Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e39352e3136302e302f32342d3234203d3e203238343033.roa
File: 3230302e39352e3136302e302f32342d3234203d3e203238343033.roa (raw, json)
Hash identifier: b6wdgadHsP0TDcRtaUjxJCiLIO2hRqPSu4b0X5qfUcU=
Subject key identifier: 3D:5B:04:D3:12:9B:FF:2C:CD:2B:C2:95:5C:6D:69:E0:95:A6:BD:FE
Certificate issuer: /CN=77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F
Certificate serial: 44F0AEDF6AC47BC48EE7BC025BF41BC12A9B16CF
Authority key identifier: 77:42:6E:74:EC:7A:FB:2A:E9:4A:D7:D0:6F:73:B2:C6:ED:6E:F5:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e39352e3136302e302f32342d3234203d3e203238343033.roa
Signing time: Wed 14 Aug 2024 16:05:00 +0000
ROA not before: Wed 14 Aug 2024 16:00:00 +0000
ROA not after: Wed 13 Aug 2025 16:05:00 +0000
asID: 28403
IP address blocks: 200.95.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f0:ae:df:6a:c4:7b:c4:8e:e7:bc:02:5b:f4:1b:c1:2a:9b:16:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F
Validity
Not Before: Aug 14 16:00:00 2024 GMT
Not After : Aug 13 16:05:00 2025 GMT
Subject: CN=3D5B04D3129BFF2CCD2BC2955C6D69E095A6BDFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:15:7b:7f:3a:88:ba:4c:65:db:0c:d1:e3:
60:de:6d:30:a1:4b:4e:78:19:0b:fe:8c:65:34:a0:
82:fc:ee:84:c8:13:d7:da:9c:02:02:34:1d:1e:90:
6d:64:a4:a0:b0:9d:1f:7d:8c:0f:fd:89:63:74:ac:
1a:06:18:a1:a3:3e:81:c8:65:10:28:59:ba:53:e5:
b8:06:8f:5f:fa:13:26:8f:4c:96:a9:9f:99:0d:c3:
ad:be:eb:ff:52:a0:f3:10:b2:6b:7e:1c:79:38:e6:
27:a1:d5:84:89:2d:24:d3:90:c0:a7:ad:63:06:b0:
e1:4e:89:e4:94:90:9f:63:c8:b1:89:a0:e7:23:48:
41:53:f0:c1:08:98:00:06:bd:89:c9:bf:ad:7a:29:
bb:34:d1:e1:b1:08:1a:f0:fd:f2:19:4f:9a:1e:ff:
9b:e2:18:d2:a8:06:71:3d:70:57:d8:cd:8e:07:a4:
79:02:2f:9f:18:c1:4d:87:7b:ea:3b:29:c6:b0:98:
ed:32:7c:8a:e1:fe:09:d9:b9:41:52:f6:ad:e5:4f:
d0:1f:02:08:fd:f8:e9:bb:80:2e:ba:8a:9d:8c:5d:
41:72:10:a4:81:36:1a:f6:1a:43:f8:63:79:b1:a0:
08:03:83:d0:31:c6:67:29:13:13:99:62:ac:6d:9f:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5B:04:D3:12:9B:FF:2C:CD:2B:C2:95:5C:6D:69:E0:95:A6:BD:FE
X509v3 Authority Key Identifier:
keyid:77:42:6E:74:EC:7A:FB:2A:E9:4A:D7:D0:6F:73:B2:C6:ED:6E:F5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77426E74EC7AFB2AE94AD7D06F73B2C6ED6EF50F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e39352e3136302e302f32342d3234203d3e203238343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.95.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:39:2d:24:35:07:0d:15:ae:72:e5:54:7d:9a:a6:75:58:89:
e6:17:87:b9:27:d3:ee:ee:5a:8b:1f:0f:c8:a4:6b:1c:00:14:
27:95:be:eb:bc:7a:98:40:b0:fc:f3:03:b5:d6:65:da:4b:aa:
e2:ca:bb:0d:cd:3f:8a:36:6a:d5:76:a9:1e:8e:ad:08:f6:75:
81:05:af:20:25:31:1b:23:20:40:a8:fb:e8:67:4e:5a:00:0d:
d3:c8:24:3a:fe:12:e5:f6:22:10:51:72:7f:f7:5b:ec:1f:9b:
4b:9f:ba:e4:4a:1f:ae:52:cc:af:d4:20:f9:02:82:1e:df:b0:
92:32:eb:e5:e4:88:82:98:ef:5b:d8:79:21:03:02:b8:81:0d:
94:1a:6c:5f:77:20:a3:e2:d5:89:82:bf:5a:ec:bf:f9:2e:ef:
f3:1a:dd:b2:ba:5a:c1:b6:74:ea:08:bf:8a:42:5e:57:8c:3a:
83:08:6c:5e:25:1b:2d:43:37:5c:1d:6e:d8:f2:37:ec:a2:92:
ea:9b:0f:2c:72:ee:2f:5b:34:38:5d:ce:a9:09:c4:5e:b4:ed:
ff:c2:80:fc:50:17:1a:4b:53:9f:04:93:20:32:18:91:0c:3d:
94:3a:21:7a:c3:be:85:ad:70:b2:08:75:fa:ff:fe:aa:a2:a0:
f1:9e:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 19:59:46 2024 by rpki-client on console-fra.rpki-client.org