Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/8304e771b6fd6e330943f88f14087fa9d501914d.roa
File: 8304e771b6fd6e330943f88f14087fa9d501914d.roa (raw, json)
Hash identifier: QIdgR3Ukw0msw3WBGffrCjJ5+Sx+eFMUa7Jv9wye+4c=
Subject key identifier: 1A:78:71:86:DA:9A:99:71:57:AF:CA:2E:ED:4E:0A:2E:E7:33:B5:7E
Certificate issuer: /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial: 20A0E2
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/8304e771b6fd6e330943f88f14087fa9d501914d.roa
Signing time: Mon 03 Jul 2023 13:26:13 +0000
ROA not before: Sun 02 Jul 2023 13:26:05 +0000
ROA not after: Mon 03 Jul 2028 13:26:05 +0000
asID: 26593
IP address blocks: 200.108.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138338 (0x20a0e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Validity
Not Before: Jul 2 13:26:05 2023 GMT
Not After : Jul 3 13:26:05 2028 GMT
Subject: CN=8304e771b6fd6e330943f88f14087fa9d501914d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:4f:fd:07:9e:90:9f:70:3c:7f:e6:05:04:
c9:d5:ac:b9:ed:62:bb:ee:25:cb:dd:fc:ad:4a:e9:
e5:20:b1:f0:bd:de:ed:00:3d:ef:e0:8d:70:a6:4b:
0e:d8:14:fd:e4:dd:02:71:a3:bd:fc:50:d9:d2:c7:
17:5a:48:c2:55:5d:a8:43:11:d3:5e:66:b3:3e:18:
76:96:d0:89:89:3f:b6:63:cf:e3:08:2d:e8:d9:4c:
fe:31:25:36:7f:80:ff:6b:06:a9:28:e0:d4:6f:50:
ff:dc:9b:d2:cf:8b:02:be:9f:eb:39:4e:03:81:58:
f2:ec:22:c5:00:2c:10:dd:41:67:9e:ff:05:e1:04:
b7:4e:3d:ce:a9:f9:a4:5e:14:3f:28:45:1a:ca:43:
81:5c:22:cb:85:e9:da:ee:26:92:dd:dc:ee:0e:3c:
84:9f:1d:26:3f:b6:8f:85:57:28:7c:21:6e:11:0f:
55:c2:21:8c:58:5f:58:6e:b2:43:97:bd:35:d5:78:
ba:b8:45:07:29:fe:9a:3d:23:ae:05:a8:d4:78:c8:
e9:0b:43:3b:7a:d9:28:3f:61:af:45:68:47:2a:50:
40:43:2e:80:01:ee:66:6d:39:c2:06:74:9f:88:13:
0b:81:db:46:04:56:4a:5b:4f:e6:b0:63:7d:0d:a9:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:78:71:86:DA:9A:99:71:57:AF:CA:2E:ED:4E:0A:2E:E7:33:B5:7E
X509v3 Authority Key Identifier:
keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/8304e771b6fd6e330943f88f14087fa9d501914d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:aa:5a:38:83:15:e7:82:59:38:4f:f0:81:b3:9c:db:5d:d9:
53:05:f1:cb:75:2e:7d:cf:0e:2d:bd:52:40:31:33:9d:42:e1:
8b:bd:4d:1c:ad:ec:4e:87:16:8c:11:21:bf:75:a8:bd:46:7a:
30:3c:89:f5:4a:d2:cb:1a:17:3f:ee:0c:4e:2c:05:8f:58:b7:
ba:73:86:04:bd:ac:67:af:de:43:ca:01:63:68:f3:29:ff:eb:
d9:d4:28:3a:66:4b:fe:75:af:78:bf:11:56:df:4a:63:73:5f:
40:2b:f6:ef:c3:8c:f8:e3:2b:57:e8:58:f1:33:29:f5:63:24:
88:c9:18:96:83:91:fb:a1:52:a7:c6:aa:c4:18:2e:4d:d0:b9:
9f:de:e8:b0:e6:92:7a:11:84:7a:4c:73:8c:63:54:5b:65:fa:
7b:a7:8e:8a:47:69:64:b1:f5:b8:f4:bf:09:88:90:cd:08:e7:
16:f1:03:ef:a7:73:6b:4e:74:0b:97:2f:32:78:a7:6a:e9:04:
d6:b5:88:db:80:6e:da:87:f8:70:b9:c4:77:46:a1:b4:c8:91:
ff:f3:73:64:2c:5c:d4:a2:16:a2:5b:f5:ef:2d:92:f6:1c:0e:
54:87:06:f1:ac:2a:a9:da:b0:b6:e6:7b:a3:66:02:f5:ac:80:
91:0e:9d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org