Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/9fd1a3f9779845d685fd74358ab866e45c845ef4.roa
File: 9fd1a3f9779845d685fd74358ab866e45c845ef4.roa (raw, json)
Hash identifier: v4S5/cyk24IB01ThK6YSMtlKYwWqEHxONlD01KmjDNU=
Subject key identifier: AA:FB:DB:44:D3:3F:D5:5C:56:17:5F:27:77:59:56:A1:B0:F4:99:61
Certificate issuer: /CN=0c9d15f0b793ce01d9a5e1070b5047a9e1264605
Certificate serial: 20EFEE
Authority key identifier: 0A:D2:99:50:58:AC:0F:87:83:2C:1C:9E:40:2B:35:E8:38:B8:BB:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/9fd1a3f9779845d685fd74358ab866e45c845ef4.roa
Signing time: Wed 01 Nov 2023 12:32:56 +0000
ROA not before: Wed 01 Nov 2023 12:32:56 +0000
ROA not after: Sat 01 Nov 2025 12:32:56 +0000
asID: 61463
IP address blocks: 200.34.171.0/24 maxlen: 24
2801:0:3c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158574 (0x20efee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9d15f0b793ce01d9a5e1070b5047a9e1264605
Validity
Not Before: Nov 1 12:32:56 2023 GMT
Not After : Nov 1 12:32:56 2025 GMT
Subject: CN=9fd1a3f9779845d685fd74358ab866e45c845ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:d3:fe:f2:10:fa:24:97:50:05:5d:2e:d9:
ab:ad:f3:ba:cc:0b:80:70:dd:56:cd:82:d0:7e:f8:
b6:a4:b4:e7:11:47:f8:2d:7c:9f:e9:79:14:a3:3c:
43:6b:51:7d:d8:a7:3b:ca:1c:bc:42:2e:04:f7:be:
74:91:80:21:cd:b6:ff:ae:3a:0b:7b:f5:a9:b8:f1:
73:f3:be:d2:c4:85:26:36:c4:41:3f:33:0c:f8:b5:
f7:98:9c:b2:6e:1a:4e:23:ee:31:18:2e:02:fb:e1:
67:7e:8b:a5:ad:51:ba:c9:19:8d:37:18:ea:aa:34:
53:87:89:e6:82:a2:2f:2b:39:0d:08:c5:d5:d1:e6:
4c:c2:80:14:df:60:a6:7f:c0:97:cb:40:fe:47:d3:
ff:d9:02:7d:a6:f5:c7:70:67:13:41:2d:5f:42:ac:
74:06:03:80:d4:4b:c9:a3:98:04:61:f8:e5:9e:77:
72:20:e9:68:39:c0:cf:b2:af:42:7c:3e:7f:2e:03:
70:50:6d:e2:e0:df:24:c4:18:da:50:17:39:34:66:
45:ab:5c:15:12:e8:72:39:c9:95:b6:89:8c:dc:63:
a2:8c:78:7f:2c:c2:60:28:56:c0:c0:97:09:3e:23:
e0:1d:fe:e5:f6:76:01:a7:8c:b1:32:4c:5a:51:80:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FB:DB:44:D3:3F:D5:5C:56:17:5F:27:77:59:56:A1:B0:F4:99:61
X509v3 Authority Key Identifier:
keyid:0A:D2:99:50:58:AC:0F:87:83:2C:1C:9E:40:2B:35:E8:38:B8:BB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/9fd1a3f9779845d685fd74358ab866e45c845ef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.34.171.0/24
IPv6:
2801:0:3c0::/48
Signature Algorithm: sha256WithRSAEncryption
53:93:1b:f2:cd:99:ec:e1:d0:62:30:bc:d6:19:f7:8e:35:af:
fa:c1:c8:4e:50:5a:97:be:48:0b:fb:ae:db:d9:72:66:cf:f9:
1b:6b:36:67:3c:e9:62:45:94:66:c4:ce:ea:5d:ce:93:09:92:
55:25:7a:6d:75:e8:ed:15:27:30:e2:35:7d:f8:5a:37:d1:bd:
52:d1:7a:09:11:14:24:4e:78:f7:23:9f:18:f7:ba:3a:1b:ce:
cc:54:9e:ae:7d:1a:2d:32:95:91:fa:f4:1e:3f:9c:ab:06:a8:
2a:fa:6c:f1:2c:17:9d:15:01:fa:9b:41:67:ab:1c:69:d6:9c:
df:9c:60:25:31:d8:9c:fc:fc:7c:27:83:5f:dc:0d:78:97:13:
dc:c2:fc:85:06:39:3e:8c:0f:ab:21:a0:e8:1e:43:2d:de:74:
36:db:38:47:ca:a2:8f:7f:45:a3:1a:ed:71:ec:8e:7c:b6:93:
3f:23:3a:15:a1:a7:ae:87:bb:f2:bb:7e:51:a2:43:83:a3:a6:
0a:cb:95:92:0d:72:4c:5c:a3:0c:d9:7e:ef:3b:87:f7:c2:7b:
19:67:cf:c0:60:30:dc:7e:cd:e1:2d:68:9c:18:a4:fd:59:d1:
f5:59:a6:30:72:66:90:8f:7e:01:b8:f3:6d:87:03:04:b6:77:
92:27:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org