Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/33370b76cdfa86ff97e04c493004c86bc25acaa1.roa
File: 33370b76cdfa86ff97e04c493004c86bc25acaa1.roa (raw, json)
Hash identifier: 9zjBoHFqvFG0vL/mOlil8MTZ5V0gYfDxpmRWQe6Xl0s=
Subject key identifier: 77:E6:1C:F2:08:39:A4:20:59:FD:B1:16:7E:44:41:D4:41:54:DB:48
Certificate issuer: /CN=29faf9dda9a05093ff92d48d0018f02866d6716b
Certificate serial: 232D
Authority key identifier: 93:2C:62:78:33:D5:C1:86:D7:C3:CF:A4:BB:29:4B:B9:8B:E5:EA:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29faf9dda9a05093ff92d48d0018f02866d6716b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/33370b76cdfa86ff97e04c493004c86bc25acaa1.roa
Signing time: Thu 02 Feb 2023 17:47:56 +0000
ROA not before: Wed 01 Feb 2023 17:46:57 +0000
ROA not after: Sun 02 Feb 2025 17:46:57 +0000
asID: 16509
IP address blocks: 200.33.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9005 (0x232d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29faf9dda9a05093ff92d48d0018f02866d6716b
Validity
Not Before: Feb 1 17:46:57 2023 GMT
Not After : Feb 2 17:46:57 2025 GMT
Subject: CN=33370b76cdfa86ff97e04c493004c86bc25acaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:40:6a:08:5e:2f:67:e4:aa:1a:78:1d:a5:f8:
39:e4:6c:e4:ec:4e:84:13:b6:3e:1c:01:43:04:7c:
52:45:2d:89:55:dd:e2:8b:c0:e1:41:43:74:db:6e:
c7:78:13:d4:da:6b:34:9c:b0:80:31:78:bc:d8:22:
17:37:db:06:6d:a1:fe:fa:f1:84:db:62:16:7e:28:
c1:d9:41:af:8f:4e:ea:14:a6:ff:e6:cd:53:e5:f9:
4b:3f:9e:ba:1c:ee:08:f6:1c:c7:65:45:ad:fb:39:
ab:90:31:ed:86:aa:04:3d:04:d0:0e:ec:90:88:d8:
cc:86:ee:a4:5e:cf:80:f6:d7:5f:55:23:c3:9a:0d:
ef:1c:12:09:a4:48:8c:48:a9:21:ed:3c:08:21:46:
e4:a6:67:c8:92:64:cb:2a:b6:27:44:36:ad:04:30:
bd:5b:2c:16:83:ea:b9:6e:25:c7:08:bd:18:41:04:
87:ad:f3:22:80:8c:00:e2:ce:6e:2b:5f:ce:82:33:
ff:9f:c9:d8:8e:bf:a5:ab:07:f9:9a:a7:f8:af:48:
03:c6:1f:31:bd:62:19:4d:16:d2:64:34:fe:ef:d3:
f1:23:0f:1d:e1:21:fe:20:88:14:31:e7:91:e0:a1:
d5:52:fa:02:c5:5e:d7:a4:38:2a:fc:ac:5e:49:e1:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E6:1C:F2:08:39:A4:20:59:FD:B1:16:7E:44:41:D4:41:54:DB:48
X509v3 Authority Key Identifier:
keyid:93:2C:62:78:33:D5:C1:86:D7:C3:CF:A4:BB:29:4B:B9:8B:E5:EA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29faf9dda9a05093ff92d48d0018f02866d6716b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/33370b76cdfa86ff97e04c493004c86bc25acaa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/29faf9dda9a05093ff92d48d0018f02866d6716b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.7.0/24
Signature Algorithm: sha256WithRSAEncryption
07:50:23:5c:b3:08:00:a1:1f:cd:28:e7:48:79:16:db:54:df:
7d:d8:3f:9d:5f:24:e0:be:ae:96:c2:f8:34:f2:a2:83:f5:9c:
c2:34:1a:21:ea:0c:28:a3:9b:12:b8:af:07:22:7d:d1:5b:00:
a6:6a:e3:5f:6b:60:88:e5:37:c6:16:ce:4d:54:6f:9b:b5:f3:
df:e9:2f:9c:db:e1:d3:4c:f2:c8:52:89:51:09:42:40:29:8c:
fd:40:64:7f:0a:be:76:e8:b1:09:0a:73:2f:69:8f:1b:80:90:
c6:84:b4:99:5a:db:3d:c9:d7:94:6c:62:20:76:3b:5b:e1:70:
6b:00:6c:5d:bf:74:39:74:32:be:cd:26:64:eb:2f:ac:ff:b6:
2f:d0:cf:1b:27:a7:b3:65:e7:60:cd:07:4f:5e:a2:ca:ec:7b:
d6:13:8a:b9:ea:64:34:15:9e:57:35:99:f0:16:31:e0:42:86:
d5:4f:e6:93:f0:2c:cc:54:c4:7e:2a:bf:42:08:60:d3:6f:e5:
ee:9d:d8:15:1d:51:09:85:c8:d8:e6:43:cb:8a:14:ff:d6:54:
b3:38:d8:d6:2f:21:90:6a:c4:7d:31:88:f2:63:c7:8a:3b:6d:
e3:26:82:8f:2d:ff:37:b7:15:7f:0b:6e:86:e7:18:83:07:a4:
18:3a:6a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org