Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a1ec0f0-2ab8-494b-83b0-019de932459e/b7f52fb02e6702e78ade7c917c7dbf65a27247f7.roa
File: b7f52fb02e6702e78ade7c917c7dbf65a27247f7.roa (raw, json)
Hash identifier: JFbEKMlOGN+Wwjl9wVKgVYmS6UwdTqks27fCp+73nTA=
Subject key identifier: 9E:EC:23:4A:FF:69:BD:B3:54:EB:50:57:40:DA:D0:60:CD:3D:B8:1B
Certificate issuer: /CN=c499c65a6bb0e3e5c51ce4321e740548932317f6
Certificate serial: 290264
Authority key identifier: EB:F1:03:E1:B4:54:6E:10:85:D6:58:EF:54:CB:5B:7B:34:71:0C:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c499c65a6bb0e3e5c51ce4321e740548932317f6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4a1ec0f0-2ab8-494b-83b0-019de932459e/b7f52fb02e6702e78ade7c917c7dbf65a27247f7.roa
Signing time: Fri 05 Apr 2024 19:49:20 +0000
ROA not before: Fri 05 Apr 2024 19:49:20 +0000
ROA not after: Sun 05 Apr 2026 19:49:20 +0000
asID: 28065
IP address blocks: 200.114.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2687588 (0x290264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c499c65a6bb0e3e5c51ce4321e740548932317f6
Validity
Not Before: Apr 5 19:49:20 2024 GMT
Not After : Apr 5 19:49:20 2026 GMT
Subject: CN=b7f52fb02e6702e78ade7c917c7dbf65a27247f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:ef:ce:57:2d:fc:33:29:05:88:8a:d9:b0:
62:e8:04:12:b4:42:35:8e:65:b0:38:25:2b:ab:8d:
7d:ff:dc:91:0e:86:15:3f:d2:8b:1d:0b:01:26:be:
70:d4:e7:d6:47:11:44:64:18:96:50:9e:97:c7:da:
da:9b:7d:b6:2d:55:d3:3d:67:7d:6f:bb:06:fa:da:
a2:ff:87:7c:07:e3:d4:a2:8d:33:1e:a6:17:22:c0:
a8:27:6f:0f:17:d1:2a:be:c4:4a:8b:17:9b:bc:2d:
2d:5b:4e:90:10:57:fb:ca:13:ac:c4:65:f6:da:16:
71:5e:1c:ad:d0:8d:05:02:98:45:da:bb:79:d9:d0:
c5:1a:08:18:2c:1e:85:ea:61:35:a9:92:97:44:af:
56:78:2b:ec:ca:6c:1a:9e:a0:9b:27:ba:60:de:17:
8b:6d:2e:05:0a:02:aa:32:f9:f4:ce:3d:1d:90:34:
25:3e:00:73:65:99:c8:57:b8:c5:a6:a3:85:6b:85:
66:ac:1e:2a:f8:53:62:39:56:99:33:45:aa:3c:03:
c8:f1:93:8d:9b:09:57:53:e1:14:17:c3:ce:4b:49:
8a:ab:39:d5:c6:99:e9:d7:8c:46:a4:8f:8d:1c:55:
36:be:9d:35:db:4d:4f:27:4d:b0:fe:12:6b:e9:03:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EC:23:4A:FF:69:BD:B3:54:EB:50:57:40:DA:D0:60:CD:3D:B8:1B
X509v3 Authority Key Identifier:
keyid:EB:F1:03:E1:B4:54:6E:10:85:D6:58:EF:54:CB:5B:7B:34:71:0C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c499c65a6bb0e3e5c51ce4321e740548932317f6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1ec0f0-2ab8-494b-83b0-019de932459e/b7f52fb02e6702e78ade7c917c7dbf65a27247f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4a1ec0f0-2ab8-494b-83b0-019de932459e/c499c65a6bb0e3e5c51ce4321e740548932317f6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.114.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:3f:e4:d4:2b:93:13:90:fc:49:b4:47:c9:25:bb:f7:87:24:
55:4b:e9:25:8c:c0:69:cc:df:01:88:8a:bb:f7:8b:f4:22:39:
d0:33:ce:ce:76:50:16:78:26:e4:99:66:c7:50:9a:a5:ec:b4:
98:d2:34:d4:72:22:c6:ae:66:2e:47:c2:1b:24:01:75:c5:40:
44:74:93:b5:f6:63:39:da:9c:1c:d2:48:85:e4:4b:8f:2a:11:
df:5b:67:67:2b:05:c1:b8:3c:27:9a:2b:4c:b7:c8:eb:a0:e7:
17:ea:e9:84:c9:27:3b:2c:c1:64:1c:1b:25:9c:cf:86:04:27:
a7:e8:18:03:c0:66:1c:c3:95:ff:63:ab:3c:88:8b:7c:ff:df:
fe:f2:18:70:47:61:cf:f2:95:3a:67:b5:b2:f2:eb:f9:2e:56:
93:3e:16:df:de:fd:79:34:d0:8b:85:55:34:43:3d:e6:ae:a8:
10:2a:74:bf:c5:8d:e8:8c:db:25:28:dc:87:48:1e:a1:70:69:
d7:c8:87:99:80:8a:2b:ba:46:26:72:88:04:88:1c:c9:af:d8:
b5:24:47:27:d2:76:65:93:bd:5e:65:cd:eb:80:58:90:bc:68:
8e:06:b2:4c:bd:09:30:7a:dd:cd:60:3f:a5:de:f5:37:6a:92:
41:8a:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:16 2024 by rpki-client on console-fra.rpki-client.org