Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ac35a23a8b24da8e0af02b7cf321f76e07f8abba.roa
File: ac35a23a8b24da8e0af02b7cf321f76e07f8abba.roa (raw, json)
Hash identifier: 27bEknQhsqr1RYq3Kuxmkk1G4T+9b4Y6zlkcn7JVl/c=
Subject key identifier: C0:C4:36:6E:38:B9:A6:69:09:67:12:4C:C5:BB:F3:1F:9E:F8:F4:E8
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 279314
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ac35a23a8b24da8e0af02b7cf321f76e07f8abba.roa
Signing time: Tue 07 Nov 2023 16:00:57 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 10697
IP address blocks: 200.123.48.0/24 maxlen: 24
200.50.160.0/23 maxlen: 24
200.50.164.0/24 maxlen: 24
200.50.168.0/24 maxlen: 24
200.50.173.0/24 maxlen: 24
2800:820::/32 maxlen: 48
2800:820:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593556 (0x279314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=ac35a23a8b24da8e0af02b7cf321f76e07f8abba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:01:11:5c:93:b2:39:17:50:b5:3f:d9:b5:c2:
7e:ae:a5:4d:05:54:35:1f:23:ba:c5:a8:dd:c4:c9:
c4:7d:22:73:b5:5e:f5:5f:66:c1:7c:65:cb:b5:38:
78:0f:24:15:6f:2c:1c:19:e9:b3:b8:e6:f2:0a:b9:
7c:26:58:e9:bc:57:4e:bb:c0:3f:4b:dd:0d:3e:c1:
7a:9d:8b:91:e3:32:a3:30:c9:5d:28:7a:1d:2a:ef:
ff:0c:9e:ba:43:d8:5f:30:25:c8:a8:00:3f:3c:b0:
69:14:0d:94:b2:8b:ae:d0:43:44:26:a7:8b:cc:9b:
5d:1c:93:9d:0c:58:20:8a:29:fa:5e:4e:2e:a5:fe:
ce:f7:b0:ec:c6:ae:2a:18:8f:17:a6:94:28:6d:de:
37:0d:13:e2:bc:60:db:b6:ea:d5:45:54:9c:16:30:
ce:22:ab:c9:e5:6a:9c:f2:c5:00:8b:f7:aa:7b:5d:
08:25:49:cb:a4:1f:ca:d1:e7:17:15:d8:9e:36:c5:
2f:ef:37:37:8a:7a:ee:2a:21:d5:15:84:6a:d0:ae:
04:06:11:a6:77:0e:2c:e9:23:f6:49:f7:e4:a6:13:
02:94:a6:39:9d:0e:10:71:ba:1b:f1:eb:2f:3f:1d:
0e:48:fe:f0:4d:17:8d:1b:dd:ea:65:a9:f0:f0:4e:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C4:36:6E:38:B9:A6:69:09:67:12:4C:C5:BB:F3:1F:9E:F8:F4:E8
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/ac35a23a8b24da8e0af02b7cf321f76e07f8abba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.160.0/23
200.50.164.0/24
200.50.168.0/24
200.50.173.0/24
200.123.48.0/24
IPv6:
2800:820::/32
Signature Algorithm: sha256WithRSAEncryption
2c:de:36:33:fd:c6:65:42:17:eb:f8:8b:8b:d7:6d:ee:4a:78:
a6:b5:79:3f:04:1b:85:bc:c1:f3:67:76:bb:1f:c8:09:0d:ad:
1d:61:ad:71:33:3c:2f:8e:74:a9:27:5e:58:2c:a0:49:42:f0:
c4:00:19:5f:aa:3b:2d:83:98:b6:21:9a:bf:47:e8:b1:1b:36:
81:04:cf:17:0f:7d:26:24:15:a9:b5:b7:2d:f6:f5:3e:1d:38:
f0:97:9f:cf:16:da:07:66:cd:83:fe:98:52:47:9c:0c:47:8d:
d0:75:bb:7c:07:5d:b8:87:c5:bf:2f:a4:5b:ee:33:f5:9b:82:
4c:75:f0:46:11:72:17:3d:57:8d:0e:3d:14:6e:73:91:c5:4f:
b0:13:6a:ca:2e:18:7f:aa:bb:a3:04:e3:95:4d:cd:83:50:bb:
77:50:39:c8:68:d7:f4:de:ee:ff:a1:7d:f8:bd:f7:e7:8e:98:
82:ff:18:d1:5e:e9:85:23:f9:6a:b4:5f:ff:93:fc:8d:61:a2:
cd:e1:f5:b3:38:18:6b:d8:9e:8d:e9:63:aa:73:1d:2e:b5:e7:
4f:d6:d3:9e:fb:42:a5:15:e8:50:11:8c:55:67:00:47:58:66:
c1:99:19:d4:f9:7f:a1:df:51:35:16:18:ae:05:97:18:bf:98:
df:3d:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:33 2023 by rpki-client on console-fra.rpki-client.org