Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/5d92ac1a4986ca7fdb76c1bda173d69d8065e255.roa
File: 5d92ac1a4986ca7fdb76c1bda173d69d8065e255.roa (raw, json)
Hash identifier: SAErZKpv1HJFa6mzgxpe0/BZje0c7IRFe6svKy7C5uk=
Subject key identifier: BF:1B:4D:FE:E0:73:01:43:5C:16:3B:87:0B:3B:2F:64:6F:1F:3F:CB
Certificate issuer: /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial: 20958D
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/5d92ac1a4986ca7fdb76c1bda173d69d8065e255.roa
Signing time: Mon 03 Jul 2023 13:26:08 +0000
ROA not before: Sun 02 Jul 2023 13:26:05 +0000
ROA not after: Mon 03 Jul 2028 13:26:05 +0000
asID: 262182
IP address blocks: 200.108.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135437 (0x20958d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Validity
Not Before: Jul 2 13:26:05 2023 GMT
Not After : Jul 3 13:26:05 2028 GMT
Subject: CN=5d92ac1a4986ca7fdb76c1bda173d69d8065e255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:f7:08:8a:63:1c:2f:eb:47:8a:3a:d4:df:
32:3f:2c:ae:54:0e:92:e4:c1:48:ff:fb:40:d0:92:
d4:d1:c7:f9:a1:aa:12:df:a2:7b:39:d4:b4:05:0a:
d8:c9:54:f1:5d:0e:c7:ea:b7:0f:3e:3d:14:9d:92:
e9:9d:bf:80:7e:bd:91:7b:7c:71:79:d3:94:37:67:
99:7a:ba:a3:a1:f0:dc:e4:54:a9:7e:2b:10:d5:0c:
dc:0c:90:1f:c3:10:a0:78:34:8b:02:88:37:68:d0:
e3:8c:ea:0c:0a:dd:7b:18:8b:68:61:4c:70:b5:35:
65:5a:2e:60:c3:ea:dc:df:c8:33:c5:2d:a5:09:4e:
08:f0:5c:f6:b8:34:6c:96:9e:76:dc:b9:4d:75:76:
d5:3c:93:f9:cc:2c:38:a2:c0:71:7e:59:80:2b:a6:
d6:77:32:24:05:c6:a4:dd:bd:f5:7e:38:d8:04:0a:
c7:b6:53:06:e9:06:d9:ea:b4:74:21:1a:30:7e:8c:
3a:55:cf:5a:86:9f:db:4f:4d:04:19:a8:7e:34:ad:
5a:83:7e:33:05:d8:a5:cb:63:0b:7b:e5:2b:04:26:
de:35:dc:4e:ce:c7:eb:52:d3:12:24:dc:3b:06:ab:
bc:bd:5d:be:a3:03:6e:7d:28:51:33:c9:92:cc:26:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1B:4D:FE:E0:73:01:43:5C:16:3B:87:0B:3B:2F:64:6F:1F:3F:CB
X509v3 Authority Key Identifier:
keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/5d92ac1a4986ca7fdb76c1bda173d69d8065e255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.70.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6d:a4:61:63:ec:39:9a:dd:ff:0b:15:ed:4e:25:fd:da:4d:
f0:95:5b:b4:7e:ba:46:c0:65:c5:5f:c3:e8:b7:16:a0:b6:23:
d3:33:81:0b:10:26:1a:09:4b:fb:f2:80:3a:ac:58:d1:ce:43:
c3:e7:47:7f:c4:50:c1:1c:44:61:d1:95:aa:ed:3d:d7:6b:49:
c0:63:2d:d7:47:98:e4:54:8f:36:e2:b4:73:01:bc:bd:9f:72:
c3:77:b1:b1:93:17:ad:12:a4:52:92:2f:4f:4c:d7:de:64:b9:
dc:cf:ec:f5:53:ce:d2:5a:56:71:aa:aa:ad:4c:83:96:a2:8c:
62:51:84:6c:45:1d:85:de:0f:44:89:24:20:20:ca:87:74:e5:
31:bb:37:04:d0:7c:7e:be:28:50:fe:d1:07:47:23:88:6d:59:
cb:ae:50:64:0f:e1:9b:c1:06:d5:48:c0:b0:4c:9f:56:e9:bb:
96:da:9f:4c:d3:92:59:5b:03:71:b4:16:5b:7c:e9:c6:61:ab:
bc:e7:78:5e:1b:8f:73:5b:b9:56:d8:c4:fa:e5:1c:cd:27:2e:
0f:f7:29:89:30:39:48:1b:cb:86:71:e4:07:ef:47:9e:a6:83:
42:2c:9c:6f:7d:32:2a:b1:e8:3a:5c:3c:8f:8b:db:ed:1f:b5:
77:be:60:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org