Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/a203ee46a8469034d2c19577beae57d09c9c0b82.roa
File: a203ee46a8469034d2c19577beae57d09c9c0b82.roa (raw, json)
Hash identifier: 2ONi84/wNc+qM7wU59TVFNAiBZ/AnOht40qd0p6NyvQ=
Subject key identifier: F4:89:90:8B:15:8A:5B:19:FF:2D:47:21:EC:AC:DC:E7:24:B3:E0:72
Certificate issuer: /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial: 20F8DB
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/a203ee46a8469034d2c19577beae57d09c9c0b82.roa
Signing time: Tue 25 Apr 2023 15:18:39 +0000
ROA not before: Mon 24 Apr 2023 15:18:38 +0000
ROA not after: Fri 25 Apr 2025 15:18:38 +0000
asID: 28041
IP address blocks: 200.125.133.0/24 maxlen: 24
200.125.142.0/24 maxlen: 24
200.125.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160859 (0x20f8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
Validity
Not Before: Apr 24 15:18:38 2023 GMT
Not After : Apr 25 15:18:38 2025 GMT
Subject: CN=a203ee46a8469034d2c19577beae57d09c9c0b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:d5:be:e9:d7:72:37:6e:e1:65:fd:15:0b:
69:28:2d:de:f8:14:46:38:e1:41:3f:d5:ca:39:fa:
c7:e4:72:5d:d5:3e:95:c1:e5:30:88:68:1a:be:87:
0d:82:2f:5c:ab:4f:65:35:07:58:f6:6b:2d:eb:53:
35:ca:86:37:50:e2:31:0c:ca:e2:07:a4:74:ec:78:
6e:40:15:e6:a3:e8:fd:15:b2:fc:9c:f6:94:12:e3:
97:db:c5:0c:d8:57:2d:86:7c:90:85:bd:b8:a6:7c:
32:e3:00:c1:f5:25:4a:25:a4:66:40:ce:e8:76:57:
7e:ff:55:7e:3a:f9:2e:bc:cd:42:99:b8:00:48:4e:
b1:9c:b1:9b:c0:54:89:65:79:d4:f6:ee:c8:ba:67:
cd:9f:47:01:b3:b5:50:e8:e3:04:d3:34:c6:39:01:
a6:ee:d8:94:78:e0:ba:88:01:81:d4:e9:f7:dc:bd:
3d:22:b5:5d:64:e1:38:b8:a0:58:b0:b1:5e:24:e6:
2e:1c:32:6b:1a:3a:8a:98:67:fa:f6:a4:fa:a3:56:
eb:67:6b:06:45:d2:8e:fa:75:b5:77:ef:1f:23:9d:
73:b7:e2:63:7c:85:51:fd:0a:b4:be:e0:ea:28:77:
4d:5f:c4:ed:54:e1:3a:c8:96:14:1d:05:4f:b9:53:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:90:8B:15:8A:5B:19:FF:2D:47:21:EC:AC:DC:E7:24:B3:E0:72
X509v3 Authority Key Identifier:
keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/a203ee46a8469034d2c19577beae57d09c9c0b82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.133.0/24
200.125.142.0/24
200.125.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:16:32:cf:80:5c:45:8d:60:8b:82:39:78:e0:cf:9e:30:0c:
28:c4:d1:15:0d:3b:65:dc:e6:a9:05:e7:45:49:db:80:a7:b8:
0b:01:bb:d3:e4:a8:1a:05:ea:31:f5:8a:77:18:aa:cc:79:c6:
20:3d:bb:2d:48:25:72:d6:df:2b:6b:3a:ef:1f:0e:83:d5:36:
3a:4c:63:ef:55:ac:a5:0a:9f:25:cd:2c:7b:33:ce:18:db:4a:
34:74:a9:2e:3a:c7:6d:25:93:ab:45:5d:6c:49:b6:e3:9f:92:
6a:af:37:18:03:de:68:85:0f:49:d2:05:ac:66:f2:b1:83:74:
86:47:85:4a:a5:c9:d2:48:93:6b:e0:52:65:40:36:a0:18:63:
bb:5b:d3:17:dd:d5:5b:0b:81:0e:dd:73:76:c0:75:49:99:50:
f8:34:72:82:1f:c6:fc:72:bb:84:38:e5:33:dc:8a:ff:21:ed:
96:ca:96:61:e6:d9:3b:d8:23:bd:55:20:8d:aa:fe:3f:02:b5:
aa:9f:04:6b:94:01:44:92:6e:a7:7d:03:f7:13:06:f1:fa:20:
32:6f:54:7b:fc:f2:e3:ed:b0:33:97:5b:b8:89:d6:05:58:e8:
47:30:16:74:6c:ee:bd:a5:8f:6f:b5:b7:dd:9f:d4:a3:28:80:
7c:9c:86:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org