Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/4bfe7ce057d1bdc7e8f3749dcab7d0e785048924.roa
File: 4bfe7ce057d1bdc7e8f3749dcab7d0e785048924.roa (raw, json)
Hash identifier: Vu/3GRLfZWtta5fs2IjdXoDcRWaXG29Oye622mprN/o=
Subject key identifier: A7:7B:CB:33:91:D8:47:CC:C1:2B:F4:A6:E4:5D:BF:E1:E9:44:9A:18
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 1E6390
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/4bfe7ce057d1bdc7e8f3749dcab7d0e785048924.roa
Signing time: Mon 05 Dec 2022 05:24:19 +0000
ROA not before: Sun 04 Dec 2022 05:22:00 +0000
ROA not after: Thu 05 Dec 2024 05:22:00 +0000
asID: 10697
IP address blocks: 200.123.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1991568 (0x1e6390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Dec 4 05:22:00 2022 GMT
Not After : Dec 5 05:22:00 2024 GMT
Subject: CN=4bfe7ce057d1bdc7e8f3749dcab7d0e785048924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2d:3b:32:bd:99:74:6b:b1:c2:a7:73:42:7b:
10:8f:1f:7a:75:c7:3e:ce:27:40:71:fc:12:d3:74:
8c:f3:a3:57:d0:0a:61:00:91:a4:c5:53:21:ad:d4:
d8:56:14:d5:3e:19:6c:25:28:dd:47:9b:e1:d7:0c:
02:b2:b8:e2:34:c7:b8:d3:03:90:d3:eb:73:57:0f:
43:0a:91:ab:69:09:f1:d8:13:53:e4:9c:db:44:49:
31:bf:74:e5:d3:73:d9:0b:7d:f0:a4:0c:33:68:1a:
8e:23:b6:04:15:af:7c:1a:4f:2d:ee:db:f9:08:2f:
ad:be:ce:4c:3d:49:1c:68:f4:fc:33:4c:2e:7f:6a:
79:59:dd:20:17:db:db:73:21:51:6a:66:75:b2:03:
33:9c:e2:61:55:84:75:69:88:6c:ec:d3:77:9d:4a:
54:eb:3c:25:c8:91:b3:55:0a:91:b8:59:1e:96:03:
8e:b9:44:67:a4:28:39:cf:07:63:fe:1b:26:13:51:
e6:c3:cc:f7:64:36:0b:61:fa:14:42:24:ac:de:4a:
32:2a:72:32:ca:61:f3:bc:67:2d:83:eb:dc:02:55:
4d:bc:c5:b4:40:18:45:0b:09:0b:db:8a:49:7b:68:
c0:03:40:68:7d:35:c1:1e:9c:89:42:05:7d:75:da:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:CB:33:91:D8:47:CC:C1:2B:F4:A6:E4:5D:BF:E1:E9:44:9A:18
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/4bfe7ce057d1bdc7e8f3749dcab7d0e785048924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b7:86:80:e6:f0:85:a7:49:e8:85:6f:f4:04:db:58:7c:45:
29:6d:01:26:98:96:4d:c1:68:7b:ba:44:87:7e:23:36:79:4b:
5f:51:5e:b4:45:be:02:91:0b:22:d4:3b:00:fb:9f:fb:4a:61:
03:e3:0b:95:ad:54:d5:30:b7:6d:f2:fe:41:a5:ac:eb:98:17:
90:10:52:b2:9a:93:8b:98:41:2c:bc:17:b4:a1:27:e2:d3:3d:
fc:c5:38:bf:0b:75:0a:bc:2c:19:01:0f:e7:25:16:6b:37:55:
eb:07:cd:aa:cc:2c:3a:5c:62:11:88:2c:f4:35:80:d9:54:8f:
90:45:37:1b:5b:5f:43:56:39:d4:9d:96:8f:90:bd:28:f8:ee:
8e:a1:5c:64:35:70:26:2e:67:1f:d2:19:aa:b0:95:49:0a:3f:
74:6e:af:d7:21:90:81:b8:9b:e2:2c:8f:65:e9:4a:c5:1d:74:
99:29:c4:68:11:5b:a5:bc:52:39:78:8c:02:10:13:e5:3d:b2:
0a:e1:d0:60:f7:b2:0d:71:0e:d0:4d:d6:2f:e7:db:48:4d:fc:
62:49:c1:a3:28:3d:7f:cc:e9:fb:45:41:c8:57:6c:29:42:61:
3c:31:de:97:3f:04:c1:3a:9a:2e:b5:3f:fe:c7:80:cb:46:58:
33:88:3e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org