Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/40411b44cebfc967fc88c76c94d189fed552f0e7.roa
File: 40411b44cebfc967fc88c76c94d189fed552f0e7.roa (raw, json)
Hash identifier: 0Gs/w/6grov4Rj0yd50gpa4Tff+3dlYWKJ8x8k42fYQ=
Subject key identifier: BA:7B:E3:EC:80:0A:81:D2:77:F3:69:F4:01:39:EB:07:C5:36:29:F5
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 277F36
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/40411b44cebfc967fc88c76c94d189fed552f0e7.roa
Signing time: Tue 07 Nov 2023 16:00:49 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 52328
IP address blocks: 200.123.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2588470 (0x277f36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=40411b44cebfc967fc88c76c94d189fed552f0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:85:b7:ff:b2:e1:ef:4c:b6:0d:5d:39:1c:
74:b4:9f:85:2c:3d:19:17:77:d1:f3:b3:2f:90:2b:
4b:e9:2b:b5:88:ac:0d:75:1b:c6:c5:77:78:a5:b3:
f8:39:4e:e4:17:2f:cd:e3:56:ab:2d:58:5a:42:dc:
4f:89:80:f0:8f:4f:ed:1b:fc:60:10:dd:04:a2:33:
7b:e4:cd:51:0f:ef:46:88:4a:2e:e3:94:a7:02:f4:
b1:4f:89:73:4e:37:90:77:9b:c7:14:ec:2f:02:65:
86:2f:93:95:bc:af:3f:66:7d:9b:75:52:10:a9:5a:
e1:23:f3:12:80:70:57:f8:65:e3:50:db:df:5c:ed:
a1:3b:fe:d4:45:b0:99:85:58:e3:18:e2:a2:57:06:
1a:87:aa:b8:dd:77:66:58:0a:e2:4b:09:41:8e:63:
3b:2e:c7:18:9f:d2:fc:49:d6:48:8a:ac:58:97:9f:
43:2d:ed:09:6c:17:70:83:db:6e:8a:40:f2:a6:51:
09:33:fa:a6:cc:91:47:60:3c:fe:04:22:45:3d:47:
69:1c:ff:3c:db:32:f8:76:0c:74:a6:92:91:51:a6:
0d:03:fb:b1:6d:05:da:c2:03:fc:50:be:75:89:c3:
47:25:4b:9a:d7:83:ea:8b:ec:c4:72:36:74:61:b8:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7B:E3:EC:80:0A:81:D2:77:F3:69:F4:01:39:EB:07:C5:36:29:F5
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/40411b44cebfc967fc88c76c94d189fed552f0e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.52.0/23
Signature Algorithm: sha256WithRSAEncryption
15:9f:56:2c:31:54:6e:01:73:46:3a:9d:fe:e3:69:58:71:59:
15:8d:0d:f3:d6:23:75:9d:7a:e7:88:c7:07:76:08:a3:9f:7d:
78:6b:b6:0d:e1:1c:96:f4:98:08:4e:d7:b1:bd:06:7b:df:a9:
03:96:33:6e:14:e9:54:b7:ce:5d:3b:52:dd:15:2f:43:d0:e6:
9c:36:21:fd:f6:11:3d:53:60:c9:19:f5:c4:8c:9a:06:4a:ab:
70:fa:f8:1c:d4:80:80:46:2b:a9:4a:07:21:dd:8f:90:4c:e1:
c7:51:2d:40:21:e4:ab:6d:6b:1b:20:ff:70:16:6b:9c:5e:f2:
a1:e5:b6:e2:29:f8:bc:08:91:69:1a:fc:e9:fa:be:83:f5:80:
85:30:91:6d:a8:13:67:e3:a2:a0:af:ec:5b:78:27:94:e4:5c:
2e:37:d8:59:2a:55:81:e5:98:45:f0:0b:84:b3:c7:52:95:0c:
05:b7:79:7b:fd:77:91:c6:84:85:f6:28:c4:63:7f:b5:a0:33:
70:32:d0:5c:e1:89:b6:c3:44:c8:ce:55:a0:97:08:35:b4:f8:
ad:61:02:47:23:28:1a:34:3b:85:c6:92:0f:2d:4e:0d:69:a5:
c6:a2:d3:d2:cd:31:d8:7d:b8:6b:1c:e8:e4:3a:c8:fa:16:cd:
eb:01:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:32 2023 by rpki-client on console-fra.rpki-client.org