Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/bd3ae913220bbc8d9381ba8cfb7f156dc05b99cc.roa
File: bd3ae913220bbc8d9381ba8cfb7f156dc05b99cc.roa (raw, json)
Hash identifier: Z5rFnVjTcH8hhg18tcCn/WzaJr7jbyNYSOCihWkaK8U=
Subject key identifier: 49:E3:23:68:CA:AC:F4:B7:B0:F2:E0:6F:A5:CF:A2:D4:3D:53:A6:C2
Certificate issuer: /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial: 091F94
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/bd3ae913220bbc8d9381ba8cfb7f156dc05b99cc.roa
Signing time: Fri 15 Mar 2024 12:47:32 +0000
ROA not before: Fri 15 Mar 2024 12:47:22 +0000
ROA not after: Thu 15 Mar 2029 12:47:22 +0000
asID: 6503
IP address blocks: 200.23.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597908 (0x91f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Validity
Not Before: Mar 15 12:47:22 2024 GMT
Not After : Mar 15 12:47:22 2029 GMT
Subject: CN=bd3ae913220bbc8d9381ba8cfb7f156dc05b99cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:99:1c:12:c0:0b:0b:4b:aa:f3:8f:4b:db:
82:38:f4:df:19:6f:85:a4:b7:1a:e5:ed:54:6a:c1:
49:58:26:a9:fe:98:72:a2:0d:eb:fe:86:a1:11:58:
7c:1e:2f:bf:e9:c4:d3:51:cd:c9:35:35:4e:a9:c6:
ec:8b:a2:a7:fd:dc:22:ec:7c:f3:0d:f5:55:d2:a5:
41:d5:1f:e7:af:3c:76:b9:23:f7:42:28:5d:1b:47:
05:01:96:7c:ff:c1:e6:63:a0:ec:22:0c:f0:b4:a3:
c9:fb:4f:b8:ad:9f:1c:f0:44:da:1b:e0:18:27:96:
f8:93:4b:d1:e5:73:02:6e:9f:51:78:74:c1:04:0e:
e2:98:3b:03:e1:e5:a0:a7:52:5c:cc:95:9e:30:06:
dc:a5:96:d1:68:e0:4a:f4:ae:2c:77:0f:27:d7:41:
9f:30:c3:e7:3d:8b:e8:b0:2b:b5:b5:56:e2:53:a8:
05:07:3c:cd:ee:1a:f7:f2:d1:d5:fd:1e:bc:d6:d0:
84:c5:d9:de:69:34:03:ad:f4:60:12:67:1d:18:b3:
e7:2f:79:b7:77:54:ab:5a:d5:e2:bb:b6:a7:13:bb:
0c:31:50:bd:ab:88:85:38:e1:73:91:92:15:ae:49:
dc:1e:94:05:f4:65:4f:e6:1a:69:05:8b:7b:20:49:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:23:68:CA:AC:F4:B7:B0:F2:E0:6F:A5:CF:A2:D4:3D:53:A6:C2
X509v3 Authority Key Identifier:
keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/bd3ae913220bbc8d9381ba8cfb7f156dc05b99cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.72.0/23
Signature Algorithm: sha256WithRSAEncryption
00:f1:a0:a6:f4:34:5e:05:19:02:14:95:b1:42:5c:9b:8f:3b:
a5:fc:bd:4d:a6:cd:bd:82:68:f4:5b:a7:23:1a:a0:92:d9:2d:
c2:48:63:05:58:18:b5:7c:d0:d0:e6:8b:e5:b3:b9:15:e0:d2:
88:7d:be:7a:0e:a5:34:d2:31:be:a1:a3:60:45:a7:37:96:56:
8f:b6:6f:73:4d:12:b9:de:8f:41:a2:d2:26:48:90:57:93:00:
a5:d3:cb:db:da:9c:4f:3b:ab:11:65:ad:ac:dc:5e:2d:a9:f4:
b7:66:20:ec:0d:e1:52:48:f4:1b:a3:76:6b:48:a6:10:aa:c6:
ae:11:9a:60:2d:36:57:c6:74:c6:17:f5:54:41:70:f6:ae:6c:
0c:18:cf:04:a5:26:77:48:d4:af:df:cb:c6:b4:f6:22:83:53:
cc:82:26:67:46:0c:07:ad:3f:96:d5:96:e2:74:36:03:12:f5:
2a:ab:1e:cc:ee:63:ed:50:b1:69:bb:13:a5:f7:23:8a:86:f6:
ae:f2:5f:47:04:c2:b1:99:65:5a:01:c7:c7:4d:cc:30:27:d9:
f3:b1:41:b6:30:f0:1c:bd:2d:43:a9:3c:fa:ca:22:da:02:b8:
5f:ae:61:bd:7a:16:b7:42:48:7e:d8:44:45:08:b1:37:84:7d:
3e:62:13:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org