Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/b40ac0b0bda7ada5db4a2096d8ba4eb679074dc0.roa
File: b40ac0b0bda7ada5db4a2096d8ba4eb679074dc0.roa (raw, json)
Hash identifier: kf7Smow3to4mSnXChFR8XBzfziAUW93ZaEIR+dqSu2E=
Subject key identifier: A8:2B:77:D4:5B:CD:05:1A:FE:CD:B3:69:E8:4B:33:A0:DD:40:B3:82
Certificate issuer: /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial: 0432EC
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/b40ac0b0bda7ada5db4a2096d8ba4eb679074dc0.roa
Signing time: Fri 20 Oct 2023 12:18:17 +0000
ROA not before: Fri 20 Oct 2023 12:18:17 +0000
ROA not after: Mon 20 Oct 2025 12:18:17 +0000
asID: 13424
IP address blocks: 200.91.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275180 (0x432ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
Validity
Not Before: Oct 20 12:18:17 2023 GMT
Not After : Oct 20 12:18:17 2025 GMT
Subject: CN=b40ac0b0bda7ada5db4a2096d8ba4eb679074dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:f1:20:23:d8:eb:d3:28:84:50:72:cb:5b:
0b:6e:08:9d:b4:d6:83:f0:1d:64:26:6d:c3:8f:d2:
3b:99:d3:4b:8a:0b:d7:f1:bd:11:2e:db:c8:17:0c:
ad:a0:21:92:ad:df:a3:8c:d1:f9:af:e7:aa:79:ff:
5d:ed:2a:88:1c:8b:f3:92:7e:f3:0d:f8:f9:f1:aa:
e5:9e:94:31:1e:dd:31:8c:6b:bf:27:4d:69:3f:2f:
ac:64:57:5d:fa:d5:ec:71:f7:57:f4:73:52:e6:e0:
d2:60:4e:19:01:e2:23:05:d8:78:ea:9d:e4:7f:84:
d1:c2:2d:3f:38:42:c4:3e:9e:3e:84:6e:fd:5d:0b:
29:e1:89:b9:fb:a1:92:da:ec:d6:3f:78:6e:60:9e:
1c:ac:27:5a:f0:27:c7:3a:5c:71:a5:db:a4:db:c7:
0a:fb:1a:70:b8:50:56:c7:11:c5:eb:dc:40:48:c1:
ae:7c:bb:ba:82:97:55:ad:7b:18:d5:4c:f1:61:ad:
e9:e4:02:2f:56:8f:f4:c2:2a:2e:7e:ca:f3:28:13:
c2:84:12:49:e8:2d:a6:5c:d9:cb:e5:61:99:d8:a7:
5f:6a:7f:1e:36:39:6c:82:74:46:c9:9d:bb:16:cc:
76:72:19:ee:ec:45:ed:51:96:c7:d3:fd:23:b7:69:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2B:77:D4:5B:CD:05:1A:FE:CD:B3:69:E8:4B:33:A0:DD:40:B3:82
X509v3 Authority Key Identifier:
keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/b40ac0b0bda7ada5db4a2096d8ba4eb679074dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.28.0/24
Signature Algorithm: sha256WithRSAEncryption
89:92:86:3c:71:a0:cd:d8:9c:21:9b:5c:76:49:79:1f:19:36:
6d:95:e8:05:29:e7:67:03:91:e5:ce:96:dc:30:52:14:bb:ef:
4e:c3:ff:b2:26:fe:6e:77:1f:c8:4d:24:93:a5:31:13:c6:6f:
2c:72:90:aa:9b:3f:6d:40:27:97:e4:50:04:53:f4:8c:0a:01:
72:29:4e:cf:a2:39:49:3e:f5:81:aa:80:a9:6e:d5:e4:50:45:
07:db:d8:a9:b7:e4:74:a1:41:3f:28:33:05:49:f5:4e:10:8b:
90:b8:79:56:23:e7:ae:73:13:47:72:5b:e1:8c:dc:9b:19:a7:
0a:02:36:19:53:21:1a:dd:b1:25:12:38:19:e0:dd:ec:1c:ce:
ef:c3:8f:6c:a0:57:9b:ab:78:42:2c:cc:35:11:c9:01:7d:9f:
1e:73:a7:40:d3:92:6e:83:78:e7:a4:28:56:2b:42:e9:7c:74:
52:09:25:30:d4:c1:b2:cb:6d:61:17:fc:88:68:8c:0d:c2:cb:
f5:89:3a:fe:c2:44:80:ad:32:c9:1d:a3:ae:47:9d:66:b8:59:
0c:19:b0:0d:e0:e1:25:a8:8a:12:4f:94:64:21:72:fb:9e:67:
6c:ff:e9:2b:80:b0:0c:4f:23:43:00:9e:b0:d3:25:95:e7:da:
4e:95:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org