Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/c216b122cbf008a620039c9b3ccf28b351c3a291.roa
File: c216b122cbf008a620039c9b3ccf28b351c3a291.roa (raw, json)
Hash identifier: o4xJEhGeULX3JSR3kntRnPgsHihZiktjNy71jgj+I9M=
Subject key identifier: 59:28:DD:8E:AE:C3:91:06:BC:FF:F2:CD:9F:C2:BF:D8:14:2A:35:EA
Certificate issuer: /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial: 20A91E
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/c216b122cbf008a620039c9b3ccf28b351c3a291.roa
Signing time: Mon 03 Jul 2023 13:26:15 +0000
ROA not before: Sun 02 Jul 2023 13:26:05 +0000
ROA not after: Mon 03 Jul 2028 13:26:05 +0000
asID: 26593
IP address blocks: 200.108.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140446 (0x20a91e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Validity
Not Before: Jul 2 13:26:05 2023 GMT
Not After : Jul 3 13:26:05 2028 GMT
Subject: CN=c216b122cbf008a620039c9b3ccf28b351c3a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:b5:d2:18:44:8c:b2:29:e1:14:80:d4:fc:
13:22:1b:ce:cb:69:10:20:07:c4:65:15:ab:c9:fa:
1d:72:a0:17:16:b7:ba:a7:4c:49:2f:6c:c9:64:21:
62:18:f4:2e:ff:a2:d5:32:da:07:bf:84:e9:b1:c7:
fe:42:4b:5c:de:c9:a8:2f:3a:f1:74:37:21:ea:7f:
8c:19:4c:d4:e1:8b:7b:1f:af:a1:5e:0d:49:8e:0f:
45:86:05:9b:f5:53:56:f4:77:fe:de:1c:83:63:33:
a0:13:e9:53:29:92:e2:04:dc:d7:68:c9:11:d3:b6:
4d:fa:4c:b8:04:77:54:71:38:f3:c5:84:df:62:a5:
65:b9:f9:dc:4f:a1:ba:6e:f7:37:81:9a:a6:7b:eb:
af:29:92:ff:8f:51:9f:86:15:9c:4a:4b:23:2c:39:
35:08:00:b4:85:f1:27:c2:c1:ad:80:32:54:a3:a4:
0d:a7:02:80:02:8f:1c:23:54:8a:39:bd:bf:2c:3e:
dd:eb:e2:aa:4c:55:6f:ed:0b:2c:6d:0a:cd:27:f7:
06:4c:76:c6:7b:db:cc:86:15:e5:c8:3d:c5:c9:05:
b2:22:ec:89:90:15:38:3f:d7:cd:4b:ec:b2:b9:e9:
be:aa:8f:6c:b5:25:50:14:ac:17:52:24:d6:9f:de:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:28:DD:8E:AE:C3:91:06:BC:FF:F2:CD:9F:C2:BF:D8:14:2A:35:EA
X509v3 Authority Key Identifier:
keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/c216b122cbf008a620039c9b3ccf28b351c3a291.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.72.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8f:95:26:79:55:5a:88:da:1e:00:6e:57:fd:fd:7f:e7:9c:
63:da:1e:7a:93:dc:23:b1:c3:ad:d5:33:9c:31:8b:a2:b0:a8:
85:bc:d7:4e:53:92:af:cf:8d:64:4d:52:f7:8d:a3:e5:49:f4:
dd:06:01:f2:07:20:fb:d0:a5:0a:c1:53:fa:ef:af:c5:7b:21:
87:16:50:e6:f2:3c:cb:83:37:79:ff:e2:32:17:d3:c9:f9:78:
d9:2f:4e:e2:58:80:bd:2e:8f:ae:44:79:3f:dc:1c:b9:0c:fb:
56:da:ff:b6:b8:89:e9:8f:25:5a:69:7b:cb:6e:f8:be:2f:51:
e2:f9:90:8a:cb:6b:28:31:0f:60:3f:65:2b:aa:b1:0d:e1:8a:
88:4b:ae:ba:28:17:8a:cf:19:ce:45:ca:d1:50:9c:5d:5d:14:
21:23:8e:43:59:c5:b3:8b:bb:bd:0c:66:72:b6:b0:08:45:92:
22:28:a3:74:bd:bf:ec:ba:92:5a:0e:57:cc:67:02:d5:83:fe:
02:a9:f6:70:06:8a:f4:fe:07:8d:29:20:2f:bd:3d:0a:96:d9:
83:8d:ea:1b:84:5c:b7:fc:18:66:45:a8:3c:eb:0d:6d:a5:e9:
f1:06:e3:c2:cf:08:0f:53:d4:9b:5a:ab:51:4f:82:29:7f:5e:
0c:47:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org