Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/86f849aa70111525c9cf362d29a3066fb7249f61.roa
File: 86f849aa70111525c9cf362d29a3066fb7249f61.roa (raw, json)
Hash identifier: WKAQeZkdeyVF2NjkA9QspzKVzj+66wPlki4cgwQlC/4=
Subject key identifier: 81:28:E6:A6:B8:FC:EA:4A:5F:0E:8D:D0:82:D4:72:AC:FF:72:5B:19
Certificate issuer: /CN=0c9d15f0b793ce01d9a5e1070b5047a9e1264605
Certificate serial: 093EE8
Authority key identifier: 0A:D2:99:50:58:AC:0F:87:83:2C:1C:9E:40:2B:35:E8:38:B8:BB:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/86f849aa70111525c9cf362d29a3066fb7249f61.roa
Signing time: Wed 24 Mar 2021 14:35:01 +0000
ROA not before: Wed 24 Mar 2021 14:35:01 +0000
ROA not after: Tue 24 Mar 2026 14:35:01 +0000
asID: 61463
IP address blocks: 200.34.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605928 (0x93ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9d15f0b793ce01d9a5e1070b5047a9e1264605
Validity
Not Before: Mar 24 14:35:01 2021 GMT
Not After : Mar 24 14:35:01 2026 GMT
Subject: CN=86f849aa70111525c9cf362d29a3066fb7249f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:d0:89:85:03:be:65:e5:46:0a:38:6c:e6:
ab:73:6b:71:78:7b:96:3d:c6:3c:ac:7f:7c:81:73:
3a:ee:27:1a:96:16:98:dc:c1:b8:e8:b2:46:c6:e5:
27:65:61:13:80:40:5a:b4:d4:ad:3f:32:e1:58:4b:
4a:8a:96:01:6a:a9:85:50:6b:57:d3:e6:61:72:28:
0a:96:b8:06:1e:61:44:94:2c:a1:83:6a:58:8c:52:
74:43:65:3b:d0:4a:10:af:53:f5:cf:ec:84:30:63:
78:5d:f1:c2:d6:c6:e9:61:ff:b4:bc:43:85:9d:3a:
e3:79:c8:99:7a:1c:2d:08:3e:88:ab:1c:80:f2:4d:
bd:2b:f5:7e:f1:61:54:a5:d7:40:6e:9f:c7:6c:7d:
be:8f:1e:aa:72:96:52:6a:73:1c:4f:17:9a:c3:4d:
b9:02:7a:dd:23:b8:e8:6c:bb:89:a3:e2:08:88:ce:
25:d2:0b:21:1e:ea:d4:8e:3c:bf:69:05:40:68:e9:
1d:ed:93:f7:bd:d6:fa:1c:6e:1f:1d:fe:de:f2:2f:
6a:a1:aa:29:26:26:4d:82:37:db:f9:a3:f8:44:b2:
36:a2:26:4f:ed:b3:41:41:2b:91:5b:2e:6f:2c:d8:
94:25:43:1a:13:de:d7:b7:9c:b8:53:53:5a:26:53:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:28:E6:A6:B8:FC:EA:4A:5F:0E:8D:D0:82:D4:72:AC:FF:72:5B:19
X509v3 Authority Key Identifier:
keyid:0A:D2:99:50:58:AC:0F:87:83:2C:1C:9E:40:2B:35:E8:38:B8:BB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/86f849aa70111525c9cf362d29a3066fb7249f61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.34.171.0/24
Signature Algorithm: sha256WithRSAEncryption
16:60:97:b8:54:af:cd:0a:ac:b7:00:00:3f:a5:85:9e:0a:d1:
4c:9e:cb:2d:6e:d4:3f:7b:77:c1:44:48:2f:4f:eb:b6:8e:b0:
ed:70:a9:09:ad:1c:bc:6e:9b:38:73:4d:7d:ea:df:83:a7:85:
1d:d4:fb:08:95:0c:09:8f:df:f2:78:a0:de:2d:d4:88:ca:c2:
27:70:cf:ce:1b:0b:a5:84:c5:0f:71:4e:ec:1c:1d:87:af:7e:
33:90:1d:96:b6:74:0a:bb:89:dc:c9:2b:6c:7a:18:0c:d4:e3:
9e:db:67:89:46:74:44:e5:32:8d:8a:fc:d2:b8:43:b6:e5:4c:
1d:db:c5:9b:f1:c6:96:d3:11:19:09:a4:75:2a:44:e5:23:a4:
78:dd:d8:74:e4:aa:48:db:f1:23:42:b1:e7:c0:0f:4b:63:76:
c5:b6:1f:b0:26:e0:65:0e:ea:fc:f8:07:9a:de:df:68:ba:bd:
89:e3:fc:00:73:f7:6f:60:8c:e9:49:67:65:34:d2:05:af:99:
8f:9d:e2:21:26:ce:77:68:a9:f2:a9:5f:e8:cc:d7:60:60:5c:
1a:49:8c:8d:ff:b9:3b:de:e2:1f:bf:c6:bb:a0:2a:56:78:f8:
b1:b5:10:75:cd:d3:a0:4c:df:83:83:ac:94:ad:13:b7:44:0f:
e7:72:e0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org