Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b5bb7bf-1fa2-4966-9ec7-c6de645e1020/efa9ff5b759dda846f3e0e79a32daca638f8e2f7.roa
File: efa9ff5b759dda846f3e0e79a32daca638f8e2f7.roa (raw, json)
Hash identifier: wZb7RoP02t4CUQNANBm8fqLCCJotPxwaTGkwG/BM1jI=
Subject key identifier: C8:EA:54:EB:01:48:CD:05:74:A3:0C:9C:99:14:5F:62:86:EE:67:95
Certificate issuer: /CN=abd2921dc0451a5cf31ec24fa6addc81bd86fef3
Certificate serial: 38CE
Authority key identifier: CC:80:81:70:12:8A:5B:C7:B0:E1:8D:9E:C6:AA:46:45:11:2F:F0:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abd2921dc0451a5cf31ec24fa6addc81bd86fef3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3b5bb7bf-1fa2-4966-9ec7-c6de645e1020/efa9ff5b759dda846f3e0e79a32daca638f8e2f7.roa
Signing time: Fri 07 Oct 2022 18:26:23 +0000
ROA not before: Fri 07 Oct 2022 18:26:08 +0000
ROA not after: Mon 07 Oct 2024 18:26:08 +0000
asID: 23201
IP address blocks: 200.9.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14542 (0x38ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd2921dc0451a5cf31ec24fa6addc81bd86fef3
Validity
Not Before: Oct 7 18:26:08 2022 GMT
Not After : Oct 7 18:26:08 2024 GMT
Subject: CN=efa9ff5b759dda846f3e0e79a32daca638f8e2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:99:58:59:e8:db:98:47:30:22:ba:b9:1f:07:
4a:83:8f:1c:84:af:50:3e:94:a7:f4:48:0e:e2:0e:
cd:4a:58:94:fb:c9:2f:1d:5d:6d:b3:ab:d0:16:ec:
94:7c:ce:bd:bd:af:3d:91:2c:13:2e:6b:8b:c1:63:
da:d4:9a:0b:8b:6a:56:e9:08:d6:03:95:22:76:ea:
db:38:d8:d0:14:92:33:6c:0d:b2:5e:83:b1:d8:2b:
71:8b:06:eb:40:75:1d:ee:05:1c:96:d5:f9:86:63:
13:85:10:93:a5:74:ca:14:fa:90:ff:0c:b0:33:98:
2d:b4:61:68:6a:3a:c3:19:d1:04:dd:9e:14:c4:7f:
0f:21:d8:54:75:f5:79:12:a7:43:4a:ae:e1:65:cc:
1a:23:69:22:56:5c:b5:73:af:03:ce:c8:a8:10:38:
db:03:09:36:1f:f2:e7:a4:7b:75:58:b4:95:79:d6:
15:fe:46:84:e1:cb:75:66:4c:13:43:a4:ae:f1:06:
d9:7b:8d:5c:c3:68:95:d3:f2:d8:5b:66:9e:13:c9:
36:05:31:a7:01:d6:4e:9e:b3:37:1a:b2:97:a2:18:
2a:83:96:d7:e3:de:4e:71:03:b4:af:40:a4:a2:b0:
95:38:96:a4:33:a0:bc:e3:68:63:f1:35:57:09:f9:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EA:54:EB:01:48:CD:05:74:A3:0C:9C:99:14:5F:62:86:EE:67:95
X509v3 Authority Key Identifier:
keyid:CC:80:81:70:12:8A:5B:C7:B0:E1:8D:9E:C6:AA:46:45:11:2F:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abd2921dc0451a5cf31ec24fa6addc81bd86fef3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b5bb7bf-1fa2-4966-9ec7-c6de645e1020/efa9ff5b759dda846f3e0e79a32daca638f8e2f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3b5bb7bf-1fa2-4966-9ec7-c6de645e1020/abd2921dc0451a5cf31ec24fa6addc81bd86fef3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.4.0/22
Signature Algorithm: sha256WithRSAEncryption
72:20:75:9f:79:62:a3:f0:12:ed:1d:15:11:00:ed:5b:7d:5e:
41:77:ff:33:c6:d0:11:c5:52:96:0c:51:8f:b0:23:9b:60:d9:
59:20:71:bf:1c:cf:27:9f:ea:60:6b:01:ec:2d:6a:ac:c3:3c:
c6:cc:ae:c4:90:2f:d4:a3:5f:e9:ac:6f:c7:45:5e:02:56:14:
2c:b9:d7:2d:e5:2b:93:17:5d:cf:92:a7:90:e1:af:de:f8:00:
db:b3:17:2d:90:d2:9d:d1:78:46:31:3b:b4:89:9d:79:59:c9:
47:4e:ac:88:63:85:86:7a:a4:27:77:61:98:e8:f6:98:eb:c5:
ff:d0:43:68:9b:91:cc:44:24:94:a2:f0:d7:1a:83:07:59:43:
a2:65:ff:7e:62:72:b3:67:f9:d0:56:5b:17:15:b6:69:bf:51:
5f:a2:38:d8:38:2f:0b:1a:4f:18:38:cc:a3:64:f7:26:8a:c3:
92:00:cd:bd:05:cb:e7:8a:6e:e4:44:f2:19:7b:ea:5d:fa:62:
23:f0:aa:2a:e8:86:e8:72:7c:4b:00:50:eb:0e:0a:ea:c5:83:
b3:f1:05:c6:4e:68:1c:6b:8a:c0:b3:4a:8d:b4:53:33:af:bb:
c9:06:8a:fe:e1:cd:bb:53:0e:bf:78:09:0b:0b:d9:93:5a:07:
24:11:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org