Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/910de9ac87ad767fa5bbbad14e469afc5b2be2ea.roa
File: 910de9ac87ad767fa5bbbad14e469afc5b2be2ea.roa (raw, json)
Hash identifier: mi0aFITr5PaGf79tPt23zGEtbHasPduER4fB2s1WKKU=
Subject key identifier: F8:7F:C5:EA:A6:9C:4A:DD:77:10:4F:C3:7F:3F:E8:C8:F6:3F:48:B1
Certificate issuer: /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial: 29DE37
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/910de9ac87ad767fa5bbbad14e469afc5b2be2ea.roa
Signing time: Tue 30 Jan 2024 15:00:53 +0000
ROA not before: Tue 30 Jan 2024 15:00:49 +0000
ROA not after: Tue 30 Jan 2029 15:00:49 +0000
asID: 272862
IP address blocks: 200.50.190.0/24 maxlen: 24
200.50.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743863 (0x29de37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Validity
Not Before: Jan 30 15:00:49 2024 GMT
Not After : Jan 30 15:00:49 2029 GMT
Subject: CN=910de9ac87ad767fa5bbbad14e469afc5b2be2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:09:d8:07:dc:c0:31:5b:65:e0:31:3f:0b:
2a:e8:53:1c:15:e8:84:8a:67:d1:6b:c6:e5:a9:90:
a4:35:0b:65:e3:22:3c:2c:14:b2:86:80:52:a9:25:
2a:9f:3f:a4:11:84:7b:64:ed:85:71:5b:a8:e0:08:
47:bb:5f:ce:f8:a0:28:eb:41:37:43:82:67:be:4e:
11:11:19:de:98:26:e8:5f:02:4f:2c:00:b4:1b:da:
84:81:c2:ae:6c:85:49:b4:64:75:4a:73:5a:84:76:
bd:c5:d4:c7:ee:b0:a0:e2:1e:a3:34:16:61:44:1f:
e8:a1:81:bc:1e:43:9a:b0:74:65:d5:c5:79:da:a0:
68:24:83:95:f8:ed:29:c7:79:74:a2:1e:ea:b8:85:
06:2c:56:3c:16:0a:68:a6:7c:c8:ff:4c:a7:ec:36:
f8:a6:bd:cd:9b:8a:ac:90:f6:34:7d:24:01:70:a1:
1c:a5:76:c4:e6:86:39:31:11:47:73:dc:3f:a6:2a:
7e:0e:da:d1:81:32:45:b6:db:b1:e0:44:6e:94:da:
24:a5:52:53:0d:f2:29:da:3a:84:94:9f:ce:0e:a2:
27:b1:e7:fb:0e:3d:e2:9e:9a:37:ad:b2:27:5d:66:
db:34:d8:86:04:f4:33:8a:55:f1:a3:98:7f:39:f4:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:C5:EA:A6:9C:4A:DD:77:10:4F:C3:7F:3F:E8:C8:F6:3F:48:B1
X509v3 Authority Key Identifier:
keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/910de9ac87ad767fa5bbbad14e469afc5b2be2ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.167.0/24
200.50.190.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e2:e6:d7:00:1a:ff:42:90:ef:bf:49:c1:51:45:18:36:4b:
2e:51:ed:8d:1b:ac:09:20:4a:6a:1a:f4:cd:bf:1e:12:60:18:
0b:70:21:09:95:db:7f:07:03:73:4a:bb:37:db:6e:c6:ed:7e:
36:50:78:72:8a:4e:b3:58:77:fb:74:cc:d9:b8:f7:78:27:dc:
81:a0:c8:0a:e8:f5:7f:0e:91:d9:13:87:86:04:8a:01:7c:b4:
16:38:1e:5b:1a:d4:89:f1:98:f7:0d:30:2a:e1:09:ad:c1:0c:
6a:54:5d:72:79:26:9a:40:9e:db:51:46:86:72:81:19:95:3f:
2f:30:bf:5d:93:de:96:05:67:7f:dd:f6:68:24:67:fc:e3:94:
75:9b:75:19:80:c4:14:ee:1e:9f:9d:82:bd:c0:aa:fc:6d:22:
86:64:84:7f:d8:c1:fd:93:0d:53:e1:e0:3f:84:33:a5:9b:2b:
e6:6d:f1:c1:61:8a:ba:6d:b6:41:b7:37:f8:84:b3:e8:cc:27:
59:a9:d6:e8:f3:62:96:ab:c8:7b:c6:f3:0f:e4:51:9e:13:61:
e2:11:53:de:d2:c5:f8:ef:b5:fd:b3:7f:91:bf:6e:56:2c:23:
b5:f1:ec:ef:15:68:c4:c0:7b:25:07:68:4c:c8:00:2f:51:b5:
55:ca:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 21:34:55 2024 by rpki-client on console-ams.rpki-client.org