Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/738ed4fdc69c979877fd1b6c0446035879b123be.roa
File: 738ed4fdc69c979877fd1b6c0446035879b123be.roa (raw, json)
Hash identifier: QsCzSCTloE7tbK6vrimvgEA1vi1oMX7EpJllUgEtvHs=
Subject key identifier: 58:39:92:4B:2B:D5:C2:84:FF:B2:A6:04:C2:5E:D7:98:FF:8A:58:DA
Certificate issuer: /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial: 2091B0
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/738ed4fdc69c979877fd1b6c0446035879b123be.roa
Signing time: Mon 03 Jul 2023 13:26:08 +0000
ROA not before: Sun 02 Jul 2023 13:26:05 +0000
ROA not after: Mon 03 Jul 2028 13:26:05 +0000
asID: 7303
IP address blocks: 200.108.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2134448 (0x2091b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Validity
Not Before: Jul 2 13:26:05 2023 GMT
Not After : Jul 3 13:26:05 2028 GMT
Subject: CN=738ed4fdc69c979877fd1b6c0446035879b123be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:7d:02:7b:02:f0:5e:ec:8d:f5:19:0a:68:
20:8d:0d:9a:b5:41:2f:1a:2e:77:22:1b:d3:f6:79:
bd:4e:58:ae:f7:10:61:06:d8:7f:50:c9:a2:94:77:
a6:ac:46:ee:b0:a6:ba:d7:8a:c8:0b:0a:b2:63:32:
eb:0e:17:76:b6:0c:ba:bc:08:b1:13:e3:6b:f5:8c:
70:bb:e4:79:69:06:69:9e:e2:0a:1d:ee:6f:c9:7b:
71:82:89:8c:3c:c4:2e:14:06:eb:ad:c1:cb:21:61:
1a:f5:ae:00:7f:44:e5:43:82:96:3d:9a:0e:19:a8:
87:18:12:16:a5:46:4d:d6:06:0a:4e:e1:cf:1b:b7:
66:da:59:73:5f:c3:f3:30:9d:72:8f:c1:69:87:d4:
93:ab:2d:94:74:43:c8:19:41:c3:3e:4f:1c:72:8b:
b2:80:de:36:4e:f2:80:b5:aa:b4:86:f0:a8:28:57:
fd:b7:46:dc:7e:84:5c:ab:b9:bc:c1:fd:7d:da:e6:
d3:32:a4:56:79:52:ff:25:29:ed:d3:a6:13:1d:a5:
82:e1:0d:dd:06:0e:4d:4b:99:38:6c:07:41:2f:e6:
12:c7:dc:87:b8:ad:cb:b0:66:8f:fa:f7:66:ff:34:
3c:9a:6d:4b:2f:cc:7f:e4:7d:b1:6b:64:1d:fd:2c:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:92:4B:2B:D5:C2:84:FF:B2:A6:04:C2:5E:D7:98:FF:8A:58:DA
X509v3 Authority Key Identifier:
keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/738ed4fdc69c979877fd1b6c0446035879b123be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:83:71:98:72:27:62:c7:e4:de:27:df:4a:9a:df:f3:00:59:
c9:74:4d:30:dc:73:e7:f5:7d:54:5d:bd:64:18:a8:06:0f:e3:
93:7f:a2:51:1b:f1:dc:54:93:25:73:33:6d:47:e5:ab:dd:72:
57:59:c4:de:1d:bd:d8:ee:a0:f7:0a:49:7e:5a:12:36:c9:36:
03:6e:40:b0:35:95:fb:48:26:e0:ab:88:d1:e3:2a:20:23:15:
c2:37:a8:b6:93:c0:08:92:ad:e7:fa:70:46:fe:83:db:a5:8b:
cb:61:6e:40:71:1b:7b:1e:62:c7:3c:e4:92:65:88:5f:dc:67:
a6:0e:09:e0:87:ee:55:fe:51:c3:09:09:32:81:9d:f0:83:82:
67:2b:96:c3:63:36:84:9e:ff:22:bd:77:cc:16:19:9f:58:76:
a7:64:68:25:66:59:05:7e:3a:ef:d8:f9:85:be:51:46:b3:22:
4b:41:89:8a:37:04:17:9b:4d:61:3b:cf:77:04:1b:9b:4d:2b:
40:d0:ba:77:b8:e5:f3:fe:70:2b:c0:2c:e9:f2:62:c2:22:75:
c1:c6:e2:26:b3:bb:e6:87:24:14:e8:02:59:13:b8:27:22:45:
63:f1:d3:5c:87:94:95:9d:f8:bd:ed:54:93:2b:a5:67:35:ed:
50:b2:56:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:56:47 2025 by rpki-client