Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/baf1aee1bfc1e3b0461a3966b4a7b41955d74164.roa
File: baf1aee1bfc1e3b0461a3966b4a7b41955d74164.roa (raw, json)
Hash identifier: fqUwGuHewS3vtXnIp0OtpoYY/Xv34fqF8StpmbRGa7E=
Subject key identifier: B8:68:C3:DF:88:1A:83:25:64:7F:84:06:93:CA:8D:1F:E4:47:1C:B7
Certificate issuer: /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial: 24E8F9
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/baf1aee1bfc1e3b0461a3966b4a7b41955d74164.roa
Signing time: Thu 10 Aug 2023 18:00:41 +0000
ROA not before: Wed 09 Aug 2023 18:00:35 +0000
ROA not after: Thu 10 Aug 2028 18:00:35 +0000
asID: 52444
IP address blocks: 200.123.56.0/23 maxlen: 24
200.123.56.0/23 maxlen: 24
200.123.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2418937 (0x24e8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
Validity
Not Before: Aug 9 18:00:35 2023 GMT
Not After : Aug 10 18:00:35 2028 GMT
Subject: CN=baf1aee1bfc1e3b0461a3966b4a7b41955d74164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:aa:51:8b:37:1f:79:c7:72:ea:66:9b:8f:
03:6b:0f:7e:39:17:d8:b0:fb:1c:8c:ae:1e:13:6f:
52:2b:b7:6c:46:58:ce:da:ba:31:cd:eb:92:a2:20:
ec:41:ed:49:52:0c:e1:66:e2:24:80:6b:04:08:e4:
a5:9c:4a:95:29:7d:9e:4b:46:37:cd:bd:20:81:a5:
5f:d8:2c:6d:b2:f8:6b:b9:f8:46:5b:ed:aa:a5:8a:
e0:b1:c8:14:1a:8a:e8:b6:93:b2:c4:af:a5:b9:8e:
d4:4a:a6:e4:97:41:0c:d9:e9:71:53:b5:f5:e5:a1:
38:92:12:99:2c:74:55:cf:a9:f2:0c:5e:cb:ff:01:
2e:ca:04:c2:24:37:7b:47:3e:55:51:18:10:19:8e:
80:32:93:58:63:b0:ce:6b:6e:db:e2:2d:bd:ac:d5:
45:28:3c:cd:ea:f6:30:cf:53:07:62:b0:27:50:1f:
fd:ba:6b:ec:71:c5:69:5e:e9:9f:92:e0:0d:71:1d:
f3:b2:a7:28:16:17:a0:fb:a8:49:62:54:92:97:21:
0d:34:90:73:07:c5:18:03:07:e3:6c:93:02:8c:dc:
8f:1e:e0:c9:d6:41:a3:cb:f9:3d:d7:49:d2:bb:c9:
fb:fa:b5:41:52:24:ec:89:e7:41:de:6f:2a:e9:ea:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:68:C3:DF:88:1A:83:25:64:7F:84:06:93:CA:8D:1F:E4:47:1C:B7
X509v3 Authority Key Identifier:
keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/baf1aee1bfc1e3b0461a3966b4a7b41955d74164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.56.0-200.123.58.255
Signature Algorithm: sha256WithRSAEncryption
06:2d:7e:7d:e3:08:f5:e7:09:0b:fa:4b:63:d9:1e:cb:b1:71:
14:c0:70:a6:c2:0f:69:05:31:0d:92:e0:a3:53:2a:2b:d5:1d:
d1:57:4e:87:f5:5b:2b:56:6b:55:7b:23:7c:1f:f2:5a:58:55:
b6:a6:74:37:69:f9:25:35:22:d9:07:a9:ac:f9:b3:08:2a:4e:
32:de:d6:a0:9b:c3:a5:10:90:06:fb:02:5f:ea:e8:e9:46:c7:
9d:2e:61:cf:07:3d:f3:c2:38:49:60:5b:30:62:cb:38:38:21:
e6:21:58:e9:85:f6:3f:a6:13:c9:75:c4:17:0b:20:69:7d:8a:
a3:97:df:82:b0:a0:88:5d:90:52:83:4a:a9:05:ba:01:c0:2b:
00:71:ec:b3:2b:6f:98:8d:96:d4:e0:ac:d0:67:ab:38:64:32:
00:9c:f7:3f:d1:d7:bd:2f:15:1f:22:f5:25:4d:a2:91:8e:97:
e5:55:60:80:19:e5:a4:42:fe:cd:23:b3:80:49:3e:77:3d:74:
90:58:59:fe:56:07:16:69:05:46:03:a3:f7:b2:97:6d:0b:7f:
9d:82:94:2b:98:fe:2c:5a:66:95:34:af:91:7e:62:ef:7a:7c:
8f:8a:e1:b4:e9:60:aa:26:77:0e:35:7e:1d:8c:af:89:90:ff:
5a:c7:d0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 16:57:29 2023 by rpki-client on console-ams.rpki-client.org