Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f172f7c206250ef251f24d0844f8941a6c2028e7.roa
File: f172f7c206250ef251f24d0844f8941a6c2028e7.roa (raw, json)
Hash identifier: 6vuRDifpMWOLS9v3FXXyOyb6gNh/NyZCRYZ2S/goV90=
Subject key identifier: 04:8F:B1:2B:1C:C7:5E:B0:40:E8:98:C7:16:EC:B0:B0:06:1B:99:4D
Certificate issuer: /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial: 29F88D
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f172f7c206250ef251f24d0844f8941a6c2028e7.roa
Signing time: Tue 30 Jan 2024 15:01:01 +0000
ROA not before: Tue 30 Jan 2024 15:00:49 +0000
ROA not after: Tue 30 Jan 2029 15:00:49 +0000
asID: 52328
IP address blocks: 200.123.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2750605 (0x29f88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Validity
Not Before: Jan 30 15:00:49 2024 GMT
Not After : Jan 30 15:00:49 2029 GMT
Subject: CN=f172f7c206250ef251f24d0844f8941a6c2028e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:79:61:f3:76:ee:10:b8:4e:99:07:79:82:
49:9c:fa:b1:1f:01:dd:84:b6:83:83:70:35:1d:f3:
5e:d9:38:7c:36:66:54:ba:e1:33:75:03:2b:9b:ea:
48:58:bd:44:51:b0:b6:7a:77:f9:66:02:02:c1:63:
66:42:7e:ed:20:3c:8d:db:4d:08:e5:df:70:7b:b4:
68:00:00:7f:17:bc:8a:d6:23:9d:02:51:40:5f:73:
55:4e:83:be:59:cc:43:7b:97:03:eb:79:ac:f7:32:
b0:d7:52:a9:a2:e1:2a:dc:9f:37:47:00:36:a3:67:
78:f6:bf:5a:50:3c:d4:e2:c2:38:15:ad:54:bb:fd:
9b:e6:00:ea:b5:5b:b5:d5:c7:e2:46:fb:ce:00:fa:
53:fa:d4:81:e5:01:76:ea:18:01:4f:58:7b:be:86:
68:2c:e6:2f:ed:a7:90:3d:85:70:af:6b:ec:0a:2b:
a2:9e:a2:93:62:33:72:75:7a:19:c2:1b:0b:9e:c3:
cf:c5:28:84:67:4d:fd:b7:60:ad:1a:31:3e:17:87:
b1:ac:24:f9:99:09:62:33:2e:af:05:6a:ee:e2:44:
24:11:2f:61:ea:64:92:51:3a:8a:9b:c2:08:bd:b3:
ab:57:80:90:84:fd:5f:67:6d:79:75:ff:ca:ff:41:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:B1:2B:1C:C7:5E:B0:40:E8:98:C7:16:EC:B0:B0:06:1B:99:4D
X509v3 Authority Key Identifier:
keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f172f7c206250ef251f24d0844f8941a6c2028e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.52.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:c4:b0:54:4b:9f:5a:37:b5:af:8e:53:90:23:85:e5:9b:54:
15:7f:bd:83:46:e5:08:7a:58:13:8d:76:51:4f:29:c0:5b:0e:
c0:d2:58:e6:40:c5:79:f0:bc:6d:01:a7:d0:15:67:b0:42:ca:
ff:10:86:a2:00:f3:eb:a7:ca:cb:77:0a:5f:b4:0c:9e:7b:e7:
44:a6:c1:b6:e7:b2:c8:7b:b0:96:22:5a:70:6a:58:35:4a:f8:
0f:ea:5b:f0:84:01:32:9a:47:9a:96:f8:9f:15:29:d1:85:f4:
06:5b:7b:e1:e1:57:7d:4e:60:31:8e:92:1b:cc:39:24:a1:8a:
7f:fe:18:db:ce:78:41:f7:3b:81:bc:e0:49:5a:b7:3d:d3:f8:
ef:0f:6d:b6:21:00:7d:8e:33:6d:79:51:a3:a2:a7:8d:91:21:
bd:24:19:1b:a8:aa:11:c6:75:11:e4:f1:ed:7a:7b:b9:29:e8:
1b:b2:8c:e6:7f:3b:0b:43:e3:f0:2d:42:67:97:6d:fd:5b:2e:
69:6c:7a:de:ef:aa:45:d1:b7:cb:48:47:bd:98:6c:98:3d:a7:
5e:bf:47:66:9f:c1:6b:73:26:8b:91:33:07:3c:df:f2:e9:b7:
bd:05:2e:0c:cb:02:c2:c9:26:7f:86:d6:47:b1:a4:52:3f:99:
6f:0f:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 21:34:55 2024 by rpki-client on console-ams.rpki-client.org