Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/50cf72da3e84326f2f74fde742f58929cfd3f026.roa
File: 50cf72da3e84326f2f74fde742f58929cfd3f026.roa (raw, json)
Hash identifier: lHfaXJvqFfYML/zHlwDZtqx6bTeh8vMNq2ACXUlZmok=
Subject key identifier: 9C:80:C1:41:ED:B8:8F:FB:34:F7:7C:6C:46:EA:FA:C5:F3:5A:AE:17
Certificate issuer: /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial: 20FBD1
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/50cf72da3e84326f2f74fde742f58929cfd3f026.roa
Signing time: Tue 25 Apr 2023 15:18:40 +0000
ROA not before: Mon 24 Apr 2023 15:18:38 +0000
ROA not after: Fri 25 Apr 2025 15:18:38 +0000
asID: 27947
IP address blocks: 200.125.128.0/24 maxlen: 24
200.125.130.0/23 maxlen: 24
200.125.133.0/24 maxlen: 24
200.125.142.0/24 maxlen: 24
200.125.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161617 (0x20fbd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
Validity
Not Before: Apr 24 15:18:38 2023 GMT
Not After : Apr 25 15:18:38 2025 GMT
Subject: CN=50cf72da3e84326f2f74fde742f58929cfd3f026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:99:d3:bd:1d:78:ce:c6:56:01:a1:04:5b:
ef:8d:ba:f9:65:94:41:af:d5:c3:bc:7e:03:99:5b:
87:91:77:e1:08:6e:1e:9d:ec:4f:c0:24:a9:1e:7a:
6e:0f:18:25:a0:54:72:2e:80:9b:2e:0d:f0:fb:27:
d6:bc:9d:f4:af:bd:41:50:18:89:5e:c1:4b:83:e8:
ff:6a:4f:fc:fa:9d:82:a4:6c:41:34:b3:52:89:57:
6d:ec:bc:17:5c:7e:b0:3a:2a:08:e1:28:a8:15:4c:
5b:c8:e7:c6:93:2f:29:fe:ec:c6:47:04:1a:55:d3:
a2:db:a1:51:54:e2:d4:a0:4c:0f:b3:63:70:9f:91:
5c:7d:e1:02:e0:eb:49:69:8b:fd:46:2a:ce:79:33:
b2:14:b1:09:65:fb:cb:9b:24:1c:09:18:00:75:35:
90:0b:77:d3:4d:e7:aa:e6:42:f8:5a:7e:57:93:e5:
2d:e8:79:d8:91:12:cd:84:c1:2b:c8:df:69:52:2e:
0e:70:a7:e1:2b:48:fb:d8:14:65:5c:a2:01:20:47:
97:ea:55:48:2a:a8:a8:80:a1:08:a0:f7:19:fa:09:
0a:86:40:bd:bc:04:47:66:bc:af:df:78:ba:f8:a4:
80:c5:c6:ac:f4:25:85:f0:02:a3:76:19:be:3a:e7:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:C1:41:ED:B8:8F:FB:34:F7:7C:6C:46:EA:FA:C5:F3:5A:AE:17
X509v3 Authority Key Identifier:
keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/50cf72da3e84326f2f74fde742f58929cfd3f026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.128.0/24
200.125.130.0/23
200.125.133.0/24
200.125.142.0/24
200.125.157.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e9:66:5f:1a:4d:d7:13:8b:3b:54:7a:82:bc:bb:fa:78:69:
2d:75:85:8b:5a:27:b4:2d:bb:95:93:41:00:ca:05:1d:66:e9:
69:73:f8:71:1a:0e:d7:b3:d0:3d:09:85:ee:5e:91:4d:6d:bb:
aa:0c:0e:6a:c4:51:e3:f4:cf:60:af:cd:65:a8:da:07:d0:a0:
ce:87:da:10:96:b0:5f:d4:42:25:a7:f0:9b:d9:03:b4:3b:3f:
db:76:20:74:dd:aa:95:09:1c:b9:35:f5:7e:63:a5:c9:62:40:
8d:be:3a:18:0e:c6:bb:b0:70:fe:7d:1d:71:be:e9:9f:a6:44:
6f:c1:63:8e:60:a2:11:81:35:c2:f4:d7:bd:23:bb:c3:2e:20:
71:9d:ac:1f:23:62:81:5d:54:17:d3:52:42:bb:51:89:ef:63:
a5:7b:4a:84:47:f7:35:6c:f1:54:af:92:db:9c:5b:2a:ed:37:
5e:5c:4c:a5:76:f4:64:f9:38:1f:1c:cb:12:8f:00:7d:86:19:
45:db:fa:4c:82:39:ba:f7:c6:aa:5f:5d:67:e3:98:19:f1:a5:
db:b9:be:41:ba:cf:93:29:34:3c:7e:b4:25:ce:bd:c6:31:22:
7c:12:d8:74:cf:12:d1:54:16:c5:a9:54:5e:82:61:86:80:69:
fd:86:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org