Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/717c88ef61aed3253e1ab297b99a0106104df9af.roa
File: 717c88ef61aed3253e1ab297b99a0106104df9af.roa (raw, json)
Hash identifier: Kxn1Ec1RWO+WMJ9tTvlpZLGl3MxsVXuHOpzp/4KrkLQ=
Subject key identifier: FF:24:F6:3A:5B:39:7A:09:6A:0E:CE:F0:62:59:C0:20:68:C3:F5:04
Certificate issuer: /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial: 27D89B
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/717c88ef61aed3253e1ab297b99a0106104df9af.roa
Signing time: Wed 08 Nov 2023 15:00:50 +0000
ROA not before: Wed 08 Nov 2023 15:00:37 +0000
ROA not after: Wed 08 Nov 2028 15:00:37 +0000
asID: 264716
IP address blocks: 200.123.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2611355 (0x27d89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Validity
Not Before: Nov 8 15:00:37 2023 GMT
Not After : Nov 8 15:00:37 2028 GMT
Subject: CN=717c88ef61aed3253e1ab297b99a0106104df9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:35:aa:ae:65:0b:01:09:74:ed:bf:08:70:
85:49:a5:36:92:78:1d:3f:d3:96:4c:cb:cd:b5:81:
15:94:5c:fc:1e:4f:02:b9:c1:21:de:fc:44:2d:e6:
2b:ca:ef:c4:74:f8:2a:c2:ac:29:a1:41:1e:86:b6:
c1:bd:39:19:4b:fc:82:78:82:27:d9:3e:a6:7d:f8:
59:c9:11:c7:47:1e:47:cf:53:59:91:4b:69:ed:d6:
6c:af:f5:fb:b8:29:a9:11:90:2e:13:11:2a:ef:b5:
d6:ff:f3:66:54:28:15:c8:ff:ed:0a:91:d8:dc:82:
aa:35:a5:60:e6:7b:e9:f3:a5:af:96:8a:e2:73:05:
62:fc:f2:8f:e9:fd:2c:66:86:ad:d3:71:82:03:ba:
45:ec:c9:bb:58:b5:a8:ee:a3:75:5d:16:9f:da:36:
da:d0:d7:a8:5d:ee:11:73:f2:a0:ee:b5:45:b8:12:
0f:eb:48:67:8b:c7:63:d5:15:bd:de:50:56:38:a6:
19:bf:62:1b:36:d3:b1:b5:1f:3b:85:00:d4:8b:7e:
48:f6:83:41:64:c3:26:4d:23:58:ca:4d:b7:29:ef:
ff:a9:da:be:7f:35:50:4a:03:f4:67:5e:a9:f1:4b:
a7:2e:d7:1a:0a:03:d2:1f:28:1e:1b:6d:00:6a:eb:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:24:F6:3A:5B:39:7A:09:6A:0E:CE:F0:62:59:C0:20:68:C3:F5:04
X509v3 Authority Key Identifier:
keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/717c88ef61aed3253e1ab297b99a0106104df9af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.62.0/23
Signature Algorithm: sha256WithRSAEncryption
26:d8:71:89:8f:30:e5:be:2e:af:0d:2c:4a:1f:54:75:ca:77:
e3:e0:eb:86:51:d6:73:de:7c:dd:e6:4a:9a:62:bf:2d:2d:d9:
2d:56:34:06:2e:88:61:db:0b:53:22:a2:57:40:6c:e2:c3:9a:
8a:73:43:28:06:bd:49:45:1d:98:ed:1b:78:d2:e2:0f:d9:af:
0c:2f:78:5f:51:89:90:99:60:df:b3:fb:c5:79:e9:93:12:cf:
b1:d4:d5:d5:a3:0e:a0:52:aa:ea:62:35:fd:12:c5:2d:22:95:
55:09:13:c1:e7:2b:d6:93:c7:a2:9a:ba:05:35:ff:44:c7:e9:
03:a2:6f:6d:43:13:97:98:38:4b:26:94:ba:43:21:72:ab:bc:
68:ea:03:34:8b:16:02:38:68:79:0c:a6:ad:e5:92:af:7b:10:
53:a8:d6:ca:48:0f:0b:fe:f6:76:c1:45:b2:65:1c:ea:27:23:
e8:98:92:9e:a2:70:f9:51:68:ef:77:c7:9c:7c:42:c8:9f:7c:
23:b9:8d:bb:23:f8:00:9c:92:a7:38:bf:c1:fc:4f:bd:e3:bf:
9a:94:04:65:58:98:ac:06:1e:46:f1:ef:a6:47:09:3d:ad:47:
6c:10:6b:9f:88:e6:5e:76:64:fd:63:84:47:da:ac:1f:23:df:
58:0a:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org