Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/66f8d88569292751e0d493b6acf2cea6b8efa827.roa
File: 66f8d88569292751e0d493b6acf2cea6b8efa827.roa (raw, json)
Hash identifier: IKxRyKZ7UPwhgoWFAOkOoyYA81kmJz2TLgWEPseWCPo=
Subject key identifier: 92:2E:BA:8B:8A:A3:65:F9:75:CA:08:73:4B:B5:0A:30:4F:AA:58:AB
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 279D59
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/66f8d88569292751e0d493b6acf2cea6b8efa827.roa
Signing time: Tue 07 Nov 2023 16:01:01 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 272114
IP address blocks: 200.123.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2596185 (0x279d59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=66f8d88569292751e0d493b6acf2cea6b8efa827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:86:48:d1:00:77:ce:60:e7:b5:8a:46:16:
97:10:ce:27:b4:d6:28:5b:c3:fe:c9:75:f8:c9:f2:
91:d2:2e:af:de:c2:ac:16:ec:59:52:a0:ef:8e:50:
92:54:8b:8b:b3:28:40:6e:aa:07:ff:31:fe:3d:b7:
89:d4:de:fd:5b:e3:ba:a8:ab:b0:1a:01:d0:2d:9a:
ac:de:c2:37:77:1a:47:98:ae:1c:22:9c:d4:de:c8:
f1:c6:1f:01:fc:ac:ea:a8:35:3e:43:1b:4f:95:e2:
7e:76:69:69:e4:25:2c:0b:e2:49:25:3f:82:70:79:
99:3c:19:ea:b4:f3:d3:82:53:93:50:60:cb:23:21:
01:24:a0:cd:21:dd:40:30:62:83:11:50:01:2b:ec:
82:0d:4d:b0:b1:07:87:0c:6f:46:ae:a0:94:26:bb:
30:0a:b3:fe:89:1b:f6:7d:d0:e5:c9:29:7e:58:6b:
29:0c:da:cf:de:80:ba:84:fe:06:b9:61:2d:20:ff:
8e:81:0d:c5:7a:2b:8d:fd:67:a4:d6:6f:31:3e:e9:
c4:4b:9d:7c:71:8f:c1:b8:b5:af:55:2c:fd:6f:b9:
8e:89:94:b4:67:f8:44:5d:8c:c5:5f:69:99:e2:ff:
79:bf:3d:86:d6:be:6c:3f:94:f8:63:46:a9:03:01:
c0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2E:BA:8B:8A:A3:65:F9:75:CA:08:73:4B:B5:0A:30:4F:AA:58:AB
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/66f8d88569292751e0d493b6acf2cea6b8efa827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.32.0/23
Signature Algorithm: sha256WithRSAEncryption
19:51:da:68:3c:2f:6c:d6:29:a1:6a:e8:5d:46:b5:c4:67:c6:
15:94:ff:95:e5:c4:24:ad:b1:a0:89:e1:e8:b0:ca:f0:5f:a4:
4f:51:cd:3b:8c:e4:eb:5a:43:3b:5c:e4:5e:1d:5a:60:a4:1d:
bb:41:bc:54:f0:ff:de:ef:9d:02:34:a4:d2:a5:8f:ed:6c:8f:
58:b9:a0:cc:a4:cf:4f:ac:ea:5a:d2:97:25:96:8d:d4:02:ef:
5f:87:55:22:f5:0b:05:82:f3:7e:c9:b3:1d:9b:fc:2b:56:f5:
ca:6d:9e:d1:ee:71:4b:5e:cf:54:f8:f4:0b:0e:55:f1:6d:20:
52:5f:7e:43:1b:f0:f3:c3:b3:89:0f:0e:02:9d:2c:61:20:b5:
70:94:62:02:12:98:a5:c8:38:b2:42:f6:d7:75:1b:ed:7c:8f:
7c:29:e6:d4:56:9e:e1:77:e5:5c:90:67:ad:7c:67:51:19:ec:
8c:17:ff:85:35:1b:1f:5d:cc:a3:2a:76:59:4c:27:d1:f4:8e:
2e:6f:7f:fd:ae:4c:f4:e4:92:11:40:79:a1:5c:1d:ec:ef:c1:
b7:cc:a9:fe:e8:e7:cd:aa:dc:6c:0b:74:7a:71:c7:93:8b:e4:
ba:c4:e2:39:29:9c:18:4a:ce:cc:5b:ec:d5:4c:8a:8b:c1:de:
26:f3:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:45:01 2023 by rpki-client on console-ams.rpki-client.org