Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8eceb9a3a51969df7fa7359b43afd5d138ae335c.roa
File: 8eceb9a3a51969df7fa7359b43afd5d138ae335c.roa (raw, json)
Hash identifier: 4qReNWy3S6BeqLrex6OXA3NaxkQJTOEIDAnAOGTcTik=
Subject key identifier: DE:B3:74:49:CB:F9:E4:38:C3:78:CA:B8:03:87:00:0E:E8:37:35:28
Certificate issuer: /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial: 2A0F15
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8eceb9a3a51969df7fa7359b43afd5d138ae335c.roa
Signing time: Tue 30 Jan 2024 15:01:11 +0000
ROA not before: Tue 30 Jan 2024 15:00:49 +0000
ROA not after: Tue 30 Jan 2029 15:00:49 +0000
asID: 272114
IP address blocks: 200.123.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2756373 (0x2a0f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Validity
Not Before: Jan 30 15:00:49 2024 GMT
Not After : Jan 30 15:00:49 2029 GMT
Subject: CN=8eceb9a3a51969df7fa7359b43afd5d138ae335c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:dd:1d:d7:5d:e3:82:e7:fe:30:5a:b9:5d:
8d:1a:47:29:8d:cd:f8:be:b0:be:42:19:27:9d:47:
e4:b8:ab:41:d0:c1:f5:ee:95:18:e5:d7:98:11:5b:
ef:17:d3:43:58:24:66:b9:80:b1:53:5a:67:c6:29:
4d:62:0f:66:7b:c2:36:e4:66:e4:b0:3f:c9:5a:44:
ce:49:f1:ce:27:4a:2b:93:a0:31:12:8c:ae:9e:64:
83:4c:95:47:bf:dc:37:c0:db:26:02:eb:8c:2c:38:
49:1c:4a:f6:a8:61:03:93:39:7d:a9:0b:ee:78:2e:
1a:b2:3a:35:cf:ec:03:71:cf:26:1f:ab:7a:6b:c0:
42:5f:6f:3c:2d:a6:d9:8d:24:be:af:5f:ea:02:2b:
52:9e:a5:39:66:2e:c8:a0:2c:c2:3c:90:cf:ff:24:
cf:35:86:55:72:29:c5:2e:5e:dc:2d:8e:42:82:6b:
c1:7d:f9:c9:77:a4:23:24:9b:aa:21:3b:b0:21:3e:
f4:6b:72:e1:06:4d:47:ae:51:ef:67:42:98:a2:dd:
fa:ad:9a:51:78:eb:87:f2:45:81:3b:be:68:e0:bf:
4d:c1:da:02:61:fe:8a:91:d1:65:72:38:62:94:6f:
18:36:fb:cd:8a:91:84:c6:36:1f:d8:b4:5f:d4:9a:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B3:74:49:CB:F9:E4:38:C3:78:CA:B8:03:87:00:0E:E8:37:35:28
X509v3 Authority Key Identifier:
keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8eceb9a3a51969df7fa7359b43afd5d138ae335c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.32.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:a8:fc:18:eb:b9:a3:82:6f:c3:15:43:0f:11:b0:67:88:cb:
3d:10:cb:55:ce:64:55:37:b2:c2:96:d8:38:53:75:9f:38:2a:
ca:b9:fe:12:27:5a:e8:f7:2f:3c:d8:29:87:c3:b5:4e:c4:ee:
d6:c0:ad:76:5e:0c:8b:61:af:b5:df:31:12:c9:1b:5e:4a:b5:
32:95:4d:b2:52:f4:aa:57:7b:2d:58:1f:fb:bf:3d:84:8c:29:
b4:87:64:ad:ca:83:db:e8:f3:87:7b:42:29:5e:38:6c:9f:15:
e3:2a:4f:9e:09:48:cd:46:cd:9d:d7:dd:c5:09:f3:b8:2a:d6:
d6:7d:d6:08:cd:c9:97:7c:fd:2c:1b:7f:a2:d7:85:30:39:ec:
54:99:7d:8d:0d:d9:ba:30:7b:95:54:db:6c:00:29:bb:32:d1:
cc:8a:95:ec:3f:c9:41:91:53:31:00:7c:8d:33:c8:bf:bf:4c:
90:81:84:4f:2d:2e:6d:ec:13:22:a8:b5:87:53:b6:99:76:bd:
5a:0c:5f:e5:75:27:3c:1e:f2:33:c1:37:c5:89:5c:2b:af:2c:
20:bd:aa:96:b4:a9:41:57:23:08:39:ea:5e:0c:65:50:e7:c3:
32:4b:4b:9b:d5:75:5c:21:d3:1a:9c:c6:2a:e4:5a:79:ab:72:
27:2d:e9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 23:53:32 2024 by rpki-client on console-fra.rpki-client.org