Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/4ff27292da2e06ba99a9e6faea34b50e42be623e.roa
File: 4ff27292da2e06ba99a9e6faea34b50e42be623e.roa (raw, json)
Hash identifier: etY2mB1NDZ+kly9D2Jk49hYyU4/uDb0ShzblJpgQ/NU=
Subject key identifier: F0:FF:6B:C3:08:E8:93:85:C3:D2:94:BC:FB:6B:80:6C:DA:6B:5C:D5
Certificate issuer: /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial: 0846B8
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/4ff27292da2e06ba99a9e6faea34b50e42be623e.roa
Signing time: Tue 27 Feb 2024 00:41:02 +0000
ROA not before: Tue 27 Feb 2024 00:40:50 +0000
ROA not after: Tue 27 Feb 2029 00:40:50 +0000
asID: 6503
IP address blocks: 200.33.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542392 (0x846b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Validity
Not Before: Feb 27 00:40:50 2024 GMT
Not After : Feb 27 00:40:50 2029 GMT
Subject: CN=4ff27292da2e06ba99a9e6faea34b50e42be623e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:10:6c:53:36:68:9a:cf:b7:bc:81:c8:ae:
25:44:ca:77:c9:fe:35:98:5b:ec:ec:6f:8e:7e:25:
66:0d:21:79:c0:14:4c:dc:a8:55:61:e1:e2:01:bb:
a9:d7:58:92:10:46:ff:6c:3b:d2:d8:08:9e:4f:8b:
d4:83:08:13:a6:06:9d:e2:98:f9:af:00:b3:7d:62:
b1:3d:eb:6c:77:36:2a:28:5b:67:ce:7c:0e:a1:d9:
e5:fd:c1:2c:77:fe:c6:ba:dd:86:4f:97:93:ef:8d:
05:af:70:62:9b:66:f5:a9:ae:97:8f:c5:d4:68:31:
04:8a:a0:cb:4b:e2:df:69:da:f3:89:09:dc:b3:d4:
c7:95:ee:da:bd:ee:77:3e:97:a0:4d:07:4d:a1:1d:
03:43:18:a0:02:cd:36:45:4e:20:c4:eb:40:e9:67:
6d:e5:51:82:fa:ba:0a:d1:c6:20:b3:fc:3c:ca:48:
36:04:d8:60:a9:9f:07:61:ff:87:4f:86:92:a0:fd:
7f:b3:e7:3f:d1:3b:99:a8:b0:78:d8:2c:6a:f7:2b:
9d:b0:1d:9c:42:eb:fd:15:81:a6:98:03:46:a1:98:
a2:71:4b:bd:5d:59:9c:98:67:e1:35:0f:23:61:36:
c8:93:6e:48:58:18:73:c7:f7:5d:e6:e2:f3:a1:20:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:6B:C3:08:E8:93:85:C3:D2:94:BC:FB:6B:80:6C:DA:6B:5C:D5
X509v3 Authority Key Identifier:
keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/4ff27292da2e06ba99a9e6faea34b50e42be623e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.192.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:41:1d:11:53:79:a4:c7:fd:2a:7a:06:0a:f5:63:15:5a:63:
2c:16:63:9e:64:a2:4e:1c:4b:8b:a8:e8:be:d9:2a:b1:01:20:
58:4b:37:b6:a8:5f:7d:ac:8e:38:01:93:50:e8:2e:54:0e:10:
43:64:b3:76:c6:b5:53:34:ec:48:11:30:31:49:01:29:08:8f:
d2:00:96:4d:0e:f9:2b:09:4a:c7:38:ea:ac:db:e6:dc:2c:77:
93:14:a4:a5:a5:41:7d:0b:1e:a3:1f:10:5b:1c:25:8c:b3:71:
ce:e6:af:50:f4:3a:fa:be:6e:7f:9c:91:ec:cc:aa:ac:11:e6:
02:73:f8:e9:a0:3b:c5:e9:9d:5c:db:1a:24:de:c7:c0:f9:cc:
5b:e7:d9:e8:d8:1d:64:c2:cf:57:a2:27:ce:b5:c0:35:34:cb:
9a:3e:bf:64:da:07:6d:fd:03:e8:e4:06:4d:75:70:c5:47:4d:
c0:a6:0a:5c:b5:5f:97:5e:9d:b6:4f:bc:3b:8c:97:f9:f8:72:
bc:31:22:1f:18:ee:8a:70:8b:d3:20:89:6a:c1:99:5b:cc:fd:
e4:e8:4a:37:9c:86:e8:8d:46:9a:80:91:90:c1:29:a4:21:59:
1b:1b:d7:78:3a:72:39:0d:e1:68:fc:96:37:0a:c4:3b:84:47:
b4:8d:0b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:18 2024 by rpki-client on console-fra.rpki-client.org