Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d9f0037dd40d73f963ea6db60123e2acef73a498.roa
File: d9f0037dd40d73f963ea6db60123e2acef73a498.roa (raw, json)
Hash identifier: EjBwmYYvJY0k6C6brBhQR9XO21CBhnn/6FugodJZ8L8=
Subject key identifier: 22:EC:AE:2E:01:BA:70:0A:BC:3B:5E:0F:30:D3:28:62:4A:5D:15:DE
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 278611
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d9f0037dd40d73f963ea6db60123e2acef73a498.roa
Signing time: Tue 07 Nov 2023 16:00:51 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 264716
IP address blocks: 200.123.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2590225 (0x278611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=d9f0037dd40d73f963ea6db60123e2acef73a498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:a0:6f:e0:ec:50:de:6b:01:a4:c6:79:32:
70:d9:22:b3:2a:f9:45:de:be:4e:a2:f3:26:5c:ca:
af:b8:69:81:e1:72:d5:11:5e:b3:7c:b0:ce:7a:31:
59:30:6d:1b:f6:c0:ea:70:a8:20:13:67:9a:b2:aa:
b5:8f:e5:db:97:a4:41:c9:01:3b:bc:0e:bf:f7:12:
99:d9:63:5e:51:49:63:05:4b:87:34:48:60:26:ad:
6d:9a:48:31:1c:6c:39:ec:7d:f3:46:c9:ed:8e:f1:
c2:fb:a2:d4:bc:44:79:c4:73:3a:d6:f1:11:75:76:
1c:16:33:52:62:00:d4:a0:40:52:af:78:0b:9a:15:
a3:22:5b:8e:21:b8:81:15:87:a9:98:85:1e:d4:19:
e6:30:dc:69:dd:6b:ba:3a:a1:80:16:6b:ad:da:04:
1a:bc:b3:65:d2:df:e6:9b:06:6a:26:8d:e5:e8:46:
ce:ae:26:5d:b3:21:6f:f8:50:fb:7d:52:d5:a0:f1:
fc:37:36:79:67:cc:5a:77:c9:a1:e2:98:91:a0:c3:
68:32:79:34:b8:a5:d7:4a:04:ae:2b:e3:61:96:a9:
7e:7c:da:1b:74:e9:89:87:24:65:fd:d9:bf:e0:8d:
3e:0b:1d:e3:d0:69:02:02:18:ad:e5:2f:9a:30:65:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EC:AE:2E:01:BA:70:0A:BC:3B:5E:0F:30:D3:28:62:4A:5D:15:DE
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d9f0037dd40d73f963ea6db60123e2acef73a498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.62.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:95:b5:57:c1:97:ab:25:4c:cc:5a:cb:b7:3f:bf:e6:0e:a8:
8e:02:fd:2d:b6:1c:1b:b6:42:b9:83:9b:dc:a9:37:26:b6:6d:
02:08:90:c4:ae:53:f6:ef:e5:e3:fd:8e:2e:7e:34:86:d3:8c:
17:59:c6:f6:a4:31:e9:c2:a7:50:0d:61:db:92:58:cd:bb:31:
9b:de:28:d9:49:d1:22:46:20:65:15:3b:a0:69:2e:81:25:41:
44:8b:78:8b:0b:e6:0a:ea:38:fa:77:59:48:29:3f:8d:17:25:
3c:49:32:9d:3f:96:6b:ab:9c:df:05:76:04:ac:4c:6f:f9:3c:
f1:59:61:14:27:cd:04:3e:f8:b8:83:97:2f:29:cc:35:21:cf:
64:16:03:6e:98:a0:24:69:48:ee:4f:c9:74:bb:6f:61:c5:b8:
30:3a:f9:c7:74:6f:39:20:ec:dc:58:af:28:c1:39:9c:f6:ea:
2f:66:d6:64:4a:e7:e5:63:e8:d2:91:8a:bf:7b:c0:fd:47:7d:
b1:01:ba:68:7a:88:d4:1c:2a:30:11:bf:e7:bd:9c:7a:f1:fa:
d8:43:3c:55:5c:d4:3c:41:cf:a9:d4:fe:44:20:20:54:2d:7c:
c9:30:7a:6d:6c:e5:00:97:63:aa:49:cc:9d:5b:6f:23:ec:90:
7d:8a:34:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:28:33 2023 by rpki-client on console-fra.rpki-client.org