Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/3f9c72409eac0d0facee6c29291c619b185420b9.roa
File: 3f9c72409eac0d0facee6c29291c619b185420b9.roa (raw, json)
Hash identifier: ljGGDKc1sXb0UcAJIgPed6Y865Loe9L/KGX6EiT56MA=
Subject key identifier: 32:DD:AC:5F:54:DB:DB:E8:ED:3B:CE:16:BD:D9:98:FC:A0:3B:BA:9A
Certificate issuer: /CN=2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43
Certificate serial: 063EAC
Authority key identifier: 0C:0D:26:81:4E:78:5C:F0:41:C2:C4:45:DC:E7:13:52:33:C6:2B:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/3f9c72409eac0d0facee6c29291c619b185420b9.roa
Signing time: Fri 15 Dec 2023 21:37:41 +0000
ROA not before: Fri 15 Dec 2023 21:37:41 +0000
ROA not after: Mon 15 Dec 2025 21:37:41 +0000
asID: 19905
IP address blocks: 200.10.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409260 (0x63eac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43
Validity
Not Before: Dec 15 21:37:41 2023 GMT
Not After : Dec 15 21:37:41 2025 GMT
Subject: CN=3f9c72409eac0d0facee6c29291c619b185420b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:fc:a9:af:5d:a4:93:4a:21:17:23:33:d9:
df:3d:a7:6f:cd:b8:54:85:80:7a:25:f8:21:26:49:
7f:9c:40:be:66:ca:e0:0d:e1:1d:bf:40:99:80:98:
9c:c8:b3:75:e4:6a:a8:2d:db:3f:44:b7:a4:67:a5:
0e:41:4a:41:07:9a:03:61:de:4a:f5:30:d3:f8:b6:
00:92:03:7d:0e:4a:63:29:08:b9:0f:52:5a:ef:f1:
cd:3a:71:0c:1a:1c:3a:ec:2d:c8:39:91:96:14:ec:
3f:cb:7f:c3:17:18:ff:30:71:e6:34:0d:62:ee:eb:
bf:d3:b0:30:85:9d:90:a4:af:dc:b0:0d:f8:e0:5d:
63:2e:63:81:1e:b4:a7:78:98:ba:c0:33:13:88:79:
b8:50:5c:f6:16:71:32:e9:7a:5a:f7:33:e9:13:c7:
25:03:da:93:c1:9b:8c:50:a7:2b:78:d0:1f:8e:c6:
2e:9e:1d:65:a1:9a:3c:c4:8b:6a:fc:18:10:b0:bf:
8d:b9:d1:6a:ca:de:a1:bb:a3:b3:62:36:8f:da:4e:
64:f4:43:0a:3c:cc:1f:f2:2d:56:86:53:98:be:6e:
e8:32:59:5b:ab:47:7d:9c:c2:04:b8:4b:97:39:d2:
4b:33:90:58:74:6d:f8:2f:f6:90:fd:72:8c:14:3c:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DD:AC:5F:54:DB:DB:E8:ED:3B:CE:16:BD:D9:98:FC:A0:3B:BA:9A
X509v3 Authority Key Identifier:
keyid:0C:0D:26:81:4E:78:5C:F0:41:C2:C4:45:DC:E7:13:52:33:C6:2B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/3f9c72409eac0d0facee6c29291c619b185420b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:47:e9:2a:bf:c6:1c:6a:05:d9:38:62:89:48:b5:90:4e:3f:
00:2b:48:a4:8d:c7:94:5b:cf:52:14:47:cb:5a:dd:3e:68:4f:
b6:f5:b7:77:5c:c9:76:35:bb:07:5b:0e:0d:84:8a:78:d2:ca:
dd:52:60:6c:74:a1:3f:c3:c7:81:74:4e:d0:17:d6:d4:54:04:
6a:d7:53:22:c5:80:f1:73:2c:ac:fd:80:26:9f:5b:80:9d:7c:
cd:72:8f:ef:65:bc:d4:d6:6f:39:83:3c:67:0d:ba:1e:00:65:
ce:35:17:3a:e9:e7:ca:ec:8f:4f:c5:3d:bc:43:9b:8f:ee:f2:
69:2c:44:b8:22:09:08:1b:cb:ef:46:c4:df:f6:61:4d:ee:54:
1a:1d:8c:66:1c:1f:70:cb:9f:ea:c4:ca:c7:b4:08:68:12:0f:
8b:0a:50:70:8a:32:f2:c7:2b:10:c4:fc:3f:3e:54:45:b5:48:
15:54:84:99:a2:83:15:71:8a:08:b4:de:4f:fc:92:4f:be:08:
66:19:6a:f5:a7:16:0a:9f:ae:79:3b:10:ab:26:0b:c9:fd:e6:
57:28:60:13:eb:6c:7b:29:55:af:66:e1:d4:0d:eb:15:c2:62:
7e:00:3b:8b:41:a8:48:ad:6d:b9:20:07:8f:5a:0a:b5:da:af:
ca:0e:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org