Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/23c2cb32372821d3ce5f98d8a6eb81110c17c5a8.roa
File: 23c2cb32372821d3ce5f98d8a6eb81110c17c5a8.roa (raw, json)
Hash identifier: m0dWJwujDfdUWSZyGsCtzVnCYvp/SX6FjW7FBsCplS8=
Subject key identifier: 7B:0B:53:EF:1A:BC:7F:96:B8:8E:B3:A6:82:FA:C3:F1:9D:C0:DB:BE
Certificate issuer: /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial: 042E0C
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/23c2cb32372821d3ce5f98d8a6eb81110c17c5a8.roa
Signing time: Fri 20 Oct 2023 12:17:34 +0000
ROA not before: Fri 20 Oct 2023 12:17:34 +0000
ROA not after: Mon 20 Oct 2025 12:17:34 +0000
asID: 13424
IP address blocks: 200.91.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273932 (0x42e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
Validity
Not Before: Oct 20 12:17:34 2023 GMT
Not After : Oct 20 12:17:34 2025 GMT
Subject: CN=23c2cb32372821d3ce5f98d8a6eb81110c17c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:68:61:e5:c9:6a:f1:c2:c9:cd:73:13:f1:
50:2a:6e:49:b2:00:bd:38:5a:ed:8a:2b:4c:00:25:
8a:c9:fb:f3:2e:ad:4f:6f:68:63:a5:44:c6:8d:50:
a0:46:ce:ea:dd:bb:0f:21:c5:22:63:95:0a:85:b6:
1b:df:c5:0f:b0:bc:f1:58:f3:7c:2c:bf:6b:58:9b:
62:6a:61:a3:bc:64:34:9f:a1:59:f4:19:5f:08:a9:
f9:0e:a7:25:e7:41:4f:37:1c:6b:67:c3:eb:5e:6a:
af:43:ce:a2:18:6b:25:53:74:c4:36:7a:8a:67:cb:
23:9b:45:78:01:cd:9a:9f:76:26:de:ff:67:2a:42:
75:f4:14:f2:77:b4:4f:ca:ac:ad:eb:21:d6:04:97:
da:7c:5d:3e:0a:dd:75:0a:ed:70:ff:33:ba:a9:6d:
4f:0f:c3:4a:43:09:26:6b:a3:dd:14:fb:40:65:73:
4e:eb:73:17:ad:cd:70:d3:95:0c:3d:d9:3b:4f:98:
ec:0f:06:a0:40:97:ec:f4:02:0f:57:23:07:b0:d5:
30:33:47:53:71:d9:cb:91:81:4c:2c:29:23:0b:99:
a0:a1:36:0c:f7:57:3a:38:7a:ed:52:1f:c7:13:bc:
fe:14:60:da:e8:07:de:18:48:b3:a2:f6:c5:a7:ee:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0B:53:EF:1A:BC:7F:96:B8:8E:B3:A6:82:FA:C3:F1:9D:C0:DB:BE
X509v3 Authority Key Identifier:
keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/23c2cb32372821d3ce5f98d8a6eb81110c17c5a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.3.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6f:3b:d3:f0:3c:a0:f2:18:6a:1b:8d:25:be:74:6a:be:e1:
4e:81:5b:5b:13:be:bd:6a:f4:12:f4:7f:c3:48:cb:7b:6e:88:
e2:8a:77:c7:42:fd:d9:70:37:5e:73:95:d7:df:d8:c0:6e:83:
b9:d5:74:e4:bf:22:0d:57:8d:69:e5:48:ec:b0:76:24:cd:b8:
c9:fb:4a:59:d6:42:6a:05:ed:67:3b:7e:eb:c9:d3:c8:d0:c8:
50:7f:11:90:12:f9:cb:08:67:0e:9c:be:43:3b:5c:42:4f:6e:
66:43:6e:a2:bd:74:8a:24:dc:27:a6:c7:8f:a7:f0:63:85:24:
39:ce:9b:32:6a:e0:b9:1b:8d:77:87:49:e4:b1:c1:a3:95:d2:
21:90:e6:6d:e9:dd:4f:c0:c6:9c:1f:d0:5f:17:b7:68:19:c4:
24:a4:2c:0d:a1:7d:03:02:c7:b5:37:e9:4f:b5:46:01:99:21:
ac:03:14:f4:05:39:76:5c:4b:a9:b1:94:fc:e0:70:b5:f2:a1:
5e:82:d6:be:71:67:ae:7f:ae:96:8a:37:74:dd:d7:a9:6b:f6:
5d:c0:05:c4:00:92:2c:4f:d3:5f:c4:89:6d:da:d6:7b:bb:ff:
29:2c:de:5f:7e:a6:2e:33:2d:9d:ad:b3:31:bc:e1:4b:36:d9:
88:d8:ea:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org