Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/91fd7dc309891403d41e2cba0595870cbd8dc30d.roa
File: 91fd7dc309891403d41e2cba0595870cbd8dc30d.roa (raw, json)
Hash identifier: 6YqtuH0ORCPTwQjNiOqByzBW1x7HkGWDZ5lYe4nJ5iY=
Subject key identifier: 37:87:2C:D8:A8:32:39:8A:94:4D:BE:8D:35:3D:A0:E7:9F:DA:99:7E
Certificate issuer: /CN=70f50d1045a246b518ba0542b6fec0e6cf9a097f
Certificate serial: 0492
Authority key identifier: 27:2B:FE:99:EA:C6:B9:DE:9C:71:5D:35:A3:CA:F2:63:99:DE:D7:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70f50d1045a246b518ba0542b6fec0e6cf9a097f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/91fd7dc309891403d41e2cba0595870cbd8dc30d.roa
Signing time: Mon 18 Mar 2024 12:06:58 +0000
ROA not before: Mon 18 Mar 2024 12:06:58 +0000
ROA not after: Wed 18 Mar 2026 12:06:58 +0000
asID: 16921
IP address blocks: 200.194.184.0/22 maxlen: 24
2806:41a::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1170 (0x492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f50d1045a246b518ba0542b6fec0e6cf9a097f
Validity
Not Before: Mar 18 12:06:58 2024 GMT
Not After : Mar 18 12:06:58 2026 GMT
Subject: CN=91fd7dc309891403d41e2cba0595870cbd8dc30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:1c:72:4a:e7:23:4e:25:87:71:51:0a:7a:
09:86:03:8b:e6:18:a4:62:31:92:92:96:10:75:66:
17:94:1a:52:d7:83:ed:9e:8f:5a:92:ac:33:0a:28:
cc:d7:27:d3:88:45:ec:50:df:7d:72:c1:cc:59:ac:
47:77:01:75:65:cf:76:39:08:97:02:51:0b:18:62:
86:54:6b:75:75:d0:ce:36:f4:10:25:b6:e0:31:72:
b6:12:58:22:4f:fe:16:7c:04:bf:56:19:e5:06:ad:
9e:2f:47:73:0e:03:b7:af:c4:09:c5:6b:5c:db:c8:
46:2a:06:f8:f5:ff:13:a1:b5:31:b2:4b:6d:85:66:
4f:75:9e:12:0e:3b:0b:74:48:61:22:7d:28:bb:a9:
47:5a:25:a0:2d:b7:9d:9b:d5:bc:0f:7e:ce:dd:5c:
dc:98:cb:fd:c8:4b:3f:9a:13:72:c7:d3:27:55:aa:
00:40:d4:58:04:06:bb:fc:a6:c1:5d:8d:5b:b1:7a:
dd:e9:82:1d:5a:fa:33:ab:72:14:aa:7f:bb:11:88:
0f:28:fc:f0:68:08:6c:95:0b:b1:21:df:af:1c:dd:
ff:18:ed:63:4b:eb:41:ee:49:a3:0b:f0:28:eb:78:
f2:49:f7:4d:c9:fd:3c:2b:e0:3e:0b:e2:5f:99:4c:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:2C:D8:A8:32:39:8A:94:4D:BE:8D:35:3D:A0:E7:9F:DA:99:7E
X509v3 Authority Key Identifier:
keyid:27:2B:FE:99:EA:C6:B9:DE:9C:71:5D:35:A3:CA:F2:63:99:DE:D7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70f50d1045a246b518ba0542b6fec0e6cf9a097f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/91fd7dc309891403d41e2cba0595870cbd8dc30d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3ed0804f-a4bc-4242-b44d-24ce06ce381d/70f50d1045a246b518ba0542b6fec0e6cf9a097f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.194.184.0/22
IPv6:
2806:41a::/32
Signature Algorithm: sha256WithRSAEncryption
ad:43:83:4f:d9:e9:2a:34:ca:be:2e:87:d7:ad:8c:6a:be:bb:
e9:13:6d:91:3a:30:a6:f2:82:ac:c4:02:b5:43:80:d7:7d:f3:
1b:f0:98:a8:76:ca:b5:d8:c8:52:9b:1c:57:2f:8c:a2:c2:e0:
95:ca:4f:9e:b5:ff:79:f7:b1:cd:85:58:89:1b:1d:74:52:1b:
f7:6e:1d:1f:0d:4c:59:af:57:30:e3:4f:23:d7:f9:b9:2c:5e:
dc:1d:f1:3a:79:f8:46:6f:b3:2c:56:31:f2:18:bc:50:4c:d6:
0e:55:56:77:47:69:4a:b9:f8:13:96:e3:42:fd:fb:a7:91:75:
f7:29:76:0f:fa:ca:51:02:ba:9e:44:8f:8c:8e:ef:a5:3f:48:
9e:6c:fd:9a:aa:5d:88:ce:69:3a:ce:9f:b6:56:51:2f:e5:ce:
fb:f9:31:a2:e3:86:6f:34:da:2f:ad:78:9f:81:b4:ef:5c:6e:
b6:42:94:6a:b7:80:94:60:57:22:28:22:69:51:d6:5b:48:2c:
e6:85:25:d0:8c:7a:21:a1:c2:89:bd:ab:9a:e5:ce:ca:8b:4e:
74:bd:b6:a7:7b:20:47:12:22:0e:9d:23:c7:e2:56:e5:f7:84:
37:82:8b:5e:1c:8e:35:4c:a6:1d:3d:2c:33:fd:09:50:3c:4b:
c9:05:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org