:a2:cb:55:b5:
0c:1b:bd:95:4d:45:2d:fa:2f:68:fa:4e:63:27:0c:1f:6a:c9:
75:64:d3:1d:a0:dd:e0:43:b8:e1:53:7e:ca:1d:e4:d6:19:dd:
7e:bf:7e:65:f9:31:55:53:28:e6:dc:dc:60:04:f8:2c:6f:4b:
3b:3e:3e:17:15:7b:8d:a9:ad:d4:65:73:c7:2e:6b:0e:ed:94:
2a:f2:ed:f9:d0:50:c0:54:cf:a9:ee:28:35:7d:73:d8:fd:8f:
8c:d8:c7:0a:15:80:ac:59:a2:85:a0:8d:35:60:cb:df:3c:ce:
64:a6:e8:37:8e:f2:d3:2d:e2:8c:c5:ee:01:7b:b3:5d:a2:0a:
8f:c7:36:cd:44:b3:26:3d:cd:13:ac:60:cd:37:0e:cb:43:47:
a8:0f:65:ec:49:b8:cf:fd:75:6c:81:f9:9f:88:f7:f4:5a:10:
de:4d:ac:41:98:ad:e3:e9:84:04:43:4f:dc:a5:cf:97:56:27:
5e:e0:c9:c8:d3:3f:f6:01:64:52:6d:d8:5f:7f:bf:51:09:3b:
d2:02:ff:4b:06:f9:ae:e5:7f:4c:1b:b9:92:22:da:ef:84:cf:
43:8b:97:a1:72:f4:a9:da:46:f1:b3:0a:0e:7c:5d:10:73:1e:
84:c5:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:57:29 2023 by rpki-client on console-ams.rpki-client.org