Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ad0df1d97d7c0732cfd4fb60845309a938e1de0f.roa
File: ad0df1d97d7c0732cfd4fb60845309a938e1de0f.roa (raw, json)
Hash identifier: tfxnk2CasL+Yq6gJXuSjBc9ctpMk8tjlNUWa/slbkQ8=
Subject key identifier: 4D:F4:97:D2:85:F3:00:8A:8F:98:74:D1:71:B7:6E:42:84:88:DE:A3
Certificate issuer: /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial: 025D0F
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ad0df1d97d7c0732cfd4fb60845309a938e1de0f.roa
Signing time: Mon 07 Aug 2023 16:09:32 +0000
ROA not before: Sun 06 Aug 2023 16:09:32 +0000
ROA not after: Thu 07 Aug 2025 16:09:32 +0000
asID: 7004
IP address blocks: 200.91.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154895 (0x25d0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
Validity
Not Before: Aug 6 16:09:32 2023 GMT
Not After : Aug 7 16:09:32 2025 GMT
Subject: CN=ad0df1d97d7c0732cfd4fb60845309a938e1de0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:13:48:81:10:76:55:a3:9e:aa:8f:64:1c:
24:7e:57:c5:e4:72:e8:77:e5:40:5e:0f:4e:99:4c:
6d:b8:31:8c:e1:a6:b0:51:5a:6f:2f:51:ee:05:28:
46:7c:24:fb:c2:55:a1:31:a5:04:55:2c:6f:e0:1b:
f8:05:be:99:1b:61:da:7b:7d:ee:cf:b7:16:65:0e:
92:64:c3:75:fb:8f:ec:c9:7e:9f:05:7b:c4:e1:4e:
e6:b9:50:a9:5d:37:6b:df:85:0f:39:cc:75:05:b2:
a3:85:0c:14:cd:87:25:e8:7f:b9:bb:5f:0a:ad:c6:
09:2e:93:96:d5:14:f2:d7:0e:29:8c:2b:f0:95:41:
75:d0:fb:d3:55:2c:7c:2a:28:5c:6d:d0:29:00:f6:
ea:1e:f1:81:91:78:3f:5d:7c:df:cc:9f:27:ce:84:
94:9c:5c:a1:c3:23:a3:cd:24:97:50:52:de:35:0e:
0c:58:67:33:d2:00:01:98:32:50:7d:ee:37:e2:23:
86:d9:1f:2a:0f:e2:fd:bc:f9:07:73:93:cd:e6:a5:
9c:ad:27:33:23:08:2e:9f:9d:6c:d5:56:bd:0c:71:
92:81:3b:ed:3b:35:22:e4:fc:56:44:00:9f:04:55:
cc:d7:35:f5:ea:7e:49:a0:d1:73:16:f0:15:0c:0f:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F4:97:D2:85:F3:00:8A:8F:98:74:D1:71:B7:6E:42:84:88:DE:A3
X509v3 Authority Key Identifier:
keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ad0df1d97d7c0732cfd4fb60845309a938e1de0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.16.0/21
Signature Algorithm: sha256WithRSAEncryption
48:02:38:c3:13:ab:2f:9a:41:20:29:29:57:60:bc:c5:4c:f8:
92:8e:61:52:f5:52:eb:29:35:f8:31:6c:ec:99:80:7a:85:5b:
f9:1d:1c:ef:3d:5d:d2:b5:71:a4:fa:41:57:94:c5:b8:c5:90:
bb:a4:c3:54:1d:44:51:17:d0:e7:76:f8:24:0a:0f:c3:92:74:
2b:f9:c7:72:6e:ff:8d:2f:37:12:31:d3:10:70:4f:0b:76:39:
a4:61:ed:4f:b2:df:07:f0:34:6b:4a:01:f8:a9:b2:95:dc:7c:
71:ca:7d:9f:5e:c4:b1:f3:b3:b4:99:5d:74:36:9d:9b:80:5d:
aa:56:c7:1f:e0:ac:94:68:d8:b4:c6:3c:24:59:7a:c4:eb:13:
2f:3e:f1:42:71:ee:b9:66:70:af:19:97:46:f9:c5:0a:fa:f7:
21:b9:76:54:b0:db:9d:66:1b:6a:18:ec:62:c3:4b:a5:ef:75:
7a:b4:2d:14:0b:72:1f:51:fc:8b:59:10:74:c8:5e:43:1a:18:
76:36:a0:03:12:6e:ef:39:38:a8:f6:f4:ee:c1:3c:8c:2e:8b:
0e:0c:f4:e3:0c:a9:0a:24:65:64:47:2d:08:42:1b:eb:5a:e8:
48:66:c9:e7:63:2d:16:e6:76:08:09:fd:6f:8b:0f:2d:0a:6b:
03:cf:38:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:16 2024 by rpki-client on console-fra.rpki-client.org